Keɓewa ga kowane shafi
Keɓewa ita ce bambanci tsakanin matsala da katsewar aiki gaba ɗaya. Kowane shafi da muke ɗaukar nauyinsa yana aiki ne a cikin kejin CloudLinux LVE na matakin kernel tare da iyakar CPU, RAM, IO da tsarin aiwatarwarsa, kallon tsarin fayil na CageFS na kansa, sigar PHP ta kansa da kuma ikon takaita rumbun adana bayanai na kansa. Shafin da aka kai wa hari, aka kutsa cikinsa ko kuma kawai yake gudanar da bincike mai nauyi yana nan a killace a inda yake — kuma an haɗa tushen keɓewar a kowane tsari, ba a sake sayar muku da shi a matsayin haɓakawa ba. Samuwar aiki: takaita rumbun adana bayanai na kowane shafi da ƙididdigar albarkatun kowane shafi suna kan aikin haɓakawa sosai kuma ba a riga an samar da su ba. Duk sauran abubuwan da aka bayyana a nan suna aiki a yau.
Rundunar ma'aikatan tana aiki ne da CloudLinux OS, wanda ke tura raba kayan aiki kai tsaye zuwa cikin kwayar cutar (kernel). Kowane shafi yana samun Muhallin Virtual mara nauyi — wato LVE — wanda yake tsayayyen iyaka ne ba kawai yarjejeniyar ladabi ba. Babu wani abu da shafi ke yi a cikin kejin sa da za a iya kashewa daga kasafin kudin wani.
LVE yana iyakance CPU, RAM, IO, IOPS, hanyoyin aiwatarwa da hanyoyin shiga ga kowane shafi daban-daban. Lokacin da shafi ya wuce iyakarsa, ana tauye shi a cikin keɓantaccen muhallinsa — ana rikodin kuskuren a kan wannan shafin, kuma sauran shafukan da ke gefensa suna ci gaba da aiki ba tare da wata matsala ba.
Wani plugin da ya makale a cikin wata 'yar ƙaramar madauki (loop), aikin cron da aka rubuta shi ba daidai ba, ko kuma mai rarrafe (crawler) da ke matsa wa ƙarshen hanyar sadarwa (endpoint) lamba zai fara cin karo da iyakokin tsari da tsarin shiga na shafin kansa. Wani shafi guda ɗaya ba zai iya cinye dukkan na'urar ba kawai.
Saboda an kayyade adadin shigar ayyuka (entry-processes) a kowane keji, ambaliyar buƙatun da aka nufa zuwa shafi ɗaya ba za ta iya buɗe aiki mara iyaka a kan uwar garken ba. Tsarin takaita haɗin kai da buƙatu na LiteSpeed tare da katangar kariya ta hanyar sadarwa ta Imunify360 suna gaban wannan, don haka harin ya kasance matsalar wanda aka nufa kawai.
Ana yin rikodin kowane kuskuren LVE a kowane shafi kuma yana kwarara zuwa injin manufofin dandalin, wanda zai iya tsaurara ko sassauta iyakoki ta atomatik. Za ku ga dalilin da ya sa aka takaita shafi, da kuma lokacin — a tsaraice, mai iya sauyawa kuma an rubuta a bayanan aiki.
Kaucewa raba kayan aiki yana hana shafi zama mai yawan hayaniya. Raba tsarin fayil yana hana shi yin shishshigi. CageFS yana ba kowane mai amfani damar ganin na'urar a keɓance kuma cikin takurawa.
A ƙarƙashin CageFS, mai amfani yana ganin fayilolinsa kawai da kuma ƙaramin saiti na binari na tsarin da aka tsaftace — kuma ba zai iya ganin sauran masu amfani ba, shafukan sauran masu amfani, ko fayilolin tsarin masu muhimmanci. Yanayin gazawar da aka saba gani a shared-hosting, inda asusu ɗaya da aka yi wa kutse yake zama matsayin duba kowane asusu a kan na'urar, an toshe shi a matakin ƙwayar tsarin (kernel).
