8 ms·
Linode’s 13th Birthday
- msbarnett 10y agoI'm gun-shy of Linode's many security issues, but hopefully this further drives down RAM prices of competitors. I'd love a $10 2G DigitalOcean instance.
- ghurtado 10y ago[EDIT] I misunderstood the security issues parent was referring to
- mgkimsal 10y agothey've had issues with security around their own systems (payment info leaked, IIRC). And if their systems are compromised, because they have the ability to touch my systems (root password reset, for example), there's a potential breach there. and they had their own massive DDOS attack which went on for days last winter (dec 2015?)
- mkorsak 10y agoYou're right, and the downtime was inexcusable. We've learned from what happened and are continuously working to upgrade and better protect our network, and periodically report on our progress on our blog: https://blog.linode.com/2016/05/02/network-status-updates-april-2016/ https://blog.linode.com/2016/05/02/network-status-updates-ap...
- kjax 10y agoTheir DDOS was so bad that we had to migrate all of our servers from Linode to Google, which wasn't particularly fun during the weeks of intermittent connectivity. I think it was on the order of weeks, rather than days.
- mgkimsal 10y agoAtlanta seemed to be the primary target. We had something at LA and never had a problem. Servers in Atlanta were down for days, then up for a bit, then down for days again. I do believe in total it was probably 2ish weeks...
- nsgf 10y agoLondon was affected too. I have since moved on to other VPS providers and would suggest Linode ONLY for hobby projects. It's not just their security issues, it is mostly their disclosure policy...
- paraxisi 10y agohttps://blog.linode.com/2016/01/05/security-notification-and-linode-manager-password-reset/ https://blog.linode.com/2016/01/05/security-notification-and... Among others, OP (likely) isn't referring to your own box specific security.
- vermontdevil 10y agohttps://news.ycombinator.com/item?id=10845170 https://news.ycombinator.com/item?id=10845170
- JonathonW 10y agoMore: https://news.ycombinator.com/item?id=11136948 https://news.ycombinator.com/item?id=11136948 And the parent discussion: https://news.ycombinator.com/item?id=11136399 https://news.ycombinator.com/item?id=11136399
- fweespeech 10y ago> I'm gun-shy of Linode's many security issues, but hopefully this further drives down RAM prices of competitors. I'd love a $10 2G DigitalOcean instance. To be fair, unless you are running critical infrastructure and/or processing things involving money...Linode's quality of security is adequate. (i.e. For hobbyists and small businesses that don't touch take payments but rely on ad revenue ) Security is pretty terrible everywhere in the hosting business unless you colocate your own stuff in a locked cage or pay the tier-1 vendors who cost 100% more than Linode.
- gist 10y ago> unless you colocate your own stuff in a locked cage How much is a locked cage really needed? To me the risks are really someone messing with your cables and taking you off line, or accidentally pulling a power plug, which is QOS really. Not security. Can't remember when I heard of someone carting off a server or plugging in a cable to the console port (once they have gotten even into the racks and are on cameras) and doing any harm. Even if this does happen it seems fairly remote and not a concern unless you are really doing something so important that you need to lock up the servers. Sure price not being an object why not lock them up.
- panamafrank 10y agoPCI compliance i think, also merchants wouldn't touch you with a barge pole if you don't have dedicated hardware... so no aws/gce.
- pfg 10y agoYou can definitely run PCI compliant infrastructure on services such as AWS. Stripe runs on AWS IIRC. Many (most?) AWS services are PCI compliant and using them won't prevent you from being PCI certified.
- aroch 10y agoContemporary PCI compliance does not require dedicated hardware -- You can by PCI Level I compliant on DO, AWS and many other shared-infra providers. Also, worth noting, since most places are integrating payments through, e.g., Stripe, the requirements on the gateway server are much lower.
- Scarbutt 10y agoAlthough I prefer and use Linode over DO, I don't think DO has much of an option than just match or better Linode's price. Its a race to the bottom.
