Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

$15 Dedicated servers from OVH

ruchirablog.com

Post reply on HN
Print view View original

61–70 of 133 posts

Re: $15 Dedicated servers from OVH

#61

Post by mahyarm »

tptacek wrote: post #47
maximegarcia wrote: post #39

Earlier quoted context omitted.

This for maintenance reporting. How do the hell they know if one of your HD has died ? It's not mandatory. And the ssh key added enforces the source IP address of requests.

One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server given an authorization key, provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Root SSH logins don't seem like a particularly good solution for this problem.

Why don't you use SNMPv3, which is purpose built for this stuff?

https://en.wikipedia.org/wiki/Simple_Network_Management_Prot...

Re: $15 Dedicated servers from OVH

#62

Post by tptacek »

mahyarm wrote: post #61
tptacek wrote: post #47

Earlier quoted context omitted.

One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server given an authorization key, provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Root SSH logins don't seem like a particularly good solution for this problem.

Why don't you use SNMPv3, which is purpose built for this stuff? https://en.wikipedia.org/wiki/Simple_Network_Management_Prot...

And then why don't I find a large glass jar filled with live wriggling cockroaches and compete with my coworkers to see how many of them I can swallow whole?

SNMP is awful. SNMP implementations are scarier than web apps (though admittedly not as scary as SSH logins). SNMP is harder to secure. It would be much harder for customers to provide their own trusted implementation of SNMP. I could go on.

Re: $15 Dedicated servers from OVH

#63

Post by tptacek »

hosay123 wrote: post #60
tptacek wrote: post #58

Earlier quoted context omitted.

Every single one of your numbered points. 1) discard REMOTE SHELL solely for OS statistics 2) write your own TINY WEB APPLICATION SERVED BY NGINX/APACHE 3) run it as SOME USER THAT can read STATISTICS DATA 4) BE safer

1. > One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server > given an authorization key 2. > provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Implies 3: entire point of the implementation is to read sensors, which requires root, or further messing with the security properties of the base system (e.g. sudo), and ex…

I have no idea what you're talking about or who you think you're arguing with but it isn't me.

Especially amusing that whoever would say these crazy things you're saying would still be better off than giving remote root SSH away for stats collection.

Sheesh.

Re: $15 Dedicated servers from OVH

#64

Post by hosay123 »

tptacek wrote: post #63
hosay123 wrote: post #60

Earlier quoted context omitted.

1. > One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server > given an authorization key 2. > provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Implies 3: entire point of the implementation is to read sensors, which requires root, or further messing with the security properties of the base system (e.g. sudo), and ex…

I have no idea what you're talking about or who you think you're arguing with but it isn't me. Especially amusing that whoever would say these crazy things you're saying would still be better off than giving remote root SSH away for stats collection . Sheesh.

It's OK, we all give bad advice sometimes. You clearly just advocated replacing SSH with a custom HTTP server that effectively always requires root, and furthermore to advocate users mess with this root-running code. I don't understand why you can't see this.

Re: $15 Dedicated servers from OVH

#65

Post by nknight »

hosay123 wrote: post #64
tptacek wrote: post #63

Earlier quoted context omitted.

I have no idea what you're talking about or who you think you're arguing with but it isn't me. Especially amusing that whoever would say these crazy things you're saying would still be better off than giving remote root SSH away for stats collection . Sheesh.

It's OK, we all give bad advice sometimes. You clearly just advocated replacing SSH with a custom HTTP server that effectively always requires root, and furthermore to advocate users mess with this root-running code. I don't understand why you can't see this.

He did none of those things. None of the code he suggested requires root. Some hardware information collection may require root (though darn little of it in Linux, at least), but that's entirely independent of the question of how to expose it to the provider.

Re: $15 Dedicated servers from OVH

#66

Post by tptacek »

hosay123 wrote: post #64
tptacek wrote: post #63

Earlier quoted context omitted.