Wannan ya fi muhimmanci a ranar da wani abu ya sami matsala. Idan aka yi kutse a wani shafi — ta hanyar tsohon plugin da ya daina aiki, satar bayanan shiga, ko jigon da ke da rauni — CageFS shi ne abin da ke takaita barnar a wannan kejin guda daya. Bayanin tsaronmu na da manufa game da zabin kalmomi: CageFS na dakile kutse. Dakilewa ita ce ikirari na gaskiya, kuma ita ce ke tantance ko matsalar tsaftace shafi daya ce ko kuma ta dukkan rukunin sabar ne.
Kofofin ajiya na bayanan baya suna ƙarfafa wannan iyakoki. Kofofin ajiya na kowane shafi ba sa canzawa, suna a waje kuma an keɓe su daga sauran na'urorin da ke aiki, tare da gwajin maido da bayanan, don haka ko da an samu mafi munin matsalar tsaro a wani shafi guda, akwai hanyar dawo da bayanai mai tsabta kuma mai cin gashin kanta wacce ba ta dogara da halin da na'urar da shafin ke kai take ciki ba.
Kaucewa matsalar matakin yanar gizo rabin labarin ne kawai. A kan gungun WordPress, abin da ya fi sa sabar ta zama mai tafiyar hawainiya shi ne tambayoyin shafi ɗaya, ba zirga-zirgar shafi ɗaya ba. Ana magance hakan a sarari.
CloudLinux MySQL Governor yana takaita amfani da rumbun adana bayanai ga kowane shafi, ta yadda tambayoyi masu nauyi na shafi daya ba za su iya rage saurin uwar garken ga sauran kowa ba. Wannan shi ne ikon hana raguwar gudu, kuma yana aiki ko shafin mai hayaniya ya lura ana takaita shi ko a'a.
Rundunar tana aiki ne da MariaDB (ko Percona), wanda aka zaɓa domin ayyukan WordPress maimakon ɗaukarsa a matsayin tsohuwar saiti, tare da Governor a samansa a matsayin matakin adalci ga kowane abokin ciniki.
Wurin adana bayanan abu na Redis na kowane shafi yana ɗaukar maimaita karantawa kafin su isa tushen bayanai, wanda ke rage matsin lambar da Governor zai sasanta tun da farko. Ajiye bayanan wucin gadi da warewa suna aiki a matsayin tsari ɗaya.
CloudLinux alt-PHP tana ba kowane shafi nasa zabin nau'in PHP, nasa kari-karin (imagick, gd, redis da sauran su) da nasa saitunan da aka karfafa — tare da ma'aikatan LSAPI da aka iyakance da iyakar LVE na wannan shafin, don haka lokaci guda na PHP yana cikin kejin maimakon kubuta daga gare shi.
Kaucewa matsala tana ƙayyade yadda matsalar za ta yaɗu. Zartarwa tana ƙayyade abin da zai biyo baya. Mun maye gurbin dakatarwa mai sauƙi ta kunne/kashe da injin jihohi, wanda ke gudana ta hanyar ingantattun ayyukan aiki kuma aka zartar a kan ma'aikaci ta hanyar LiteSpeed, LVE da Imunify.
Kaucewa juna ba fasalin tsari ba ne da ke fitowa matakai uku a sama. Halayya ce ta kaddara kanta, don haka yana daidai ko kuna tafiyar da shagon WooCommerce guda ɗaya ko kuma shafukan hanyar sadarwa dubu biyu.
Hanyoyin sadarwa na taro da na PBN suna gudana akan tushe ɗaya na LVE da CageFS, tare da jujjuyawar asusun CDN da ke lura da sawu da kuma isar da tsayayyen HTML. Keɓancewa shine ke sa yawan shafuka ya zama amintacce: shafukan yanar gizo suna raba jiragen ruwa ɗaya ba tare da raba kaddara ba.
