Dilemma in choosing a platform for hosting on hetzner with bitrix , Proxmox / Centos / Centos + KVM ?

Question

OpenVZ

Good time!
Contracted to administer a server on hetzner which hosted 12 sites. px60
Sites are infected with spambots.
The server is running FreeBSD, but I somehow got used to Linux (Centos)
There is a desire to divide this "economy" into virtual shelves.
First of all, because of a bunch of different developers who do not worry about security, but at the same time require maximum rights, up to root via ssh
Sites spin under bitrix
I read an article on Habré, Organizing your virtualization host on Hetzner . I really liked the approach.
How about performance?
I dealt with openvz, but there were problems with ip addresses.
I like virtualization under Centos, but poor performance on the subdisk system.
proxmox haven't tried it yet :-(
Will this option solve the problem with access rights differentiation at the site level? That is, 1 site = 1 virtual machine!
How are things going with stability and performance?
How about transferring to other sites / servers?
To which pitfalls should pay attention?
Thank you in advance !

Answer 1

> How about performance?
There is a small overhead, of course, but it is not critical, if you use containers, and not virtual machines, then it is generally scanty, so everything is normal with performance.
> Dealt with openvz, but there were problems with ip addresses.
More specifically, what are the problems, you’re just talking about ProxMox and both OpenVZ containers and KVM virtual machines are built into it, in your case it can be beneficial to use OpenVZ due to the uniformity of machines, containers have a smaller overhead, backup faster, you can dynamically expand disks and more on trifles, there are also disadvantages, but in your case there are not so many of them.
> I like virtualization under Centos, but poor performance on the subdisk system.
Centos is an OS, what kind of virtualization you like, you can install Xen, KVM, OpenVZ, Vbox, VMWare and a bunch of other exotic things on it, it seems to me that you don’t quite understand what you are talking about.
About a disk subsystem, it is possible figures in studio? If you use some kind of shit as disks, then performance will not be so hot even without virtual machines.
> Will this option solve the problem with the differentiation of access rights at the site level? Those. 1 site = 1 virtual machine!
He will decide, but if you do not change the approach radically, then instead of one machine you will clean ten virtual machines from rootkits and other garbage.
> How are things with stability and performance?
Depends on the server komplektuhi, and stable and productive and convenient, if the radius of curvature of the hands according to GOST.
>How about transferring to other sites / servers?
Much easier than physical servers, wrapped a virtual machine in a backup entirely on a new hyper, deployed, no hemorrhoids.
>What are the pitfalls to watch out for?
For everything that is described in the official dock, for the product that you choose, and so solve problems as they become available.

Answer 2

Thanks for such a quick response.
> More specifically, what are the problems, you're just talking about ProxMox and both OpenVZ containers and
> KVM virtual machines are built into it, in your case it can be beneficial to use OpenVZ due to the uniformity of machines,
> containers have a smaller overhead, they back up faster, you can dynamically expand disks and more on
> trifles, there are also disadvantages, but there are not so many of them in your case.
Had a problem with openvz openvpn.
> Centos is an OS, what kind of virtualization do you like, you can install Xen, KVM, OpenVZ, Vbox,
>VMWare and a bunch of exotic things on it, I think you don't quite understand what you're talking about.
Raised KVM / OpenVz / Vmware. Some servers run Centos + KVM out of the box.
> About a disk subsystem, it is possible digits in studio? If you use some kind of shit as disks, then
> without virtual machines, performance will not be so hot.
Under Centos I wanted to transfer terminals under Linux (25-30 machines for surfing and editing documents and light photo processing).
RAID 5 / 6 / 10 on the host machine showed performance from 130 to 250 MB/s (6 seagate Constellation disks)
. As a result, I had to abandon the idea of ​​\u200b\u200bputting LTSP into a virtual machine.

Answer 3

1) Due to the fact that it all works on the virtualization built into the processor, it all works in approximately the same way.
2) In openvz, in general, the simplest network stack and there are no problems with IP addresses there.
3) There seems to have never been a particular problem with disk, no more than in any other virtualization, and on xen in pv mode, disk generally worked at the host level.
4) I keep almost everything on proxmox and openvz, not ideal, but alas, there are no better solutions.
5) Yes, it will solve the problem at the level, one site is broken, the rest are working.
6) it is exactly as you put it, everything is stable and productive for me.
7) Backup restor, if the virtual machine is small, it migrates from me in a couple of minutes.
8) Yes, there seem to be no special pitfalls, everything is like everyone else's monitoring, backup to a remote site, reservation.