Ndinoda kugovera zvimwe zvinoonekwa nezve kukosha kana kusakosha kwechinhu chakadai sedhizaini yedhizaini yebhizimusi imwe-server yewebhu purojekiti ine akanyanya chikamu-nguva maneja. Nyaya yakatanga makore mashoma apfuura, apo shamwari dzeshamwari dzakandikumbira kuti ndibatsire mukutenga bhizinesi - saiti yenhau - kubva pakuona kwehunyanzvi. Zvaive zvakafanira kuongorora zvishoma pane izvo zvaishanda pane chii, kuve nechokwadi chekuti zvese zvinodiwa zvakatamiswa muchimiro chakakodzera uye vhoriyamu, uye nekuchenjera kuona izvo zvingagadziriswe.
Chibvumirano chakapera, mutambi weviolin akanga asisadiwi. End. Kwete saizvozvo.
Iyo saiti yakamhanya pane mbiri-musimboti 4-GB VM paLinode, pane imwe mossy Debian5 ine uptime yemazuva mazana mana uye rondedzero yakadaro yemapakeji asina kuvandudzwa. Webhu chikamu pane yakazvinyora CMS, nginx, php400 FPM, mysql tuned Percona. Chaizvoizvo, yakashanda.
Mukuwirirana nehurukuro neni, muridzi mutsva akanga achitsvaga mugadziri wepurogiramu kuti aunze chirongwa kune zvinotarisirwa. Found. Iye programmer akaongorora traffic uye mavhoriyamu uye akafunga kuti aiziva nzira yekukwirisa nekugadzirisa mutengo. Akatamisa saiti yese kune 700-ruble yakagovaniswa hosting inotungamirwa neyake yakajairika IS****er. Mazuva mashoma gare gare pakave neimwe runhare kubva kumuridzi: "zvese zviri kunonoka uye zvinoita sekunge takatyoka." Ndakaedza kugadzirisa mamiriro acho kuburikidza nepaneti, asi mushure meimwe nguva yekuedza kusina zvibereko kuchinja PHP version kana handler kubva fcgi kusvika fpm, ndakarega ndikapinda mugomba. Ikoko ndakawana debug yakagoneswa iyo yaipenya paInternet yese nepassword kubva mumhasuru, 777 pane mamwe maforodha ayo panguva iyoyo aive achitsemuka nemalware uye zvakafanana zvisina musoro. Muridzi akazviona uye akafunga kuti zvaive zvisirizvo kuchengetedza pakutambira, mugadziri wepurogiramu, uye admin aigona kuramba achitarisa mafambiro ari kuita zvinhu.
Tiri kuenda kuRuVDS. Iri padyo zvishoma kupfuura iyo British Linode, uye kana iwe ukangoerekana wada kuchengeta yako pachako data uye zvese izvi, haufanirwe kutamira kumwe kumwe. Sezvo purojekiti yakarongwa kuti iwedzere, takatora VM yekukura: 4 cores, 8 gigabytes yekuyeuka, 80GB ye disk. Hakusi kuti ini handizive kugadzirisa nemaoko nginx configs, ini ndanga ndisina shungu yekushanda pachirongwa ichi zvakanyanya (ona pamusoro apa nezve chikamu chenguva). Ndosaka ndakaisa Plesk (pano ini ndichasiya zvinyorwa zvekuisa, nekuti kazhinji hapana: ndakatangisa mugadziri, kuseta password ye admin, ndakaisa kiyi - ndizvo zvese), panguva iyoyo yaive 17.0. Zvigadziriso zvekutanga zvinoshanda zvinoshivirira kunze kwebhokisi, pane fail2ban uye ichangoburwa shanduro dzePP uye nginx.
Zvichida zvakakodzera kumira uye kutsanangura chikonzero nei. Sezvo ini ndisingawanzo kuita zvinhu zvakadaro, uye ini ndisina chero akakosha maturusi kana seti yegadziriro yenyaya yega yega, zvaive pachena kuti imwe mhando ye otomatiki yezvinhu zvakakosha yaidiwa, kuti chekutanga, nekukurumidza, chechipiri, zvakachengeteka, uye chechitatu. , maitiro ese akanakisa mumwe munhu akatozviita.