Gudanar da shafukan WordPress, WooCommerce, PHP, tsayayyu (static) da kuma Node na samun keɓaɓɓun muhallai (cages) iri ɗaya tare da cikakken ikon sarrafa kai — sigar PHP da ƙarin abubuwan ku na kanku, ma'ajiyar abubuwa ta Redis, yanayin gwaji (staging) da turawa zuwa yanar gizo kai tsaye (push-to-live).
Ga nauyin aiki da ke buƙatar iyaka mai ƙarfi fiye da tsohuwar da aka inganta don yawa, ana ba da cikakkiyar keɓancewar kwantena kowane shafi a matsayin bambancin direban tanadi: inji iri ɗaya, tsarin sarrafawa iri ɗaya, wuri daban, a kan ƙarin nauyi mafi girma.
Keɓewar LVE da CageFS, riga-kafin WAF da binciken malware an haɗa su ga kowane abokin ciniki, saboda shafin da ya kamu da cuta ko ya fita daga iko yana barazana ga maƙwabtansa da kuma martabar IP ɗinmu. Tsaftace malware da dannawa ɗaya da kuma matakan kariya na gaba ƙarin abubuwa ne da ake biya — matakin asali kuma ba na biya ba ne.
Sha'awar kasuwanci a fannin karɓar baƙuncin yanar gizo ita ce sayar da tsaro a matakai daban-daban: a ajiye abokan ciniki marasa tsada a kan uwar garken gama-gari mai iyakoki marasa tsauri, sannan a karɓi kuɗi daga waɗanda ke son iyaka mai ƙarfi. Ba ma yin hakan, saboda abokin cinikin da bai biya kuɗin keɓewa ba shine ainihin wanda idan aka kutsa rukunin yanar gizonsa, matsalar ta kan shafi kowa da kowa.
Muna karɓar baƙuncin shafuka sama da 700,000 a duk duniya, a kan rukunin sabar inda yawan cunkoso shi ne dukkan fa'idar tattalin arziki. Hakan yana aiki ne kawai idan keɓewar da ke ƙarƙashinsa ba ta da wani sharɗi. Kejin matakin kernel, keɓantaccen duba tsarin fayil, takaita amfani da rumbun adana bayanai na kowane shafi da PHP na kowane shafi su ne farashin aiki a wannan girman ba tare da raba makoma ba — saboda haka suna aiki ga kowa, a kowane tsari, tun daga shafi na farko da kuka ƙaddamar.
Sakamakon shi ne wani dandamali da ke aiki yadda ake tsammani a lokutan da wasu ke fuskantar matsala. A bayan sa akwai tabbacin aiki na 99.99%, ajiyar bayanai ta waje da ba za a iya sauyawa ba ga kowane shafi tare da gwajin dawo da bayanai, da kuma cikakken tarihin bincike na kowane matakin tilastawa da aka ɗauka a shafukanku.
An tsara warewa musamman domin dakatar da hakan. LVE yana sanya iyaka ga CPU, RAM, IO, IOPS da tsare-tsaren ayyuka ga kowane shafi, MySQL Governor yana daidaita yawan amfani da rumbun adana bayanai ga kowane shafi, kuma ma'aikatan LSAPI suna cikin cage na shafin kansa — don haka hauhawar zirga-zirgar makwabci ko nauyin bincike mai yawa yana takaita ne da nasu koli, ba naku ba. Ana rubuta kowane kuskure ga kowane shafi, kuma manhajar manufofi na iya takaita iyakokin shafi mai hayaniya kai tsaye.
Amsa ta gaskiya ita ce shawo kan matsalar maimakon ba da garanti. CageFS yana ba kowane mai masauki keɓantaccen tsarin duba fayiloli — mai masaukin da aka kutsa ba zai iya ganin sauran masu masauki, shafukansu, ko fayilolin tsarin da ke da muhimmanci ba — sannan tabbatar da wanzuwar malware ko harin phishing yana mayar da wannan shafin zuwa killace: a kashe, fayiloli a kulle, babu aiki, an keɓe shi don binciken ƙwaƙwaf. Wannan shine abin da ke iyakance girman ɓarnar. Tare da wannan muna gudanar da binciken malware da WAF mai faɗakarwa a kowane shafi, haɗe da ajiyar waje da ba za a iya sauyawa ba ga kowane shafi tare da gwajin dawo da bayanai, domin farfaɗowa kada ta taɓa dogara kan halin da na'urar da abin ya shafa take ciki.