I have no idea what you're talking about or who you think you're arguing with but it isn't me. Especially amusing that whoever would say these crazy things you're saying would still be better off than giving remote root SSH away for stats collection . Sheesh.

It's OK, we all give bad advice sometimes. You clearly just advocated replacing SSH with a custom HTTP server that effectively always requires root, and furthermore to advocate users mess with this root-running code. I don't understand why you can't see this.

Hey, 'nknight, you appear to be hellbanned (starting 3 posts back). It seems to happen randomly to some people; you should just ping 'pg about it.

Edit Don't blame you. The hellbanning system Does Not Seem To Work.

Re: $15 Dedicated servers from OVH

#67

Post by GreySyntax »

wut42 wrote: post #40

I'm french and I've been using low-cost offers from OVH (Kimsufi) or Illiad (Online.net) since a couple of years. I just have ONE objection: If you plan to do something professional with them, just, don't. For them, every client is dispensable (even if you rent 200 servers or more). They won't hesitate a single second to delete your server if they have a small problem with you (for example, getting DDoS'd). OVH have…

I make strange DNS and connection requests constantly and have never had an issue with OVH, I think there's more to the story than that

Re: $15 Dedicated servers from OVH

#68

Post by nknight »

tptacek wrote: post #66
hosay123 wrote: post #64

Earlier quoted context omitted.

It's OK, we all give bad advice sometimes. You clearly just advocated replacing SSH with a custom HTTP server that effectively always requires root, and furthermore to advocate users mess with this root-running code. I don't understand why you can't see this.

Hey, 'nknight, you appear to be hellbanned (starting 3 posts back). It seems to happen randomly to some people; you should just ping 'pg about it. Edit Don't blame you. The hellbanning system Does Not Seem To Work.

Yeah, thanks, but I knew almost as soon as it happened months ago (I only browsed HN logged in on one device), just thought I'd see if it'd been reversed. Apparently not.

I'm not going to go begging to the man responsible for this degrading method of community management. I'll be better off continuing to not spending the time posting on HN anyway.

Re: $15 Dedicated servers from OVH

#69

Post by WayneDB »

hosay123 wrote: post #60
tptacek wrote: post #58

Earlier quoted context omitted.

Every single one of your numbered points. 1) discard REMOTE SHELL solely for OS statistics 2) write your own TINY WEB APPLICATION SERVED BY NGINX/APACHE 3) run it as SOME USER THAT can read STATISTICS DATA 4) BE safer

1. > One way would be to publish a HTTP/JSON API for fetching a specific set of stats from a server > given an authorization key 2. > provide a reference implementation, and allow customers to build their own if they're not comfortable with that. Implies 3: entire point of the implementation is to read sensors, which requires root, or further messing with the security properties of the base system (e.g. sudo), and ex…

I do agree with your larger point that building your own here is undesirable, however the web server wouldn't have to have root by using IPC or other kinds of tricks.

In any case, wouldn't it be even more secure if the server just pushed stats outwards (syslog anyone?) instead of needing to accept any kind of commands via SSH/HTTP/S or otherwise?

Re: $15 Dedicated servers from OVH

#70

Post by lousy_sysadmin »

tlack wrote: post #15
shimon_e wrote: post #11

Earlier quoted context omitted.

Unlike OVH, server4you use nasty 5400rpm hard drives on their low end. I actually am waiting for someone to come out with a low end server with a small SSD drive. I need performance not storage.

RAMnode has been pretty good for very fast mid-range SSD VPSes (watch their Twitter; they have 30% off specials all the time). SoftLayer also supports SSDs but they aren't low end, for the most part. I'm a happy customer of both but an employee/beneficiary of neither.

Check ServerBear for better comparison/coupon/benchmark etc.

http://serverbear.com/9756/ramnode

RamNode best coupon actually offer 31% off all the time! I'm using LEB service extensively as I'm offering budget Managed WordPress Hosting.

http://kittysensei.com

Performance wise, RamNode is among the best LEB provider along with company like BuyVM, ServerDragon and Hostigation.

Post reply on HN