Saka, ndakaiisa. Ndakachengeta nguva yakawanda, kutangazve saiti pane sevha nyowani kwaitove pakarepo. Zvese zvakasara ndezvekugadzirisa tsandanyama config, ichipa hafu yekuyeuka uye kuwedzera huwandu hwemadziva e-buffer, uye kupa nginx hafu yemacores (Plesk haibate global configs), uye kwemazuva mashoma enda mugoko kuti utarise. pa mysqltuner stats. Ehe, uye ndakatenga iyo yakabhadharwa ImunifyAV kubva kune yekuwedzera katalogi kuti ibvise iyo yakazara malware. Mamwe mafaera ane utachiona anosvika gumi nerimwe akawanikwa. Chinonyangadza ndechekuti zvimedu zvekodhi zvakadururwa zvakadururwa mune statics, uye kuchenesa nemaoko kungadai kwakagomara zvachose. Kutanga ndakaedza ClamAV, asi, sezvazvakazoitika, hazvitore zvinhu zvakadaro, asi ImunifyAV yaigona. Uyezve, mafaera ane disinfected anoramba ari mukushanda; chidimbu chine malware chinongobviswa.
Iyo arithmetic iri nyore: $ 50 pamwedzi yeVMka, $ 10 yePlesk (chaizvoizvo zvishoma, nokuti wakaitenga kwegore kamwe chete nekuderedzwa kwemwedzi miviri) uye $ 3 ye antivirus. Kana mari yakawanda yenguva yangu, yandingadai ndakashandisa pane sevha pakutanga, ndichitora matanda aya nemaoko. Muridzi akafara chose negadziriro iyi.
Panguva ino, vakawana mugadziri mutsva. Takabvumirana naye pamusoro pekugoverwa kwebasa, takagadzira subdomain yevhezheni yebvunzo, uye basa rakatanga. Akanga achicheka shanduro itsva yesaiti paLaravel, uye ini ndanga ndichitarisa kukundikana2ban%).
Sezvineiwo, kuyerera kwevanhu vanoda kuziva hakuregi uye pane nguva dzose anenge zana kero pane rondedzero yevakarambidzwa. Mhedzisiro yacho inonakidza: kunyanya, kazhinji, kana ndikapinda mugomba, ndinoona nezve makumi maviri,20000-30000 asina kubudirira kuedza kupinda kuburikidza neSSH pakukwazisa. With fail2ban enabled, about 70. Efforts invested: 0. Sezvineiwo, zvaisava pasina donhwe remafuta. Nekusagadzikana, WAF (modsecurity) yakagoneswa nehafu: mune yekuwana maitiro. Ndiko kuti, akanyora chiitiko chekufungidzira kune irogi, asi chaizvoizvo haana kuita chiito. Uye fail2ban yakaverenga zvisina tsarukano matanda ese, zvinoenderana nemajeri akagoneswa, uye akauraya zvese zvaifamba. Saka, takarambidza hafu yevapepeti :D. Ini ndaifanira kudzima jeri iri, uye chena iyo inodiwa IP kero yekuvimbika. Kuedza kunodyarwa: dzvanya mbeva kaviri uye dzidzisa vapepeti kukuudza yako IP kero.
Izvo izvo mugadziri akakurumidza kufarira kuve kugona kurodha dhatabhesi zvakananga mupaneru uye nekukurumidza kuwana kune phpMyAdmin.
Chandaifarira aive matanda uye ma backups. Matanda anonyorwa uye anotenderedzwa kunze kwebhokisi; Backups zviri nyore kwazvo kumisikidza. Panguva dzinononoka, backup yakazara inoitwa, anenge gumi gigs, uyezve zuva rega rega imwe yekuwedzera, 10 megabytes imwe neimwe, kwevhiki. Kudzoreredza kune granular, pasi kune yakatarwa faira kana dhatabhesi. Kana iwe uchida kudzorera kubva kune imwe inowedzera, saka haufaniri kunetseka kutanga nekuzara uye kudzorerwa kweketani yose, Plesk inoita zvose pachayo. Unogona kurodha ma backups chero kupi: kuFTP, dropbox, s200 bucket, google drive, nezvimwe.
