Question

[%83^!!%5]

Ok, I need honest down-to-earth answers here and not pipe dreams.

 

I am looking for something that will *work well* and not simply *work* for my needs.

 

I am going to start a web hosting company soon. I have no client base planned for the beginning. I am trying to plan for the future and do as much preparation as I can afford to do safely.

 

As a consumer, I know how frustrating it is to see your site, server, or whatever it may be go down and then you can't reach support either.

 

To avoid this frustration for my future customers, I would like to host my main site and WHMCS installation in a completley separate datacenter from my customers.

 

While I can afford it, I feel that a dedicated server specifically for my main site and WHMCS installation is a little overkill and expensive for a startup with no expected customers.

 

A VPS would be managable but then you run into possible bottlenecks like CPU and RAM. Not to mention having to get a WHM/cPanel license for it.

 

A reseller account seems kinda useless because I won't be creating any customer sites. I really only need 1 dedicated IP to support my main site, WHMCS, and SSL.

 

I'm told a shared account at a decent provider is pretty secure.

 

Exactly what would you guys recommend?

 

What requirements does WHMCS have? Can it be ran in a shared environment?

 

Could I successfully set it up so that the shared environment handled invoicing, billing, support, etc... and setup new accounts, terminated accounts, suspended/unsuspended accounts, etc... on the other server?

 

If my needs grew, would it be too hard to move my WHMCS installation from the shared environment to a dedicated server?

 

Thank you

[Adam]

What requirements does WHMCS have? Can it be ran in a shared environment?

 

Could I successfully set it up so that the shared environment handled invoicing, billing, support, etc... and setup new accounts, terminated accounts, suspended/unsuspended accounts, etc... on the other server?

 

Yes, WHMCS can be installed/hosted on a shared environment, highly do not recommend it as you are not the only person that is using the same server.

 

But yes, WHMCS can be hosted on a shared hosting server. All functions like invoicing, emailing, support, creating/suspended/terminating accounts will all work.

 

For server side, please visit the link below,

http://support.whmcs.com/knowledgebase.php?action=displayarticle&catid=3&id=1

 

 

 

If my needs grew, would it be too hard to move my WHMCS installation from the shared environment to a dedicated server?

 

This will be easy. All you will need to do is backup your MySQL database and files and transfer them over to your dedicated server. Once uploaded, you make a new database and upload the saved database into the new one. You can upload your files and insure that your mysql connection information works with the new server and you are good to go.

 

However, you will need to re-issue your license via WHMCS website. This is done by WHMCS system, so this should not be a problem.

 

 

 

Hope that answers your questions

 

From,

Adam

[%83^!!%5]

Ok that answers a lot of my questions...

 

Is it such a large and imminent security concern that I absolutely should not run a WHMCS production copy on a shared hosting plan? I would be using it on a dedicated IP with SSL if that makes a difference in the answer.

[trine]

...I would be using it on a dedicated IP with SSL if that makes a difference in the answer.

 

That has nothing to do with securing your shared hosting environment, other than the possible interception of packets, which SSL would encrypt.

 

As Adam alluded to, shared hosting is never secured from the possible risks on the server itself. Without going into much detail, some of these could include vulnerabilities with XSS, MySQL, libs and mods on the server, open base dir hacks, other server-based exploits, etc.

 

If you want to minimize risk factor, consider at a VPS if it is within budget, or a dedicated server. Make sure you secure the box properly and harden your php install, or hire/have someone that knows what they are doing, do it for you. A poorly secured VPS or dedicated server can lead to a false sense of security.

[%83^!!%5]

Well I'm already paying a lot of my budgetable money on my client server and associated proactive management.

 

I want to avoid VPS and Dedicated Server because of the cost of management.

 

On the other hand, I would rather create a single point of failure on my own server than have a security breach of my customer data.

 

Hmm

[trine]

Also, as for "bottlenecks like CPU and RAM" on a vps.... I doubt that running a single site with average traffic running WHMCS would impact performance greatly on a vps. In fact 128 - 256 MB should be plenty for a site for starters.

 

I would probably guess that the majority here run WHMCS in a shared hosting environment, and many others run it on a VPS or their own box alongside their customer accounts. What you asked for was an opinion, so I think you fell on two people that happen to like controlling their own destiny, so to speak

 

The choice is after all, yours. You should make a solid business decision to start, either way. If you can not manage your own servers or vps, a fully managed solution can become expensive.

[%83^!!%5]

Good point. Thank you

[mrprez]

I just moved mine from a VPS with 512MB of Ram due to bottlenecks. The server would crash numerous times throughout the day due to out of memory conditions. But, in addition to WHMCS I also have a very active SMF forum as well so I am sure that played into it as well.

 

Now, my one site is on a dedicated server with plenty of RAM and runs like a top.

 

LiquidWeb has some good deals on their VPS1 right now. I think you can get it with upgraded RAM and CPanel for $50 a month. Check WHT in the offers area for VPS servers.

 

John

[%83^!!%5]

Thanks for the advice. I forgot to mention there will be an IPB installation as well but honestly I don't realisticly expect heavy usage right away.

 

For the reasons pointed out to me in this thread, I'm going to be looking for a good, reliable dedicated server in my price range that can run what I need it to.

 

I have a month or so before I need to order it though.

[Adam]

Hey,

 

Or what I see other people doing is have their main site hosted on the dedicated box with the other customers.

 

But order a second domain like (yourcompanynamestatus.com) or what ever, and host that outside your regular network. This way, you can have a website that is up when you need it, and if it goes down well its not your company website at all.

 

Some shared servers are awesome while others are not, it all depends on who you go with.

 

 

From,

Adam