Alle verzoeken
In beoordeling Core Platform

Per-account container isolation

Joti P. 0 reacties

Verzoek

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Stem op dit verzoek Help het productteam begrijpen hoeveel klanten dit nodig hebben.

Discussie

Nog geen reacties

Voeg als eerste context toe aan dit verzoek.