SEO Website Hosting - Part 2
Choosing a webhost - features in detail
1. LAMP server: in contrast to your PC at home or in the office, it is unlikely (some would say undesirable) that your website's server will be running Windows. The best applications for this are Linux/ Apache, commonly known as a LAMP server (referring to the Linux, Apache, MySQL, PHP & Perl applications on the server, and therefore more correctly LAMPP). Some 60 or 70% of the Internet's servers run this set-up, and there are good reasons for it: it is safe, stable, secure, high-quality, cheap, reliable, open-source and backed by huge resources. As a major open-source solution, the best developers in the world combine to improve it.
If you choose any other server type than this, you will find your costs go up, facilities are restricted or non-existent, you just can't do what you need, or the server is not as secure as the LAMP solution. It's absolutely true to say that for very heavy traffic sites, if you want a single server solution rather than a clustered and load-balanced one, then something like a Sun server might fit. Therefore, if you have upwards of 30,000 visitors per day, you can use some of the minimum $240,000 yearly revenue you are getting from this site traffic and spend it on a Sun server solution and the higher support costs involved. Anyone else is probably better off on a LAMP server, or LAMP server cluster.
There is one exception to the 'always use a LAMP server' rule: those with ASP and/or .NET web applications, i.e. websites with ASP scripting, or run by dot-NET management. These need a Microsoft server, aka an IIS server or Windows host. You are advised to find a Windows host that provides full-service (properly set up) servers, as many don't, and your life might become difficult or restricted. Just search this term: <windows hosting php mysql>, and you'll find full-service hosts who offer servers that are worthy of the name, not resellers etc who can only offer basic restricted servers without the software on them you'll need. You will almost certainly need PHP scripting and/or a MySQL database or two at some stage, unless you only have a four-page website on Neolithic hut circles that hasn't been updated in five years.
2. Unique IP: one of the most important points in any web hosting deal. No one will tell you this, because the implications are serious for the majority who are on servers that do not comply; but it is common practice to have every website on a server located at the same IP. To clarify this: one multi-user server, possibly with from 200 to 1,000 websites on it, usually has one IP. Probably 90% of webhosts do this - but not all by any means.
What does it mean? Well, the IP is your address, in exactly the same way that your postal address "is" you. It is both your physical address - because it resolves to a physical location that can be found by research - and your Internet address. You are your IP.
This is fine, but what happens when there are another ten, a hundred, or 2,000 websites with the same IP? This is a common arrangement in web hosting, with all 200 or more websites on a multi-user box all sharing the same IP. It's best if you imagined the full consequences of that yourself. Perhaps the other inhabitants of your server - and therefore IP address - are spotless, blameless, environmentally friendly charitable trusts, and websites of respectable religious organisations and professional associations. Perhaps not.
Imagine if you had a bunch of criminals, debtors, dr*g ad*icts or other malcontents living at your postal address. Do you think that would have no effect on your credit rating, or your reputation at the local Police Station, or your property value? If you said no, it would be difficult to take you seriously. If you have bad neighbours, it rubs off on you; and when they actually live in your house...
It is untrue to say that the actions of another website owner at your IP will have no effect on you; to say differently marks you out as a webhost with everyone on the same IP, or an incurable optimist. Or perhaps you never heard of blocklists or IP bans? What effect do you think it would have on your reputation with the search engines if there were several porn sites, spam sites, MFA sites, BH sites and email spammers all on your IP? And just one or two might do the trick, never mind several. In the case of a very popular US economy host, commonly with around 3,500 sites on the same IP, there is certainly potential for some interesting results on their servers.
IPs are free, from RIPE and ARIN etc. to the ISPs, who issue them to your site hosts. Costs are only those introduced by the ISP. All site hosts need to do, to implement unique IP addressing at server level, is to allocate separate IPs in the Apache configuration file and configure their nameservers accordingly. They can do this at the £60 price point, as stated - and even occasionally below that.
In most cases, hosts will allocate you a unique IP for around $25 (£12) a year or so - £1 or $2 per month. You may have to provide an SSL certificate, which essentially infers that you are an ecommerce site needing a secure channel for credit card processing, which is usually done in connection with a site-owned unique IP (though not always). An SSL certificate is currently available for $15.
An exception to this arrangement is where an ecommerce specialist host provides a secure server that customers are transferred to when they go into the checkout, and here it is not necessary for sites hosted with them to have a unique IP or SSL. If this applies to you, it is irrelevant since you should still obtain a unique IP.