- Sir_Cmpwn 10y ago[Disclaimer: Linode dev here] I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager https://github.com/Linode/manager If you haven't been present in other discussions about Linode security, one of the major factors (in my opinion) is the current manager. It's a large and old ColdFusion codebase, and it's hard to maintain. The new manager is backed by the new Python API and the whole system is significantly easier to reason about with respect to security. I think that the new manager should help ease some concerns, and it's going to be pretty great in other respects too. Hit me up with any questions you have, I'll do my best. In other news, I run a bunch of Linodes myself and I'm stoked to see these upgrades, even though I get my Linodes for free ;)
- desireco42 10y ago:) I probably wouldn't know what to do with more then one or two hosts, but I am envious to know you can have as many as you want (within reason, I am sure) Also... ColdFusion! Awesome.
- fweespeech 10y ago> I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager https://github.com/Linode/manager Open sourcing the UI while keeping the actual portion that manipulates the data + handles authentication ( the API ) doesn't have substantial security benefits since its largely available to the end user already. While I am sure you are correct that the rewrite in Python is easier to reason about and more secure, I feel the way you've presented it might imply it is secure because the source is available which is not the case.
- Sir_Cmpwn 10y agoI don't think I'm implying that by making the manager open source we are making it more secure. The place where security gains come into play is things like the new design of a stateless API talking to a static frontend app, which I think is a much less fragile system in terms of security. And yeah, the Python API is much easier to reason about security-wise in general.
- tiffanyh 10y agoVultr.com seems to be the new guys coming after Linode. Does any [Linode users] have any experience with them? For a company so new they have a surprisingly amount of more features than Linode (eg BSD support, more data centers, dedicated instances, etc) Note: I'm no way affiliated with either company. Edit: adding clarity and intent. My edit is in brackets. I'm no shill :)
- andyana 10y agoI've used them for about half a dozen instances. No problems at all, and they have very responsive support.
- row1an 10y agoVultr's creators (Choopa) have been in the hosting business for nearly 20 years, so not all that surprising actually.
- eatonphil 10y agoIt is not officially supported, but you can run FreeBSD on Linode. I have been able to get FreeBSD (with ZFS), OpenBSD, and NetBSD running on my Linodes. I tried getting SmartOS working but I haven't gotten the configuration right yet.
- Veratyr 10y agoI love Vultr. Pretty consistently performs better than competition (like DigitalOcean) for the same price, cheap, haven't had any issues with reliability. I'd say RamNode is also decent (they do very well in benchmarks) but their support, management and infrastructure is terrible. They were pretty heavily compromised (personal information, passwords etc. leaked) due to a SolusVM vulnerability and refused to remove personal information to prevent it being compromised in the future.
- red_phone 10y agoI've had a few instances up on Vultr for nearly a year now and have nothing but good things to say about them. The OS images they use for their instances are, in my experience, almost completely plain-vanilla (which leads to fewer surprises) and the custom ISO functionality is great if you need to launch an instance on an otherwise unsupported OS. Their instance performance is better than DO in my experience, though I don't know how they compare to Linode.
- hiven 10y agoLinode were superb when I was a customer with them.
- pan69 10y agoCongrats Linode. I have been a customer for many years. Why could there not be a $5 1 GB plan? I have quite a few instances for which I don't need even 1 GB, let alone 2. Doubling the RAM is great but what about storage? Why is RAM and storage still coupled? It's a pay for what you don't use system, having to upgrade to a 24 GB, 8 core box just to get some decent drive space. Ridiculous. I have been with Linode for many years now but it's lack for even some basic modularity will see me leave to AWS soon.
- azinman2 10y agoYou can add disk space or ram independently, if I remember correctly, once you have a VM.
- pan69 10y agoI know, they are "extras". $144 p/a for 12 GB of disk space. $240 p/a for 360 "MB" of RAM...
- juliand 10y agoOnce Digital Ocean launches their block storage feature, it will probably put some pressure on them. Honestly, it's something I've been looking forward as well.
- icpmacdo 10y agoSome needs to make a lambda competetor too
- agwa 10y agoLinode has been a monumental disappointment. I signed up with them in 2005, when they were 2 years old and AWS didn't even exist. They were reliable and the support was phenomenal. The Linode Manager was powerful and yet simple to use. I used them for all my personal and professional hosting needs. In 2013, the support started going downhill. Then there were a series of security breaches, with absolutely abysmal responses from Linode. I now expect to be off of Linode by the end of 2016 (mostly to AWS, with some DigitalOcean), even though in many aspects I still prefer Linode.
