5 messages in org.freebsd.freebsd-ispWeb Hosting - IPs, Quotas and Jails| From | Sent On | Attachments |
|---|---|---|
| Troy Settle | Oct 24, 2005 8:56 am | |
| Michael R. Wayne | Oct 24, 2005 9:52 am | |
| Brian Candler | Oct 26, 2005 1:37 pm | |
| Mark Bucciarelli | Oct 26, 2005 1:58 pm | |
| Tom Beard | Oct 28, 2005 7:46 am |
| Subject: | Web Hosting - IPs, Quotas and Jails | |
|---|---|---|
| From: | Brian Candler (B.Ca...@pobox.com) | |
| Date: | Oct 26, 2005 1:37:08 pm | |
| List: | org.freebsd.freebsd-isp | |
On Mon, Oct 24, 2005 at 11:56:22AM -0400, Troy Settle wrote:
Anyways, here's where I need some help. I want to create a 3rd jail for Frontpage services. FP doesn't have any built in quota support that I've seen, so I'll need to depend on file system quotas.
CGIs can write files too, so if you allow users to upload their own CGIs you'll have the same problem.
The alternative solution is to 'du' the disk space usage periodically (e.g. nightly), and users who are overquota can be contacted and warned or their site suspended, depending on how draconian you wish to be.
You'll probably need a similar mechanism in any case for dealing with users who consume excessive amounts of bandwidth.
Finally, I want to be able to offer advanced web services that will allow the customer to have SSL certificates, operate virtual FTP servers, etc... This requires that I have one IP per server, which means one jail per server. Jails are fun, but somehow, I don't think 50 jails would be fun.
I believe you can use the same jail directory structure bound to different IPs; just run 'jail' multiple times. You'll just need to take care if running the same daemon multiple times; each instance will need to be told to write to a different pid file, and will need a different config file (otherwise there wouldn't be any point having multiple instances)
Regards,
Brian.