The one thing that most of us WordPress self installers have in common is that we’re using a web host of some kind whether it be shared hosting, VPS, or a dedicated server. Web hosting is one of those industries that has a very low entry barrier thanks to reselling. This enables fly by night shops to open up as a web hosting company only to disappear a few months later. This doesn’t happen in all cases as reselling provides a great opportunity to learn a thing or two but I’ve since lost my trust in resellers. Choosing a web host is probably the most important decision you make as everything rests on their shoulders for your web site to stay online. Without further adieu, here is a list of questions and things to consider when choosing a web host. Note: This mini guide is mainly geared towards shared hosting.
Trend spotting: WordPress Centric Hosting – Over the past two years, a new form of web hosting has cropped up that tries to bridge the gap between all the safety nets WordPress.com offers with the freedom to do whatever you want via the self installed version of WordPress. Examples of these types of companies include Page.ly and WPEngine. I’ve noticed more and more of these types of companies starting to open shop while at the same time, long time players in the web hosting industry are starting to create WordPress centric packages. One thing you need to keep in mind is that a WordPress centric host does not make them better than all of the other options.
How Up To Date Are Their Servers? – During the early part of 2010, there were a number of instances where large, well-known web hosting companies became victims to exploits and attacks thanks to outdated software in use on their servers. Before becoming a customer, ask the web host in question what versions they are using for php, MySQL, phpMyAdmin, etc. A good web host will generally always be using the most recent stable version of software.
Reputation Check – Type into Google the name of the web host you’re interested in followed by the word sucks. You should quickly noticed that every web host sucks. What you should really be paying attention to is not only the severity and amount of problems that users report, but how the company responded to those problems. Every web host is going to encounter its share of problems but it’s how they handle those problems that makes a big difference. An excellent resource for all things web hosting that has been in existence for years is WebHostingTalk.com. If you’re interested in hardware, software, all things related to what it takes to make a web hosting company run, that forum will make your mind explode with detailed discussions.
Human Recommendation – If you start a thread on the WordPress Support forum asking for advice on which web hosting company to go with, chances are you’ll get 3-5 different company names as recommendations. If one of these companies interest you, be sure to ask around to get personal experiences from folks, especially as they relate to customer service and up time. However, similar to the Google Research conundrum, it could turn out that all of your friends have had success with a particular company and you turn out to be the bad apple with a bad experience.
Check And Double Check Policies – It’s imperative that you read the Terms Of Service and Acceptable Use Policies for the host you’re interested in using. While many hosting companies advertise unlimited everything, you’ll find out by looking in the small print within their AUP that if your site goes overboard with CPU, space, or bandwidth resources, you’ll be cut off. Unlimited is a great marketing technique but there are always limitations so take the term unlimited with a grain of salt.
DoS And DDoS Attacks – I found this out the hard way early in 2010 when my own web site, WPTavern.com was hit with a denial of service attack. When I contacted support for AnHosting, they basically told me that I must figured out a way to stop the attacks because after the site gets suspended three times in a row for using too many resources, they would remove my site along with my account. Needless to say, this infuriated me as I’ve been a loyal customer for over two years and they failed to work with me to find a cause along with a resolution. DoS attacks are a common thing these days so please make sure that whatever web host you’re interested in using has a firewall or some type of preventive measures in place to help out instead of abandoning the customer as my previous host did.
Support – Probably one of the most important aspects of choosing a web host is their support system. Look for companies that offer a variety of support solutions such as forums, ticket system, email, and a phone number. I’d choose a web host that has 24/7 support versus week days only. Extra points to those web hosting companies that don’t outsource their support to countries/companies that don’t speak English very well.
Redundancy – If the companies website and services go down, do they have a fail-over system in place? Is your data mirrored to that fail-over system? Does it have the same security precautions as their first system? This is not overly important as their are a number of options available specifically for WordPress users to create redundancy of their data.
Communication – This is one area in which I see web hosting companies screwing up the most. You’d figure that by now, they would understand that communication with their customers is paramount but most of them still don’t get it. Ask the web host you’re interested in whether or not you’ll be contacted if maintenance is required on the box your site resides on. Also ask where all such service interruptions and other announcements will be published. Nothing like publishing a post in WordPress only to hit the button and see a site not found error.
