VPS Hosting Stuff

Introduction:

In general csf is giving good compatibility with cpanel servers . But in a vps (openvz or Virtuzzo) the csf configuration is something different.

Sometimes you may get an error as follow after the csf installation in vps

————–

Error: iptables command [/sbin/iptables -v -A LOGDROPIN -p tcp -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *TCP_IN Blocked* '] failed, at line 196

—————

So how to resolve this issue. Let us do it as follows,

There are two steps to configure the csf in vps

i)Main vps server ( The host server ,in which the vps nodes are running) configuration

ii) Vps node configuration.

Main vps serverconfiguration

Before starting the csf installation in a node login to the main server (host server) and check whether the following modules are inserted in to the kernel

———
ipt_conntrack
ipt_LOG
ipt_owner
ipt_state
ip_conntrack_ftp
———

You can check it as follows

—————
# lsmod |grep -i <module-name>
—————

If not please insert these modules into the kernel.

————
#modprob <module-name>
eg: modprob ipt_conntrack
————-

Now add these modules to iptable configuration as follows.

———–
# vi /etc/sysconfig/iptables-config
Add the following in this file
IPTABLES_MODULES=”ipt_conntrack ipt_LOG ipt_owner ipt_state ip_conntrack_ftp”
———–

Now edit the vps configuration file from /etc/sysconfig/vz-scripts/ Let 101 is the VEID, add the above inserted modules in to the IPTABLE section in this configuration file.

———-
# vi /etc/sysconfig/vz-scripts/101.conf
IPTABLES=”iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ipt_state
iptable_nat ip_nat_ftp ipt_owner ip_conntrack_ftp”
————-

Here we completed the main vps server configuration . So now reboot the child node (not main server) as follows

—————

# vzctl restart <veid>

eg: vzctl restart 101

——————-

ii) Vps node configuration.

Now ssh /enter your child vps node

Now download and install the csf . You can download the csf fromhere

Before restarting the csf let us do some configurations as follows , Edit the file /etc/csf/csf.conf .Then set the following variables

——–
ETH_DEVICE = “venet0″ #from ifconfig you can see the n/w device
MONOLITHIC_KERNEL = “1″
VERBOSE = “0″ # will disable the verbose output during start
———
Now start the csf and lfd .

———–

/etc/init.d/csf start

/etc/init.d/lfd start

———–

Note: If it is cpanel server go to whm and configure the firewall settings

Enjoy it

Mr. Nick on WHT posted nice thread related to Virtouzzo based VPS config and formulas useful for creating virtual environments (VE)

Formulas:

Guaranteed memory = barrier of vmguarpages / 1024 * 4
Burstable memory = privvmpages / 1024 x 4
Current Memory Usage= physpages held value /1024 * 4
Current Usage (RAM + SWAP)= oomguarpages held value /1024 * 4
Disk Inodes = Number of total disk inodes. Essentially this is a total number of files and directories which can be created.
Disk Space = Total size of disk space
Numproc = Number of Processes a vps can run
Numpitent = Number of firewall rules the vps may contain

You can read more comments on Mr. Nick thread avaliable at http://www.webhostingtalk.com/showthread.php?t=679897

Below is a quick run down of various types of VPS control panels that are available:

• Virtuozzo - One of the leading VPS control panels. Swsoft, the developer of Virtuozzo are allowing people to handle their VPS�s exactly like dedicated servers. With many options supported by the product you could do just about anything. Swsoft uses a technology different then others.

  Virtuozzo allows users to use “Burstable RAM”. “Burstable RAM” is a technology supported by swsoft. Whenever a user needs more RAM than usual and there is a surplus of RAM used by other users on the server, “Burstable RAM” will allow that user to use more RAM for a limited time. This ability makes Virtuozzo very flexible. http://www.swsoft.com

• Vmware - Another leading VPS control panel in the web sector. Vmware allows users exactly the same opportunities given by Virtuozzo, although it doesn�t support the “Burstable RAM” technology. However it supports a different technology called “Multi-OS”. “Multi-OS” in other terms means, “Multi-Based Operating System”. With Vmware you can easily provide more then one operating system working on the same server. This allows companies to reduce costs by not having to purchase different server for different operating systems. http://www.vmware.com
• Xen - A newborn product still underdevelopment. However it is very popular and many companies have already adopted this VPS control panel because of it’s efficiency in limiting the amount of system resources used.

  Normally a VPS control panels use high resources when running on a server. But as Xen uses different technique of resource management it has the same features provided by Virtuozzo (except that it doesn�t support “Burstable RAM” technology) and yet does not consume as much resources.

  However please remember that Xen is still under development so there are a few bugs that need to be addressed and improvements that need to be made. http://www.cl.cam.ac.uk/Research/SRG/netos/xen/