Live data from Hacker News

How to set up a safe and secure Web server

arstechnica.com

21–30 of 148 posts

Re: How to set up a safe and secure Web server

#21

I think it's time articles like these start suggesting an infrastructure as code product, like chef or puppet, to do the heavy lifting. I feel like doing this stuff by hand should be considered insecure and outdated..

Any other tools or resources you'd recommend to a newbie web server admin? I've checked out a few books but it's hard to know what's being used in industry.

Re: How to set up a safe and secure Web server

#22
post #13
post #8

Earlier quoted context omitted.

Did you read the article? You still need to setup nginx or apache or whatever on EC2. Page 2 onwards actually deals with these things

Yeah. So why pay $270?

Perhaps you need storage in terabytes for something. 12TB on your own machine is relatively cheap. On AWS, not so much. Read speed is another factor.

Re: How to set up a safe and secure Web server

#23

Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?

It really depends on the ISP. A static IP generally has to be requested, and at a cost. Additionally, some ISP's like to be restrictive blocking inbound low ports such as 25, 80, 443 - so hosting a web server off your home connection might be a problem depending on the ISP.

Re: How to set up a safe and secure Web server

#24
post #20
post #12

Better hardware would be an HP Microserver (which should win the contest for "worst URL ever"): http://h10010.www1.hp.com/wwpc/us/en/sm/WF05a/15351-15351-42... Has ECC RAM support. Takes 4 3.5" hard disks, and runs very quiet and cool.

That is a truly frightening URL, makes me wonder what kind of CMS they are running that generates 100 character long URI (Vignette?).

The HP Blog URLs are scary as well..

Re: How to set up a safe and secure Web server

#25

"...being locked to IIS as a Web server (or dependent on crippled Windows ports of better Web servers) means you'll be playing in the bush leagues. IIS is found running many huge and powerful websites in the world, but it's rarely selected in a vacuum..." I sense a little bit of bias. As a multiplatform developer I can think of a number of reasons why someone might opt to go the Windows Server route. ASP.NET MVC 4 is…

Do those versions let you use the products on production web servers though?

Isn't that what "full versions" means?

Re: How to set up a safe and secure Web server

#26
post #12

Better hardware would be an HP Microserver (which should win the contest for "worst URL ever"): http://h10010.www1.hp.com/wwpc/us/en/sm/WF05a/15351-15351-42... Has ECC RAM support. Takes 4 3.5" hard disks, and runs very quiet and cool.

I looked at getting one of those. However, it seems like HP is sunsetting the Microserver line, which is a real shame.

Re: How to set up a safe and secure Web server

#27
post #16

Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?

If you have a dynamic IP, Dyn offers DNS services[0] that let you tie a domain to it through them. I believe it requires you to install something on your machine that monitors your IP and reports it back. Otherwise, you just use your IP and make sure to edit the DNS yourself when it changes. [0]: http://dyn.com/dns/

That would be something like: http://dyn.com/support/clients/linux/ddclient/

Re: How to set up a safe and secure Web server

#28
post #23

Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?

It really depends on the ISP. A static IP generally has to be requested, and at a cost. Additionally, some ISP's like to be restrictive blocking inbound low ports such as 25, 80, 443 - so hosting a web server off your home connection might be a problem depending on the ISP.

It's specifically against residential Comcast ToS, for example, to host a publicly-accessible website.
Post reply on HN