Risk of hosting website on internal application server
-
This isn't really related to SEO, but it came up with a client....
We have a client that is hosting their website internally. That's not a problem except that the server it is hosted on is the same server where they host many secure applications with sensitive customer information.
We recommended to the marketing vp to move the website to a different server that doesn't host secure apps so we don't have be concerned about any conflicts. Their IT folks pushed back. So, I'm looking for some ammunition to support our recommendation.
Any ideas?
Thanks.
Bernie Borges
Find and Convert
-
Just in case the question of site hosting is still under discussion, Bernie, I'd say you're absolutely right to be concerned about the website being hosted on the same server as sensitive client data. This is assuming they are actually hosting the website on the same operating system as the other apps.
This situation is EXACTLY what Virtual Servers have been invented for. They allow complete separation of different server instances, several of which can hosted on the same physical server hardware at the same time (so one piece of hardware can actually host several virtual servers).
The security aspect of this is huge. The harm that would come to the company if they had to disclose their client data had been hacked vastly outweighs the little bit of extra effort to maintain an additional virtual server for website hosting.
On a purely practical basis, the reality is that webservers often run into load issues, glitches, urgent security patches etc that require the server to be rebooted. This is far more likely to happen to webservers than application servers. There's no reason why these reboots should have to take down the other client apps in the process.
I've known companies running all on one server to avoid implementing patches because they were afraid the patches might break custom apps. As a result, the unpatched website got hacked, causing massive downtime for both website and apps.
So yea - if they're running everything under one server instance, they're begging for trouble (and breaking industry best practices).
If they're running all on one server but with the apps and website on different virtual servers (sometimes called virtual machines) they're fine.
Hope that gives you a little more ammunition.
Paul
-
Hi Paul,
Sorry for the tardy response. I don't actually know if the client is hosting the website on the same bank of servers as their client apps. Their website is https and they host it internally. Our contact is the marketing director and she has not been able to answer this question for us.
Thanks for your interest in helping me with this. Sorry I don't have more detail at this time.
Best regards,
Bernie Borges
Find and Convert
-
Just checking if you're still looking for help with this issue, Bernie. If so, still need my question above answered to give an opinion.
Paul
-
Bernie, when you say they are hosted on the same server - do you mean hosted on the same physical hardware but on separate virtualized server instances? Or are they actually running on and sharing the same OS install?
Paul
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Setting Up A Website For Redirects
I've got an old defunct domain with a lot of backlinks to individual pages. I'd like to use these backlinks for link juice by redirecting them to individual pages on the new domain (both sites belong to the same company). What is the best way to set this up? I presume I need some kind of hosting & site, even if it's just a default Wordpress install, which I can then use to set up the redirects? Would it be best done using .htaccess file for 301 redirects or some other way?
Technical SEO | | abisti20 -
How to deal with 80 websites and duplicated content
Consider the following: A client of ours has a Job boards website. They then have 80 domains all in different job sectors. They pull in the jobs based on the sectors they were tagged in on the back end. Everything is identical across these websites apart from the brand name and some content. whats the best way to deal with this?
Technical SEO | | jasondexter0 -
Redirecting pages from a website to another
Hello Moz community, I’ve got a question and hope you can help! I’ve been working to improve my website’s ranking for the keywords “singing lessons London”. My current website url is http://www.sonic-crew-london.com and the page dedicated to the singing lessons is http://www.sonic-crew-london.com/booking/singinglessons.php I’ve recently bought the url http://www.singing-lessons-london.com which I hope will help to climb Google’s ranks a bit more easily for my chosen keywords. I thought I could redirect the old singing page to the new url. Is that something you would recommend me to do? Is there any specific procedure I should follow to make sure the transition runs smoothly? Any help really appreciated! Many thanks
Technical SEO | | SonicCrewLondon0 -
Using Web Applications for SEO
I am in the sign/banner business, for years I have had a flash based web application that I developed which allows customers to design their own signs/banners online. With the demise of flash i am prompted to begin developing an HTML5 based application to take it's place. Developing this software is a rather expensive endeavor so many local sign shops, which don't sell on the web, don't bother to develop such an application, but what if i gave it to them? I assume a fair amount would find great value in such an application thereby allowing their clients to communicate a design idea without having to drive to the store front. The application would actually run embedded on my site thus earning me a link back to my site. Question is this: Is this a bad idea. If dozens of sign shops are running my application embedded on their sites will the help or hurt me? Thanks.
Technical SEO | | RocketBanner0 -
Google not indexing my website
Hi guys, We have this website http://www.m-health-expo.nl/ but it is not indexed by google. In webmaster tools google says that it can not fetch the site due to the robots.txt but i do not see any faults in it. http://www.m-health-expo.nl/robots.txt Do you see something strange, it really bothers me.
Technical SEO | | RuudHeijnen0 -
My website internal pages are not getting cached with latest data
In our website we have sector list, in home page main category list is displayed click on main category user has to select sub category and reach the result page. EX: Agriculture->Agribusiness->Rice Agriculture page is indexed,but Agribusiness and Rice page is not getting cached,it is showing old indexed date as 23 July 2013,but i have submitted the sitemaps after this 4 times, and some url i have submitted manually in web master tool, but after this also my pages are not cached recently, Please suggest the solution and what might be the problem Thank you In Advance, Anne
Technical SEO | | Vidyavati0 -
Hacked Server IP Range Penality?
I use a justhost.com reseller account to host about 15-20 of my own websites. None of the sites are related, nor do I interlink or do anything blackhat with any of them. All of the sites have unique content. Some of it isn't great, but I didn't use a writing service on any of then, it was all written by myself. Recently I found a list of my sites (as well as about 200 others hosted by justhost) on a hacker website that listed the cpanel usernames. I alerted the host and the issue is being fixed. I am changing all of my usernames and passwords for all of the sites. Anyway, I recently took a look at some analytics and rankings and noticed that I lost a lot of my rankings on a handful of those sites recently. I know there was the big de-indexing of junk blogs recently, but I don't think that is the case. I can still find all of my sites in Google, they are just out of the first 50 results, when a majority of them were ranked from 5-20 in the SERPs. Here are three of the sites and their phrases: http://nintendoconsoles.com/ "nintendo consoles" - This domain I bought from someone so there could be some sort of sandbox period for it. http://webhostingfordrupal.com/ "web hosting for drupal" - This was a new register. http://seotirical.com "seotirical" - we don't show up, but all of the tweets and links to us do. - This was a new register. I realize these sites aren't perfect, and might not have been ready for the first page. The Nintendo site is about 3 months old, but the Drupal site has been around for 8+ months. I might try adding a fresh piece of content tonight to see if that helps, but I thought it was curious that it happened across the board with about 5-6 sites on my one reseller account. I don't even know if the top portion of this post has anything to do with the problems, but I thought I'd see if anyone has insight. Cheers,
Technical SEO | | vforvinnie
Vinnie0 -
Proxy servers and SEO
I read somewhere that reverse proxys can cause issue for search engines. Our server is using SQUID. What potential issues there might be?
Technical SEO | | Jani1