Cloudlinux, EA4 and PHP Handlers. Impossible Triangle?

[luigidelgado]

Hello everyone.

I´ve been working with cPanel servers for around 7 years. EA4 came with some advantages and some disadvantages when trying to add Cloudlinux. Seems to me (please correct me if I am wrong) there is no winner combination here I can have.

• EA4 Default cPanel configuration will install the most insecure handler, CGI. Why if cpanel recommends that Ruid2 should run with suPHP suEXEC or ITK would it come with CGI as the default handler??
• Cloudlinux won't control memory usage if using Ruid2 or ITK. Incompatible also with DSO.
• Cloudlinux has this compatibility matrix that lets you see that if you are using cPanel (with Apache naturally) there are only "3" compatible options: SuPHP, FCGI and CGI.
• But there is only one fully compatible option: suPHP. CGI is a no go for security reasons and FCGI is experimental and not compatible with multi PHP versions. This leaves us with only one fully compatible option which is the most inefficient, cachingless and high-CPU handler, suPHP.

So looks form me that the only option for Cloudlinux compatibility will be to sacrifice performance and security. Am I right or am I missing something?

 

[cPanelMichael]

Hello,

Have you looked into using mod_lsapi with CloudLinux? It's documented at:

CloudLinux Documentation

Here's the initial blog post from CloudLinux when this module was released that goes into some detail about the security of existing PHP handlers:

Beta: mod_lsapi - supercharge your Apache PHP hosting

Thank you.

 

[luigidelgado]

mod_lsapi looks a great option once I move into Cloudlinux as I see it is only available for Cloudlinux customers, right?

 

[cPanelMichael]

New mod_lsapi looks a great option once I move into Cloudlinux as I see it is only available for Cloudlinux customers, right?

Yes, that's correct.

Thank you.

 

[luigidelgado]

Michael,

So now I am in Cloudlinux. I found LSAPI in the profiles in EasyApache 4.... so I ran one of those Profiles (the Default cPanel one) added some modules I needed including OpCache... But I am back to see the PHP handler to be CGI. Looks like I lost suEXEC and FCGI... How does LSAPI work if it says its a "direct replacement to suPHP and FCGI"? Cant get that.

Also, how can I tell if LSAPI is working or not?

Should I still install FCGI to avoid CGI? Its a bit confusing...

 

[cPanelMichael]

Hello,

CloudLinux documents this module at:

CloudLinux Documentation

This thread in-particular should answer your questions:

lsapi - installation

Thank you.

 

[Anoop P Alias]

You can upload a phpinfo file in the document root and call it via web browser and check the Server API section in phpinfo.
It should show lsapi if using mod_lsapi . it will show CGI for cgi and SuPHP etc.