Payment Options – Make sure you understand any money back guarantee that is offered. I recommend staying away from purchasing web hosting for more than one year at a time unless the money back guarantee specifically states that refunds can be pro-rated. Preferably at 1, 3, or 6 month periods at the most. This way, you’re not locked into a specific host. You’ll regret it when you’re halfway through your contract and the web host experiences severe technical difficulties that last a week or more but you can’t move to a new web host because you’ll lose money from not fulfilling the other half of the contract. It may seem like you’ll save tons of money by purchasing 3-5 years worth of hosting, but realize this is a very high risk you’d be taking.
SSH And SFTP – SSH stands for Secure Shell. It’s a Unix-based command interface and protocol for securely getting access to a remote computer. It is widely used by network administrators to control Web and other kinds of servers remotely. SSH is actually a suite of three utilities – slogin, ssh, and scp – that are secure versions of the earlier UNIX utilities, rlogin, rsh, and rcp. SSH commands are encrypted and secure in several ways. Both ends of the client/server connection are authenticated using a digital certificate, and passwords are protected by being encrypted.
SFTP on the other hand is the secure version of the FTP protocol. SFTP, or secure FTP, is a program that uses SSH to transfer files. Unlike standard FTP, it encrypts both commands and data, preventing passwords and sensitive information from being transmitted in the clear over the network. It is functionally similar to FTP, but because it uses a different protocol, you can’t use a standard FTP client to talk to an SFTP server, nor can you connect to an FTP server with a client that supports only SFTP.
Sandboxing – Probably the most important question you can ask to a shared hosting company is how they secure/sandbox the user account space. By default *nix systems don’t protect user home directories. Also, how do they secure/sandbox the php processes. By default, php has to run with apache privileges and any code that runs on the server, regardless of user, runs in the same security context. Sandboxing the PHP code to a specific user account is important on a shared host so that user1 can’t write some code that hijacks user2?s site.
Conclusion:
While this isn’t the all encompassing guide to choosing a great web host to put your WordPress powered web site on, it does provide food for thought. This is just a short list of things to consider but in reality, having a great experience with a webhosting company is almost like winning the lottery because it’s so rare. In my experience with WPTavern.com, I experienced 2 great years with my previous host and then it turned into a nightmare in just a matter of two weeks forcing me to move. In fact, I moved twice in one week due to the problems I was having with migrating my site. Ultimately, it comes down to gathering as much information as possible in order to make an informed decision as to whether a particular webhost is right for you. Price should not be the only determining factor for hosting your site, especially if you plan on taking things seriously.
Kind of surprised that Page.ly and WP Engine get recommendations and no other hosts are mentioned.
.ly extensions are run from Libya which has a history of shutting down domains it finds offensive to Islam.
Customers pay Page.ly $20 a month for 5GB of storage space and you can’t have more than 20,000 page views.
WP Engine charges $49 to host ONE site with 50GB of storage, 50,000 page views and no support for WP multi-site capability.
I pay $6.50 per month for over 500 GB, 40,000 page views and unlimited domains.
I’m not knocking Page.ly, WP Engine or their respective professionalism or hosting capabilities. But their pricing structure makes them cost prohibitive to most people running their own web sites. And the way that they’re linked to in the article makes them seem like they’re the web hosts the author highly recommends above all others.
Well, that’s now how I wanted those links to look. I linked to Page.ly and WP Engine as they are two good examples of web hosts that are bridging the gap of the security blanket WordPress.com provides with the freedom that WordPress.org provides. They were not linked to as recommendations but as examples.
Personally, my recommendation of a good web host is HostGator.
First, I don’t use Page.ly.
However, just because Page.ly uses .ly for THIER domain doesn’t mean their clients are hosted under .ly domains or that their servers are in Lybia… so the only risk is Page.ly’s homepage might be inaccessible, and I’m fairly certain that they already have backup domains in place just in case Lybia shuts their domain down (that based on my somewhat vague recollection from an interview I heard once upon a time, one which I suspect Jeffro may have done).
As for storage/andwidthb limit comparisons they are only relevant if you actually can and do make use of them… I
What many people don’t realize is that hosts with lower storage and bandwidth caps often dramatically outperform those hosts promising “unlimited bandwidth and storage”. Cheap shared hosts advertise this way simply because their client base is to naive to know better… and frankly probably doesn’t actually NEED better. CPU is far more important for a busy site than storage or bandwidth caps.
