Forum Moderators: phranque

Message Too Old, No Replies

How to Choose my Website's Foundation?

a Question of Security vs. Usability

         

ThomasW

4:37 am on Dec 31, 2020 (gmt 0)

10+ Year Member



Hello,
I have been trying to get my Website back online for some time, however, I haven't been able to decide how.

I began my first Website over fifteen years ago on my school's servers, then when it got deleted at the end of that year, I built a new one using the free tier of a shared hosting service which served my well for eleven years until they discontinued their free subdomains and essentially forced their users to rent a new one from them if they wanted continued hosting. Thankfully this time, I could at least download my site instead of losing it and having to start from scratch once again!

I have checked out a number of other free shared hosts since, and none have been good enough, (most being extremely limited [moreso than I was ever used to] unless you paid money), plus I would like more flexibility to do more dynamic stuff. As such, I thought I should try self hosting, something that I've wanted to do for about a decade now anyway!

Microsoft Windows is what I know best and most enjoy, after being a user of it for about 22 years. I have been considering using Windows 2000 Server Edition (with IIS [or Apache/NginX if need be]) on my old PC as my Web server, as it seems to be considered abandonware by now (so it can be gotten easily for free without Microsoft seeming to mind, unlike later versions), contemporary to and compatible with the hardware I have available, and it's also the most up-to-date version which is user friendly and customizable to my liking to make it enjoyable to use.

I am aware that this OS has not received regular updates in a long time, (and had major known vulnerabilities which Microsoft couldn't or didn't fix even during the mainstream support period). Everything in life entails risks, and I am aware that this means my Website could be attacked more easily if someone wanted to.
This does not concern me, as I will be certain to keep regular backups so I can restore everything in such a scenario.
My concern is this: given that I will be hosting this Website from my home, will this draw undue attention to my local network and increase the chances of it being cracked into? I have secured separate static IP addresses for any Websites that I want to host, and could perhaps configure my router in some safer way if this would help, but I don't know whether that is enough. If it's a serious risk, that could be bad for me since the devices on my local network connected to the Internet also run unmaintained OSes. This part is non-negotiable — I am not willing nor able to change this, however, I am considering taking the leap into running my Web server on some version of GNU/Linux if that is considered a serious risk mitigation to the security of my home network. I have never used it, so there will certainly be a learning curve, but I may just need to take the plunge, as I know it's more secure, and also supports many more Internet application programs I might want to run such as an IRC bouncer or other things.

If you think that Windows 2000 Server isn't a crazy idea and might help me get my site back online more quickly, please let me know which edition is best if you have an opinion on that. WinWorld has a number of versions in their software library [winworldpc.com], and I wasn't sure whether the regular Windows 2000 Server or the Small Business Server version would be better.

If you think that using Windows 2000 Server is a terrible idea, and I should just leap into GNU/Linux, please let me know which distribution you think is best.
For this option, please consider that
  1. I have never seriously used any Unix-like system in this way, and
  2. I am planning to run this server on my old computer tower which is a Pentium 4 with 1.6 GHz CPU and maybe 1 GB of RAM (I can't remember exactly; it could have been upgraded to 2 GB since we got it around '02) so the distribution will need to be supported (most seem to still list i386 or i686 instruction set support)
My hope is that after the OS installation, I can just follow some simple instructions in order to install a Web server from the command line interface. I am comfortable enough with the CP/M, MS/DOS, or Windows-style commands and conventions, but I guess I'd just have to adapt to the Unix-style ones. I hope that I can get by installing everything I need to this way, and then administer remotely without having to think about it again. The Unix-style CLI seems like enough of a learning curve to me, so I would really rather not have to learn to use any of the window managers or desktop environments and force them into something tolerable to use. If it turns out that there's more to this than I thought and I do find myself needing a desktop environment, I would like to have something compatible with the Chicago95 GUI [github.com], as it's the only one I've seen that looks tolerable to use (seems to be designed primarily for XFCE or GTK)
It seems like Debian and Ubuntu are the big popular ones, though I've also been looking at antiX [en.wikipedia.org], which has rad release names, is advertised as lighter weight and more compatible with older PCs, and doesn't include "systemd", which I don't fully understand the function of, as I only see it spoken of around the Web as some sort of pernicious dependency implanted for the sole reason of stealing my freedoms or something! XD
I was hoping to get this running before the end of the year (which I'm aware is pretty soon, so any suggestions are much appreciated! :)

Thanks,
Thomas

[edited by: ThomasW at 5:22 am (utc) on Dec 31, 2020]

Kendo

5:17 am on Dec 31, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Windows 2000 will definitely pose some risks and may not include features needed to day such as TLS. Also, some time after 2000 there were some diabolical virus that infected computers by merely being connected to the Internet.More modern distros will have better file management and recovery tools. I used to host servers with this version and power outages (file/disk damage) caused lots of problems. Windows 2000 may also be limited in ram capacity and may not even run on your computer/motherboard.

