digital.forest is in the beginning stages of a significant change in the way our FreeBSD hosting servers will function. This change is intended to increase the security of your sites, and to improve our ability to quickly determine the source of a problem, such as an insecure web form being used to send spam.
We are taking care to minimize the impact these changes will have on you, but there may be some cases where problems will arise. In such a situation, we will assist you in making any changes necessary to get your site working with the new configuration.
The first stage of the changes is upgrading the server to the latest version of the FreeBSD operating system. This stage has been completed on Silverpine. Souari and Butternut will follow by the end of this month. We do not anticipate that customers will notice any changes from this upgrade.
The second stage is upgrading Apache, the web server software, to the latest version. This is a more significant change, from a hosting standpoint. Silverpine is scheduled to be upgraded tonight. There will be a period of downtime, estimated to be less than 2 hours, during which the current configuration will be backed up, and the new configuration will be installed. There will be substantial modifications to the virtual host configuration files. In the vast majority of cases, everything should continue to function after the upgrade as it has until now. However, customers will need to test their sites thoroughly, and report to us as soon as possible if they find any problems so that we can correct them.
The third stage will be activating two key configuration changes for each virtual host: suexec and suPHP. Once these are activated, customer CGI and PHP scripts will execute under their own usernames, rather than under the server's username. We will change the ownership on all files and folders in your home directory to your own username, so that if your site needs to write files into your directory, it can still do so. We will again need people to test their sites carefully and make sure everything is working as expected.
The fourth and final stage will be activating suexec and suPHP for the default server, outside the virtual hosts. Before this stage is completed, any customers who are using the server's built-in SSL certificate, rather than one purchased for their own domain, will need to work with us to make changes to their site to work with an alternate secure URL. You'll still be able to use our certificate, but we'll need to set up a subdomain specific to your virtual host to permit you to do so.
We will be moving very slowly and carefully on the Silverpine changes so that we can refine the process for the remaining servers. Your testing and feedback will be a great help in getting any unanticipated problems handled as quickly as possible.
posted by Bill D. at 07:49 AM on Monday, June 4, 2007
Categories: Hosting Servers