Just as an example… one of the host’s I use (Host Monster) offers unlimited everything… yet my account with them strains under the load of just 3 WP sites which cumulatively getting fewer than 800 page views per day.
That account gets 2-4GB/month total traffic and averages out to more like 10-15,000 page views/month. Full disclosure there are 3 other WP sites on that account that get <10 page views per day and a couple sites in development that get are only getting hit by me. There are only a few very very low traffic emails accounts on it. I keep that account to host sites under development for customers who don't have their own servers yet and for "friends" who need free hosting. In short it's all non-critical so I don't care too much about the performance of the sites (as long as they stay up), every site runs W3TC. However, that HM account is getting CPU throttled by 2-10 minutes out of every hour of the day… yes EVERY hour of the day… it's not like it's only getting throttled when there is a spike.
To recap: 3 sites… 12,000 views/month… 2-4GB/month and I'm throttled in spite of promise of "unlimited everything". Again I don't use Page.ly but I'd wager that a single page.ly site hitting those same numbers would grossly out perform my sites on HM.
This is what makes comparing shared hosts damn near impossible. No shared host will guarantee any sort of CPU.
Without knowing REAL numbers for shared hosts, lets assume they put 100-300 accounts on a single server, might be even more… but lets give them the benefit of the doubt and say 100. Assuming a 3Ghz server that works out to 3000Mhz/100=30Mhz per site. This number is really impossible to estimate accurately, but I think that's a somewhat reasonable estimate to give a ball park figure. HM charges $7/m for that.
By comparison, take a look at VPS.net's _smallest_ offering, a single node which offers 600Mhz/376MB/10GB/250GB at $20/m.
Does it matter? Not for some users, but it sure does matter for others. Note, that VPS.net is unmanaged so it's not really a fair price comparison, the point it the gross performance differential between a popular shared host and a VPS. Now, I'm sure there ARE shared hosts out there that don't jam quite so many accounts on a server, but they aren't the big names in shared hosting.
That's what I'd like to hear about though in the next hosting review I read… HARD numbers on shared hosting. Good luck getting those…
Wow that’s a long comment 🙂
Why comment if you don’t have anything to say 😉
Another alternative not mentioned is buy your own box and place it in the basement (im with http://xmsnet.nl/diensten/internet = 200 Mbit up and down, pretty much a dedicated ip and own servers are promoted).
I’d like to make another recommendation of something to suggest in this post : some web hosts offer you to import your previous data for you.
That may imply the databases, the wordpress files, and also the other files hosted on the previous hosting account.
I’ve had various web hosts in my webmastering life, and the best transition I ever had was from servage.net to hostgator.com. The hostgator staff took my previous host credentials (FTP, BDDs, I gave it to them) and mirrored everything by themselves, including non-blogging folders, clean and ready, even editing wp-config files.
When you’re an experienced, it’s a great gain of time avoiding you a tedious activity.
When you’re inexperienced, this is a life saviour.
This is an excellent point! This is also why, at least for shared hosting, I’d never touch GoDaddy or DreamHost… or anyone else with thier own hosting control panel. Transferring from one cPanel host to another is a cake walk compared to the alternatives… and don’t even get me started on IIS servers, which I avoid touching at nearly all costs. Which is not to say IIS is bad, it’s great for some things, just not WordPress… at least not in my hands.
Once you get into VPS’s that’ll change because you may not want to be paying for a cPanel license all on your own and it may be worth dealing with the custom server backend, but that’s beyond Jeff’s article again.
i only have one limit. i can’t upload anythingh bigger than 50mb. everythingh else is unlimitead since march 2010 and all for 10 euros/year payable with SMS. actualy it’s free but those 10 euros is to remove the ad that host puts it ahead your site. i did’nt find anything better so far. when i joined the acces was free, now you have to be invited. it’s easy to understand why.
Really nice Hosting Guide, i happened to skim through it, you got any suggestions for Good rubyonrails hosting providers??
Hostgator is the most popular hosting provider in all around the world. Bluehost is also popular. But, For most of my blog, I am using Free Blogger Hosting. Blogger hosting s free, reliable and no up-time problem.