Website security starts with website backup.
We wanted to protect websites at very cost effective price and proactive way. We ended up building a full fledged website backup cloud platform; figured it was the best way to go about running security scans.
Anyway, we ended up building these solutions:-
- to cater those who don't care but wouldn't mind a free backup - Free 1 GB Plan on a RAID0 enterprise harddrive. I guess 1GB caters to most.
- Economy plan - Cloud Storage backup
- Site owners can keep a full copy of backup, including all snapshots(ie whole git repo) of website, on own cloud account - using Backup Sync service, on to their own Cloud account, currently supporting Any S3 compliant and BackBlaze account.
- Enterprise plan - Cloud Storage(DigitalOcean) with another copy in remote Geo location S3
- We added another service, where we let Hosting providers build their own storage service, and customize their own plans and pricing. So, Providers can Design, Build, Market and Support their own customers. We provide technology and support. In this case, site owner can use Backup Sync(which again is sold under Hosting Provider) to keep a copy in their own Cloud account.
One of the challenges that we came across lately is that for mysql db backup.
For DB Backup, there are few ways to backup remotely:-
- If SSH available, then use ssh forwarding to connect to localhost running mysql and backup. No problemo! But, most providers dont offer SSH.
- If no ssh, then directly connect to mysql port. If mysql service is listening on external port, then adding Remote Host resolves the problem. But in some cases, Mysql isn't running on external port or blocked by firewall. Ghosh!
Solution:- We wrote a small PHP script that will be only called over user defined custom https url and uses simple authentication. Backup can now work over this php script, by sending the db credentials. This is same or very close to a mysqldump, and it is safer than mysqldump.
Take professional website backup service.
