Contributed by dhartmei on from the success-stories dept.
First and foremost, I would just like to point out that this article is in no way supposed to be a plug for our organization; more than anything, it is to illustrate our use of OpenBSD and show some homage to this great OS.
Let me introduce myself, my name is Daniel Selans, and I have been actively using OpenBSD for the last 4-5 years in multiple environments, starting from enterprises to regular home server and desktop usage. My latest project - Metawire.org Open Hosting, is also run on OpenBSD and this is just an insight of my experience with it. I can only hope, that someone might find this interesting and maybe even inspiring, for I have proven to myself that I can practically achieve anything with this great OS.
So what is Metawire.org you ask? Metawire.org was started by me and my colleague Eric Harrison about a year ago. Basically it is a free multi-hosting solutions provider. It offers shell accounts, virtual hosting, email hosting, DNS hosting and so on, with virtually no restrictions set upon the users, unlike 99% of all other providers.
When we started the project, we had previous experience running a hosting provider, luckily also on OpenBSD (1999-2002 Brained.org). Since the previous experience, we had learned a lot regarding administration, security, reliability and most importantly in our case, scalability (one of the larger problems we ran into with Brained.org). Planning and preparing for the worst possible scenario is one of the most important things one can do before sailing into a new project. And that is exactly what we did.
One of the first steps that had to be taken with Metawire was, that we had to create a plan on how services were going to be distributed within the network, to even out the load. Although initially this wouldn't have presented a problem, but with quick growth, this can create unnecessary headaches for the admins, and even worse - downtime.
Three things come to mind : separation of services - httpd, databases, mailserver for lowering loads; backups - that's obvious and failover server(s) in case the main server decides to die for no apparent reason.
So one of the first steps that we took, was putting together 3 servers which would be running the main services, additional server for backups, which was also the main file server for keeping the users files (mounted via nfs on the main server) and the failover server. It is obvious for what reasons we needed to separate the main services, so I won't go into detail on that topic. Moving right along, we quickly cron'd a few scripts which would do daily user file backups, and weekly full disk image backups. From there, a few more perl scripts and we had the failover server up and running. The idea behind the failover server is simple - the failover server checks on a constant basis if the main server is alive, and if not, quickly grabs the latest image off the backup server, notifies admins via email and sms of the failure and sets itself up as the main server, waiting patiently until the main box is resurrected.
Obviously a word that goes hand in hand with scalability is automation. One thing that you might run into running a shell server, is quick recognition and user land growth. While this is a good thing, it's not always the same for the admin in question. Most of us have lives outside computing, and adding 300+ user sign ups by hand is definatelly not my idea of a good time. So one of our next goals was to create a user management system, which would literally automate user adding to a point of where we have to make 3 or 4 keystrokes. After a few weeks of patient coding, I came up with "mwums" - MetaWire User Management System (which is soon going to be released publicly under BSD license). The user management tool would automatically pick up on the signup file(s), intake all of the entries (name, email, shell, domain, reason, date, host, etc.) and based on our choice accept/reject/ban/dismiss the signup request. It would automatically login to the fileserver, create the necessary entries, set permissions, quotas, and everything else associated with the user.
Once these necessary steps were taken, we were up and ready to go. And this my friends, is the result. We've been running Metawire.org with very minimal downtime, no security problems for the last year and have had over 8500 signups, with ~3000 active users. It is an incredibly fun experience, and I would suggest anyone to try it for themselves.
One thing that I can most definatelly note is that with the use of OpenBSD, the experience was made by far simpler, and headache free. The common belief out there is that OpenBSD is best used for security gateways, firewalls, routers and etc. Well, I personally do not believe so. The capability of this OS is only admin deep. The more you know, the more you can achieve. I have personally ran OpenBSD in large enterprise environments as web servers, file servers, database servers, and frankly, it's resource management and speed is uncomparable to most other operating systems out there, multiply that with the security standards, and you've got an amazing OS.
Metawire.org is just another example of what this OS is capable off.
Thanks for listening guys,
- Daniel Selans
zerash[at]metawire.org
System/Network Administrator
http://www.metawire.org/
(Comments are closed)
By Anonymous Coward (208.246.35.44) on
"Metawire has recently gotten a corporate sponsor, Microsoft, who is going to be putting the administration on a paid salary as well as provide hardware, software, and money for bandwidth for us to promote hosting on the superior Microsoft platform. Metawire will be going through a 2 week upgrade to the new server farm, at the end of which we will be transferring all email and webhosting to the new servers. Everyone show your thanks to Microsoft by purchasing some MS software. Microsoft has really helped this community out big time and deserve all your support."
Comments
By Anonymous Coward (67.70.164.193) on
Comments
By Daniel Selans (65.35.32.207) zerash[at]metawire.org on http://www.metawire.org/
By patch (67.84.36.165) on
By Anonymous Coward (68.130.93.157) on
By blister (68.47.97.208) erh@k03.org on http://k03.org
Comments
By Catcher (172.167.22.227) catcher@metawire.org on http://metawire.org/~catcher
Nuff said.
<3
By Michael (163.252.218.98) on
--Michael
Comments
By Fábio Olivé Leite (161.114.64.72) olive () unixforge ! org on http://unixforge.org/~olive
Comments
By kokamomi (217.215.84.114) on
By Y. Gutsalo (165.247.39.30) deus@globalfuture.net on http://www.globalfuture.net
By Dave Steinberg (66.192.34.8) dave@redterror.net on http://www.geekisp.com/
I've gone from an Ultra 5 running 3.1-current as my prototype to x86 with RAIDFrame, and now to several x86 machines in a configuration much like the one described above. I'm also thinking of grabbing a pair of Soekris machines and doing carp + pfsync.
I sleep very well at night knowing that I'm safe from my users and they're safe from each other. For hosting providers, OpenBSD kicks ass!
By escapenguin (69.72.5.100) on
Comments
By Anonymous Coward (134.58.253.130) on
By Anonymous Coward (24.59.155.190) on
Comments
By Daniel Selans (24.73.230.118) zerash[at]metawire.org on http://www.metawire.org