Yana nan a kowane tsari. Keɓancewar LVE da CageFS, WAF mai ɗaukar mataki da wuri, da binciken malware su ne tushe ga kowane abokin ciniki, saboda shafin da ya kamu da cutar ko ya fita daga sarrafawa yana barazana ga maƙwabtansa da kuma martabar IP ɗinmu — ba za mu iya barin sa a matsayin zaɓi ba cikin hankali. Abin da ake sayarwa a matsayin ƙari shi ne share malware da gyara ta danna sau ɗaya, da kuma manyan matakan kariya na ci gaba kamar ingantattun ƙa'idodin WAF, bincike mai fifiko, sarrafa bot, da manyan matakan DDoS.
An takaita shi a cikin kashin kansa maimakon a kashe shi. Takaitawa na nufin ƙarin ƙuntatawa na LVE da sarrafa yawan shiga yayin da shafin ke ci gaba da aiki da bayar da hidima, kuma zai dawo daidai da kansa da zaran dalilin yakau. Ana sanar da ku dalilin, an rubuta sauyin tare da shaidarsa, kuma ana iya daukaka kara. Idan nauyin ya kasance saboda gaskiyar girma ne maimakon kuskure, mafita ita ce tsari mafi girma, ba wai takaitawa ta har abada ba.
A'a — shafin da aka dakatar yana nuna shafi mai tambarin kamfani wanda ke bayyana takamaiman dalili (biyan kudi, gyare-gyare ko cin zarafi) domin ya nuna cewa da gangan aka yi hakan ba wai ya lalace ba ne. Ana janye dakatarwar idan an biya kudi, an gyara matsalar, ko an daukaka kara. Kulle keɓewa (quarantine) ya fi tsauri kuma yana aiki daban: ana janye shi ne kawai bayan an share matsalar kuma an sake dubawa, ba a taba janye shi ta atomatik ba.
A kan Zinn® Managed WordPress, eh — CloudLinux alt-PHP yana ba kowane shafi mai zaɓin sigar PHP nasa, da nasa ɗakunan karatu kamar su imagick, gd da redis, da kuma nasa saitunan da aka ƙarfafa, duk a cikin iyakatattun LVE na wannan shafin. Footprint-Free Hosting tana gudanar da tsari mai ɗauke da ƙa'ida ɗaya wadda aka kulle kowane shafi akanta da gangan, domin bambancin tsari da kansa yana haifar da wata alama ta SEO.
I. CloudLinux LVE da CageFS shine tsohon zaɓi da aka inganta don yawa a duk layukan samfuran biyu. Don ayyukan da ke buƙatar iyaka mai ƙarfi, ana ba da cikakkiyar keɓancewar kwantena-kowace-shafi a matsayin wani nau'in direban samarwa — inji guda ɗaya da tsarin sarrafawa tare da wuri daban, ana musanya ƙarin albarkatu don samun rarrabuwa mai ƙarfi.
I. Karɓar baƙuncin Footprint-Free yana farawa ne da gwajin kwanaki 14 ba tare da katin banki ba wanda ya ƙunshi har zuwa shafuka biyar — babu bayanan biyan kuɗi, babu wani alkawari. Ku tura wasu shafuka, ku gwada su da ɗan lodin aiki, sannan ku ga yadda kejin suke aiki kafin ku yanke shawara.
Fara gwaji na kwanaki 14 ba tare da katin bashi ba a kan Footprint-Free Hosting — har shafuka biyar, babu bayanan biyan kuɗi, babu alkawari. Ana samun keɓewar matakin Kernel, WAF mai aiki tuƙuru, da binciken malware tun daga tura ta farko.
Fara kyauta