Όλες οι προτάσεις
Υπό εξέταση Core Platform

Per-account container isolation

Joti P. 0 σχόλια

Πρόταση

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Υποστηρίξτε αυτή την πρόταση Βοηθήστε την ομάδα προϊόντος να κατανοήσει πόσοι πελάτες το χρειάζονται.

Συζήτηση

Δεν υπάρχουν σχόλια ακόμη

Προσθέστε πρώτοι πληροφορίες για αυτή την πρόταση.