- asb 10y agoI've been a Linode customer since January 2009 (so over 7 years now) and would recommend them to anyone. I have been concerned about some of the security issues, but at the same time impressed with other work from the team (the KVM switchover, large scale server upgrades, support experience has always been great for me).
- pbowyer 10y agoCongratulations Linode! I've had better support from your staff than Rackspace and thanks for the RAM doubling - will make my life much easier.
- cpqq 10y agoYes. Avoid. Keep snapshots if you have servers with them. All I can say. Ask about their data redundancy, and if servers have RAID. You will not get any clear answer for a reason. Oh, she praised them 49 days ago, she's a shill as well : https://news.ycombinator.com/item?id=11588937 https://news.ycombinator.com/item?id=11588937
- dang 10y agoIf you have concerns about astroturfing in HN threads, the thing to do is email us (hn@ycombinator.com) so we can look into it. Casually accusing others in the threads, like you've done repeatedly here, is definitely not allowed, so please don't do that again. We detached this subthread from https://news.ycombinator.com/item?id=11917498 https://news.ycombinator.com/item?id=11917498 and marked it off-topic.
- brobinson 10y agoI have multiple posts in my history praising Vultr, but I'm not a shill and I don't even currently use them. I just had a really good experience with them and their support team early last year.
- cpqq 10y agoSounds like a shill. RamNode consistently beats out Vultr on LowEndTalk. I remember the first days of Vultr when everyone signed up and saw other VMs and other people's billing information. RamNode has a great infrastructure, while most of Vultr's locations are single-homed. I'd check LowEndTalk and other sites, and ask Vultr about their disk RAID before choosing due to comments like this.
- dang 10y agoOn HN, users aren't allowed to accuse others of being shills (or insinuate it) without evidence. An opposing view doesn't count as evidence. We detached this subthread from https://news.ycombinator.com/item?id=11917707 https://news.ycombinator.com/item?id=11917707 and marked it off-topic.
- deleted 10y ago[deleted]
- deleted 10y ago[deleted]
- cpqq 10y agoOpposing view? I worked there you stupid shit. Keyboard commander, email me if you want proof of the astroturfing. Otherwise fuck right off back to whatever game you were playing :)
- dang 10y agoWe've banned this account for repeatedly violating the HN guidelines.
- Veratyr 10y agoI assure you, I'm no shill. Like I said, RamNode does very well in benchmarks. My problem with them is that after being hacked, exposing my personal information, they refused to remove it, citing nebulous "legal reasons" compelling them to retain it (which similar hosts had no issues with). Frankly I haven't had another exchange with their support, so I can't comment on their service beyond good benchmarks, terrible privacy/security (they're still on SolusVM as far as I know).
- Grue3 10y agoWell, RIP my 1 year of uptime: http://i.imgur.com/3PYrKtx.png http://i.imgur.com/3PYrKtx.png The migration took 2 minutes and 10 seconds, by the way.
- dugmartin 10y agoNice - it looks like the finally have OAuth support with their new api. I've been waiting for that for a side-project idea I have.
- wilsonfiifi 10y agoI like the new pricing, halves the cost of running Deis.
- brendoncrawford 10y agoI have not checked lately, but there have been two major features lacking in Linode that have compelled me to move away to AWS: 1. Managed firewall service, such as AWS Security Groups. I really do not want to have to manage hundreds of iptables scripts. 2. Easy point and click, yet advanced private network management such as AWS VPC. Last I checked, I had to run OpenVPN on top of my Linode setup, which really was not ideal. Have these things been improved lately on Linode?
- mwpmaybe 10y agoThey have not.
- znpy 10y agoAs a student/hobbyist, since Linode doesn't have $5/month plan (and a referral program), I'm staying on DigitalOcean.
- sandij 10y agohttps://www.linode.com/referrals https://www.linode.com/referrals
- ksec 10y agoI really Hope Linode could improves its image on security. On other front, Why is it the bigger the instance the small the "upgrade" discount. On lower level you essentially get double the Memory. On Higher end you get 30 - 50% only. And any plan to upgrade to Xeon-E5 v4? I would love to see Compute and Memory Instances.
- anand-kumar 10y agoHappy birthday Linode! Now I will wait for DigitalOcean wishes to Linode! :p
- diegorbaquero 10y agoGreat news! I hope DO and Vultr double the RAM too