Zuva F: mugadziri wepurogiramu akazopedza injini itsva, takaiisa mukugadzirwa, takaunza data yekare uye takagara pasi kuti tisarudze ruvara rweMaserati yedu yemberi. Tichiri kugara tichisarudza.
Matambudziko ekutanga akatanga. Nzvimbo itsva yaitarisirwa kurema kupfuura yekare, asi raki chaiyo yaive yekukwezva traffic yavakashandisa, pakati pezvimwe zvinhu, Yandex.Zen, iyo yakaunza mizhinji yevashanyi. Nzvimbo yacho yakaputsika ne150 panguva imwe chete yekubatanidza (ini handisi kutaura nezveRPS, nokuti havana kuiyera). Takatanga kubaya mabhatani uye kutendeutsa mapfundo munzvimbo yephp_fpm marongero:
Hei, atova ne500 yakabatana. Sezvo makadhi echikwereti akawedzerwa kune nzira dzekusimudzira, masaisai emotokari akawedzera. Nhanho inotevera ndeye 1000 yekubatanidza panguva imwe chete. Apa taifanira kugadziridza kodhi uye kutarisa mukati memweya wemhasuru. Kuputika kwacho hakuna kubatsira, asi isu hatina kunyatsozvitarisira. Isu takagonesa inononoka queries log, yakawedzera indexes kune dhatabhesi, takabvisa zvisina basa mibvunzo kubva kodhi, uye zvakare kuchenesa mysql config maererano nezano re mysqltuner.
Dambudziko idzva - 2000 yekubatanidza. Shanduro yePlesk 17.8 yakangokwanisa kusunungurwa, umo, pakati pezvimwe zvinhu, nginx caching yakawedzerwa. Yakagadziridzwa (zvinoshamisa zviri nyore). Ngatiedzei. Works! Uye vakabva vatsika padivi rakapfava, Yandex.Zen feed yakamira kushanda. Iyo saiti iri kushanda, chikafu hachishande. Chikafu hachishande, hapana traffic. Mhepo iri kupisa. Ndichidzvinyirirwa nemamiriro ezvinhu uye nekushaya fungidziro, ndakabva ndaenda kustrace uye nginx ndikawana zvandaitsvaga. Zvinoitika kuti pane imwe nguva benzi nginx cached yakarasika 500th kukanganisa semhinduro kuYandex kuwana feed.xml. Yakagadzirisa nekuwedzera kunze kune cache marongero:
Zviri pachena kuti muridzi anoda ZVAKAWANDA, masaisai ari kuwedzera zvishoma nezvishoma. Isu tiri kurarama izvozvi, asi takatanga kuyedza memcached pachine nguva, nerombo rakanaka Laravel inotsigira ingangobuda mubhokisi. Ini neimwe nzira ndakanga ndisingadi kuisa memcached pamaoko kuti "kutamba-tamba", saka ndakaisa mufananidzo wedocker. Yakananga kubva pane panel.
Zvakanaka, ndiri kunyepa, ndaifanira kupinda mugomba uye kuisa module kuburikidza ne pecl. Kuenderera mberi . Hapana chekutaura pamusoro pekuwedzera kwehuwandu parizvino; hapasati pave nekuwanda kwakaringana. Iyo saiti injini yakasungirirwa kune localhost: 11211, zviverengero zvinoratidzwa, ndangariro iri kupedzwa. Kana wazvifarira, tichaona zvekuita zvinotevera. Zvimwe isu tichazvisiya zvakadaro, kana isu tichaisa iyo "chaiyo" iyo muAxis. Kana kuti ngatiedze redis nenzira imwechete
Ipapo zvakanga zvakakodzera kuti ubatanidze tsamba yetsamba. Hapana relay, chete smtp kuvimbiswa. Ini ndinomisikidza kero yetsamba uye ndinoshandisa ruzivo rwayo kutumira tsamba yenhau kuburikidza nePHP.