If licensing cost is a problem, as you are a Windows user, no doubt you will have Windows on your desktop. If so and it is a "Pro" version or higher, then you can install IIS and management tools by adding Windows features. If it is for one website only, install in wwwroot... that is all you need.

ThomasW

6:03 am on Dec 31, 2020 (gmt 0)

10+ Year Member



Thanks for your reply!

I have just been very tempted to try using Windows 2000 Server for the experience; I'm really afraid of infecting my home network if that is something to be concerned about. File systems and management are actually things I was least looking forward to about these Unix-like systems, though as you said, they sound like they're probably more robust; just less user friendly (or at least unfamiliar to me!)

I just looked up the support page for my computer tower (the Dell Dimension 4500) and was surprised to find that Dell only provides support for MS-DOS and Windows XP — nothing for Windows 2000 at all, despite coming out so recently after its release! I still suspect that it would work alright, but that is a surprise for sure. It should have no issue using the 1–2 GB of RAM installed in my system, though Windows 2000 Advanced Server can use up to 8 GB!

I do have Windows XP Professional already on all of my PCs — unfortunately my experience trying to host from it was similar to that with the "free" shared hosting services — it looks and sounds good, until you actually try to use it, and then it doesn't actually work. The Windows XP IIS system help seems like it's mostly written for Windows 2000 Server, since they typically don't actually explain how it's been crippled. I know you're supposed to be able to run one Website from it, but I could never get it to work (although it is possible that was because I had no static IP address, though I don't think I could even get it to work locally — it was some time ago now. The other thing is that I've done a lot of thinking about what I want to host, and I've decided I do want it hosted separately on separate domains, which I don't think should be a problem since I have separate static IP addresses for all of them (AFAIR).
I have never had any kind of encryption of my Web sites (just standard HTTP access) and I do not see why it's necessary at all (in fact I think it's most often much worse than nothing considering the exclusionary and unreasonable way it's usually implemented), but I probably would like to implement it sometime in the future as a courtesy option for users, especially for any Website with what might be considered "sensitive content", plus I've heard that it's highly preferred for SEO (and even that providing any HTTP access is punished, though I'm not sure that's true)

Thinking about these issues really does make me feel like I should just jump into GNU/Linux. I wonder if anyone has had issues installing from a USB memory stick on such a machine? Does this need to be supported in the BIOS? It seems like a bizarre concept to me since I'm only used to floppy disks and CDs/DVDs for installing an OS, though it would certainly save me the time and trouble (and reliability issues) that burning optical discs can bring! (I've not had good luck with them in the past)

phranque

7:14 am on Dec 31, 2020 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I wonder if anyone has had issues installing from a USB memory stick on such a machine?

one advantage of starting with a usb stick is that it is easy to try and completely reversible.
last time i did this (a few years ago) it was probably <15 minutes from searching for the current procedure for my preferred distro to having the machine booted up under gnu/linux on a usb stick and poking around.
it takes more time than that to create disks and filesystems and download more software and updates, but it is actually quite a simple process.

tangor

9:11 am on Dec 31, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



There are wonderful adventures and self-education with the self-hosting route (just check you ISP will allow that traffic!).

Meanwhile, shared hosting, much of which is quite capable these days, is moving toward the absurdly cheap category and might fill that niche while you study the pros and cons of self-hosting.

Either is a very viable path forward!

graeme_p

2:06 pm on Dec 31, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I would like to have something compatible with the Chicago95 GUI [github.com], as it's the only one I've seen that looks tolerable to use


That looks like just a theme to me: it will make your desktop look like Windows 95, but not work like it except in superficial ways.

I would try to avoid installing a GUI on webserver anyway, as you said you would prefer to. Develop your site on your desktop, and copy it over to the webserver. You will need to configure the webserver, and do some admin, but that sort of command line use is very well documented.

The objection to systemd is that it concentrates too much functionality in one program, breaking the unix philosophy of using lots of small and simple programs rather than a few big and complex ones. I agree with the objections but all the major distros have adopted it so its a lost battle.

I use Antix on one machine. its great if you want something that will run on old machines, but its got some rough edges. I am pretty sure Ubuntu is phasing out 32 x86 support (not there in the most recent versions?) but Debian is not.

Personally I think it would be much easier to use cheap shared hosting (and it can be very cheap) or get a VPS (a $5/month VPS will probably perform better than such an old machine on a residential connection). We are not allowed to recommend particular hosts here, but you can find many easily enough.

If you are set on hosting it at home, you might look at buying something cheap like a Raspberry PI (you are in Canada? Its less than $50 over there, although you need a power supply, an SD card and some cables too on top of that). It will probably pay for it self in reduced power consumption and space requirements compared to the P4.