Hosting 100K accounts on 2 DA Servers

GoogieHost

GoogieHost

Verified User
Joined
Oct 31, 2023
Messages
16
Location
Texas
As a free web hosting service, we're responsible for managing a vast number of accounts, often exceeding 100,000 active websites on 2 servers. Given our commitment to providing this service free of charge, we operate within certain limitations, particularly regarding the resources available to us and our focus on hosting websites that primarily use static pages (which are simpler and use less data).

To support this operation, we equip each of our servers with some pretty hefty hardware: 4X Intel Xeon E5 4650 v2 processors, 4X 4TB NVMe storage drives, and 512GB of RAM. Despite these powerful components, we're running into several challenges that affect the performance and reliability of our service. Users frequently experience slow website loading times, and our LiteSpeed web server software often goes offline, further impacting website accessibility.

One of the most pressing issues we're facing is with the SSL certificates provided by LetsEncrypt. SSL certificates are essential for creating a secure connection between a website and its visitors, protecting sensitive data in the process. However, LetsEncrypt imposes a limit on the number of SSL certificates we can issue per server. This limitation is a significant hurdle for us, given the large number of websites we host.

We're actively seeking solutions to these challenges. Specifically, we need advice on how to stabilize our servers and address the SSL certificate issue without exceeding LetsEncrypt's limits. Since LetsEncrypt has indicated they won't increase these limits for us, we're looking for alternative strategies or technologies that could help us manage our resources more efficiently, ensure consistent uptime for our LiteSpeed servers, and secure our websites with reliable SSL certificates. Any suggestions on how to improve our server stability and overcome the SSL limitation would be greatly appreciated.
 
1. You can use Zero SSL for part of websites, or other ACME provider.
2. You must reconfigure to ask new cert not after 60 days (while cert valid 90) but after 80, for example, additional 20 days delay for each request will decrease total frequency.
3. Add additional IP and use it for part of domains/users - LE limited by requests from exact IP. (we use this strategy)
 
Zhenyapan said:
1. You can use Zero SSL for part of websites, or other ACME provider.
2. You must reconfigure to ask new cert not after 60 days (while cert valid 90) but after 80, for example, additional 20 days delay for each request will decrease total frequency.
3. Add additional IP and use it for part of domains/users - LE limited by requests from exact IP. (we use this strategy)
Click to expand...
Hosting limited accounts on each IPs? And Zero SSL available for DirectAdmin?
 
Yes, if you have issues with, for example, 5000 accounts on 1 IP, so try to host 4500 on one IP, next 4500 accounts put on next IP and so on.
We have own IP-pools so it easier to us host no more than 500 domains/ip.
 
maybe force your client to use wildcard ssl with IP Pool, should reduce exceed limit.
 
Use LiteSpeed recaptcha feature with 100% (always on) it will decrease the CPU and mysql usage a lot, if you are using OpenLiteSpeed I'd go with this script instead:

serverwide POST captcha validation

Hi I have programmed a system wide captcha that redirects all POST requests via this captcha validation page. It is not based on recaptcha, I have fixed something easy myself: the sum of two numbers. (example: What is the sum of 'two' and 'fourteen') and a dropdown to chose from. I suspect no...
forum.directadmin.com forum.directadmin.com

Since I activated it in one server, server has been so stable
 
You must log in or register to reply here.
Back
Top