Munguva pfupi yapfuura Plesk Obsidian (18.0) yakaburitswa, isu takagadziridza zvichibva pane zvakaitika kare pasina kutya. Zvese zvakafamba mushe, hapana kana chekutaura nezvazvo. Chinhu chinonakidza ndechekuti mhando yehuratidziro yakagadziridzwa zvakanyanya, yave yemazuva ano uye yave nyore kune dzimwe nzvimbo. Chinhu chinotonhorera Advanced Monitoring paGrafana.
Ini handisati ndabata nazvo zvakadzama, asi iwe unogona, semuenzaniso, kuseta zviziviso zvechero parameter mune yako email. Kumuridzi, lol.
Ndichiri kutaura nezve interface, inopindura uye inoshanda chaizvo parunhare. Mumatanho ekutanga, patakanga tichiedza kutsvaga iwo akakwana marongero ePHP nezvimwe zvinhu, izvi zvakabatsira zvakanyanya. Uye kunyanya kana mugadziri wepurogiramu, mukukwana kwechido chebasa, anoita chimwe chinhu na23:XNUMX, uye ini, mukukwana kwechido chebasa, ndinonwa vodka muimba yekugezera, uye NDINODA kukurumidza kuchinja chimwe chinhu.
O, nenzira. Mufananidzo unoratidza kuti PHP Composer yaonekwa. Isu hatisati tatamba nayo parizvino, asi, toti, yeLaravel, inogona kuchengetedza akati wandei magoko uye imwe nguva pakuisa zvinotsamira. Iyo yakafanana sisitimu iripo yeNode.JS uye Ruby.
NeSSL zvese zviri nyore. Kana iyo dura ikagadzirisa sezvaitarisirwa, Let's Encrypt inoitwa nekudzvanya kumwe chete uye tozvigadziridza pachayo, zvese zvedomasi pachayo, uye ye subdomain, uye kunyange mail masevhisi.
Plesk pachayo sesoftware parizvino inonakidza uye yakagadzikana. Inozvivandudza pachayo uye Axis chinyararire, inoshandisa zvishoma zviwanikwa, uye inoshanda mushe. Handitomboyeuki kuti ndakatsika pane chimwe chinhu pane imwe nzvimbo, iyo ingadai yakave yakashata iri pachena muchigadzirwa. Paive nematambudziko, hongu, asi angave akakonzerwa nekusakwana kumisikidzwa kana kumwe kunhu pajunction, saka hapana chekunyunyuta nezvazvo. Maonero ekushanda nePlesk anowanzo kunakidza. Izvo zvazvisina, uye isu tinofanirwa kunzwisisa izvi, chero (chero) kubatanidza. Kwete LB kana HA. Iwe unogona kuedza, asi kuedza kunobatanidzwa kuchave kwakanyanya zvokuti zviri nani kuita chimwe chinhu chakasiyana kubva pakutanga.
Ndinofunga tinogona kuzvipedzisa. Nekuda kwenyaya kana pasina mutungamiriri, kana pasina zvakakwana kwaari, apo mutengo wekugamuchira uye saiti (s) inotenderera pairi inodarika, zvakanaka, toti, 100 USD, kana isu tisiri kutaura nezve bestial kugoverana kwe1500. mawebhusaiti pane sevha, kana muiti wesarudzo akatarisana Kana iwe uine sarudzo yekuhaya yenguva-yenguva admin, kana kutenga software uye kuve neadmin kwehafu yebhandi, kana kusava nayo zvachose - zvine musoro. Kubva pakuona kwemutongi ari kure - chinhu chimwe chete. $10 pamwedzi, uye inochengetedza nguva uye inopa kuchinjika mubasa kwenguva yakareba kwazvoΠΎmari yakawanda. Kana, semuenzaniso, ini ndakakumbirwa zvakasimba kutora purojekiti yakafanana pasi pemapapiro angu, ini ndichaomerera pakuiendesa kuPlesk.
Source: www.habr.com