Todos os pedidos
Em análise Core Platform

Per-account container isolation

Joti P. 0 comentários

Pedido

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Votar a favor deste pedido Ajude a equipa de produto a perceber quantos clientes precisam desta funcionalidade.

Discussão

Ainda não há comentários

Seja a primeira pessoa a acrescentar contexto a este pedido.