YOORshop journal

Latest news

Technical information, product updates and communications about our services and infrastructure.

Reinforcement antivirus/antispam

We have just installed a new more powerful software to protect from spam/phishing.

There is a new icon in your cpanel, but do not touch anything a priori, because we are going to setup filters at server level...

Server migration july 3rd 2016

Following to a material issue detected :
https://www.yoorhosting.com/serverstatus.php?view=resolved

Title : Reboot planifié maintenance

What you need to know/check if needed :

- IP of this DNS has changed :
nsa.hosting1976.fr      46.105.110.51
Update it at your registrar if your registrar was asking you this, in other case, nothing to do

- If you have issues with payment modules, you must re-install them completely as new to make sure security certificate will print on new server
 

IMPORTANT! : Major problem of Wordpress Security

Hello, The Wordpress team has released a major vulnerability affecting all previous versions of WordPress 4.5.2 :https://wordpress.org/news/2016/05/wordpress-4-5-2/ You are required to update your site in the months from that day !!!All wordpress websites not updated July 31, 2016 will be suspended! so make your arrangements nowWe have already found one website hacked, and that was used to make fishing on a fake login page of YahooDetails :files named mail.html and shopping.html were found in these folders :/wp-includes//wp-content/We are going to launch a server scan in user accounts to identify these similar files, there may exist others with different names... (there is nothing to confuse with server security, this is only a website security issue in wordpress)If necessary hire a webmaster :https://support.yoorhosting.com/knowledgebase/1130/Where-to-find-a-webmaster.html Use Wordfence temporarily to do a scan, it is very convenient to detect if system files of your wordpress are already compromised.Reminder about the Ninja firewall security plugin to install once your site updatedhttps://support.yoorhosting.com/knowledgebase/1302/MANDATORY-security-measures-for-WordPress-to-apply-on-our-servers-.html Tired of WordPress ?, we too !There are alternatives:https://www.yoorhosting.com/en/301/web-hosting-zenario-softaculous.htmlhttps://www.yoorhosting.com/en/308/web-hosting-Clipper-CMS-softaculous.htmlhttps://www.yoorhosting.com/en/71/web-hosting-QuickCMS-softaculous.htmlThanks for your understandingThe YOORshop direction.

Termination of pagespeed

We noticed :

- Abnormal loads when purging cache find
- No more speed increase since the server is hybrid SSD
- The pagespeed Versions are constant beta, and we can not tolerate bugs that can not be solved

We keep nginx compression as a direct and separate mode, here is the speed gain

We decide to remove pagespeed, and proceed to adaptations all profiles nginx = you have nothing to do even if your profile is still named with pagespeed name

Commments on this week

The beginning of the week was very hectic with this migration that caused some surprises with mysql for 48 hours, firewall bug which required an immediate reboot, payment modules with some customers that needed reconfigure with encrypted lcoal certificate, and some outdated as CMS opencart who lost their landmark :) The situation is stable and everything is back in order. It's been however a great successful migration. This new server has given fast some good feedabacks among some who have seen a great improvement of speed in their back office. Good wind, and hang your wigs !

New server hybrid SSD migration

We realize that there is a drive capacity problem and architecture disc writing raid 5 on the server:web1.hosting1976.frWe see short slowness regularly, which is not acceptable in middle term. It is not too late to do despite our latest SQL optimizations, but it takes more, in effect this server is only at 25% capacity, and there will inevitably be a read-write disk problem when it will be to its destination 50%. We setup from now a new SSD hybrid server that will be mirrored RAID1 both SSD and with SATA drives also traditional raid 1. The SQL server and the OS will be on what's best performing there to rev up : SSD, and this remove a significant burden on the party or are stored clients datas: SATA. SATA part it will also be more effective than 2 times in reading, and 50% in reading.Globally, this wil mulitply a lot the disk write/speed capacities, and then performance also, especially on SQL. We take the time to do this migration will take place by 1-2 weeks IPs remain the same as the DNS, wholesale, you would have nothing to do. A planned trouble ticket is opened for monitoring operations at the appropriate time. More details :Nous resterons en centOS 6.7 au vue des problèmes que nous avons rencontré sur notre proper serveur, pas de Beta possible !The processor will be bi-core Intel 16c/32t engraved 22nm instead of bi-core 16c/16t from AMD 33 nm.RAM will be DDR4 instead of DDR3The new server will be located in Strasbourg instead of Gravelines, to promote southern :)

http2 is now activated on all hosting plans !!!

We implemented at nginx easily, replacing SPDY.(It is anticipated that Apache will also have its version in a few weeks is the beta for now, but here is nginx that manages the http, this will not change much things)Read :https://en.wikipedia.org/wiki/HTTP/2 It allows a gain of 5-10% on the sites in general compared to SPDY.Http2 is only for SSL websites, or you remain on actual mode http1 ! If partial, http2 wil be activated for thoses SSL pages onlyTo know :- To date, the most popular browsers have enabled HTTP2 support for SSL websites only !- There is no future implementation project worldwide of support for non SSL websites ! SSL websites are the single future !Read :http://caniuse.com/#search=http2 Verification SSL http2 on your SSL pages :https://tools.keycdn.com/http2-test Comparisons :https classic :https://hwblog.global.ssl.fastly.net/wp-content/uploads/2015/01/https_page_load.pngSpdy :https://hwblog.global.ssl.fastly.net/wp-content/uploads/2015/01/spdy_page_load.pnghttp2 :https://hwblog.global.ssl.fastly.net/wp-content/uploads/2015/01/http2_page_load.pngIf you use SSL partially or completely, you will in all cases get the confirmation that HTTP2 is enabled :add in chrome extension named : HTTP/2 and SPDY indicator, go on your website, and click in toolbar the symbol 'stom' to see details...You must be 100% SSL to benefit of http2 on all your website, or partiall ssl will combine with http1Conclusion :To be uptodate, to be under http2, you must be 100% SSL, not even SSL partial as your website, except client area where ssl is enabled by ex/), will remain http1 !YOORshop gives you all included to proceed, why not giving the best to your visitors ?!!Here are the steps :https://support.yoorhosting.com/knowledgebase/1551/Activate-SSL-for-your-whole-website.html

MySQL server optimization

web1.hosting1976.fr server

We performed multiple SQL server optimization settings, SQL was restarted at 5 am this morning, the sites have therefore been a disturbance of 1-2 minutes.

Everything is OK

Temporary suspension of PageSpeed

We have been alerted as all over the world by Google, this version pagespeed a security breach. This means basically that a new hacker has found a flaw, so it is from this point that it is dangerous in theory !Our high security of websites make that we are confident about their safety, but by precaution we disable pagespeed right now server wide, and will be waiting to learn more about the way to go ahead... You have nothing to do !*************************************** Result of the investigation : We update Nginx + pagespeed every week, and we were already using the latest version 11.33-0-beta :https://github.com/pagespeed/ngx_pagespeed/releases Google has indeed bugged with wrong recipients in these mailing lists ! We have re-activated pagespeed! The case is closed**********************************************Update 25/07/2016Pagespeed is removed because it is not reliable, and the gain is almost zero in fact, and the compression at the server level is the gain made...