hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Reseller Hosting : Alabanza and mod_perl?

Reply

Forum Jump

Alabanza and mod_perl?

Reply Post New Thread In Reseller Hosting Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 09-06-2000, 05:52 PM
JeremyL JeremyL is offline
Web Hosting Evangelist
 
Join Date: Sep 2000
Posts: 514
Question

The info I got from Alabanza says this about what comes pre installed with the server

"*We CANNOT add mod_perl for security reasons."

I am no apache/perl guru so I need to know what mod_perl is used for and what security holes they are speaking of.

For them to specifically state this there must be alot of people who ask for it and I have heard of it many times.



Sponsored Links
  #2  
Old 09-06-2000, 08:08 PM
Annette Annette is offline
Web Hosting Master
 
Join Date: Apr 2000
Posts: 1,588
There are certain ownership issues attached to using mod_perl, specifically dealing with mod_perl directly executing code. This is the security problem, and why mod_perl is not typically offered by virtual hosting companies (but dedicated customers - one site on a server - quite frequently install it, as they are the only ones utilizing server resources anyway). For more information, take a look at the FAQ here:
http://www.ping.de/~fdc/mod_perl/



__________________
Annette
Hosting Matters, Inc.
Superior service. Sensible price.

  #3  
Old 09-06-2000, 08:21 PM
Speedie Speedie is offline
Junior Guru Wannabe
 
Join Date: Sep 2000
Posts: 50
Jeremy,

Techie version: mod_perl is a Perl module that enables you to embed a Perl interpreter within the Apache web server. Embedding the interpreter allows you to write Apache handlers or modules entirely in Perl. You can even configure the server using Perl code. And all existing modules on CPAN (or elsewhere) are available to you during this process.

English version: mod_perl speeds up CGI scripts and other Perl programs by negating the need for a seperate Perl interpreter. Normally when a website visitor runs a Perl program the request is sent to the server, then from the server to the Perl interpreter, the interpreter compiles the Perl code and runs it, then sends the result back to the server, from where it is sent back to the visitor. Using mod_perl the request simply goes visitor > server > visitor. mod_perl also caches compiled code which can save on server overhead as well as giving marked speed increases.

The security implications are fairly obvious - the server is opened up to direct attacks from within Perl code, attacks from which it is normally shielded (at least to a degree) by the interpreter. It is also at the mercy of sloppy coding, syntax errors, etc etc.

The final nail in the coffin is that mod_perl enabled Apache servers have massive memory demands - anywhere from 5-20x the memory demand of a server running Apache on its own.

Hope this helps,
Speedie.

__________________
What would happen in a world without hypothetical questions?

Sponsored Links
  #4  
Old 09-06-2000, 08:22 PM
Speedie Speedie is offline
Junior Guru Wannabe
 
Join Date: Sep 2000
Posts: 50
Rats - that Annette just types too darn fast

Speedie

__________________
What would happen in a world without hypothetical questions?

Reply

Related posts from TheWhir.com
Title Type Date Posted
Linux Malware Operation Windigo Infects 25,000 Web Servers Web Hosting News 2014-03-19 11:44:53
Admin-Ahead Server Technologies Listing 2014-09-20 20:46:21
AWS and DevOps Skills in High Demand, says Dice Web Hosting News 2013-09-11 13:42:13
cPanel & WHM Software 11.36 Reaches Stable Tier Status Web Hosting News 2013-04-09 11:44:33
cPanel Security Updates Address Perl Module Vulnerabilities Web Hosting News 2012-12-06 12:55:54


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:
WHT Membership
WHT Membership



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?