The straight truth is that as soon as you can afford it (£60 a year that is), you need to move to a host who can offer unique IPs to all website owners. Offering these may well be a sign that the host is not a run-of-the-mill inefficient and uncaring operation, they know what they are about. You will find all sorts of arguments put up by some hosts about this, such hosts of course being the incompetent ones; but with the whole system moving to IPv6 addresses soon, there won't be any 'shortage' of IPs. No doubt there will still be hosts who cannot offer unique IPs, even under the new system; but incompetence doesn't depend on outside influences. And please don't think we are being harsh: if some hosts automatically give all customers unique IPs, and provide a range of 50 on request, then where does that leave hosts who can't even provide one even when asked?
As stated, some hosts clearly advertise they give every customer a unique IP; others that they can allocate 50 IPs on some packages. These hosts are known as 'SEO Friendly', for obvious reasons. There is no shortage of IPs for commercial websites; but there may be a shortage at your particular host, who might turn out to be a reseller incidentally - see the last page for an assessment of this.
Vote with your feet.
3. Apache 2+: the server version of Apache now current is v2.2.6; version 1 is obsolete by several years, so you don't really want to be paying for that - it is appropriate on free webspace servers and so on. It doesn't cost any more - the Apache webserver application is free. Apache 1.0 is like Windows 98; it was good in its day but there aren't a lot of reasons to use it now.
An exception, though, are hosts running Unix instead of Linux, who tend
to use Apache 1.3.3x series. Perhaps this is a UAMP server then, rather than a
LAMP server. In any case they work the same, Linux being a *NIX
operating system: like MacOS, a fork of UNIX originally.
Why
don't webhosts all use 2.0 then? Who knows - all you'd need would be
one spare server to migrate people to, by rotation, upgrading as you
go. We therefore have to assume that (apart from UNIX hosts) webhosts
running Apache 1.0 don't have a single spare box.
4. PHP5: the current version of PHP, the server-side scripting language, is PHP5. It has been for at least three years, and PHP4 is obsolete. It is often found on servers due to backwards compatibility issues - some old apps cannot run on PHP5. We even saw a server running PHP3 recently (believe it or not). To explain, that's something like running Windows 95 on your PC. To say this would make the server vulnerable is something of an understatement.
To be honest there are some issues regarding the choice of PHP5 v PHP4, and it would be incorrect not to mention this. The ideal host would give you a choice of which version, as it is still the case that some popular webapps that have not been upgraded need PHP4.
5. FTP access: you can't run a proper website without FTP access. The only webhosts who don't provide this, as far as we know, are some (and not even all) free webspace providers. For the type of sites that are hosted there, typically six or eight-page 'homepage' family-type sites, this is acceptable.
6. Recognised control panel: this means a dashboard that is well known and well rated, not a proprietary self-built affair. Or even worse, no control panel at all.
The control panel is your website's centre - the place where you configure options, install extras, set up anything of importance, check out files and directories, upload the occasional file, set passwords. You have to have one or your admin work will be a misery.
The best-known ones are cPanel and Ensim, which are both excellent. Of course, the host must provide the various options in order for there to be any point to it - but in general, a site host with one of these two panels will provide good options. A control panel must offer file management, file upload, and password-setting options or there isn't much point to it, but these are standard on cPanel and Ensim.
Only free webhosts, very old servers, or older hosting companies who have either not upgraded their servers for many years or couldn't care less about their customers normally have no control panel. Usually, this only applies to the older longer-established ISP-type of webhost. These people do not qualify as real webhosts.
As regards hosts who have developed their own control panels to avoid the licensing fees for a name version: we have seen both good and bad facilities with these DIY panels. You can find self-coded control panels that are just as good as the commercial ones; you can find awful ones without even the basic facilities.
7. File Manager: file access via the control panel. This allows the absolute basic requirements of a control panel - the reason for its existence in the first place - which are file access, file upload, and directory password protection. A control panel without these isn't really a lot of use. It isn't a control panel. This facility is especially important where secure hosting is concerned, since some files are designated invisible via FTP, and the best way to work with them is with the control panel's File Manager, if your FTP app doesn't support viewing non-visible files.
8. Statistics: you'll need at least one free package here - some hosts offer three. Out of AWstats, Analog, and Webalizer, a popular choice for the best would be AWstats.
9. Transfer bandwidth: probably 10GB per month is a minimum figure unless you have a small site that's going to stay small in every way. As an example, 500 visitors a day will commonly use from 5 to 10GB per month, depending on the type of material on the site. Many sites will hope to be expanding to 1,000 daily visitors at some stage, as this is normally considered to be the minimum 'paying number' to operate a standalone commercial site with (unless the products are high-value).
And by the way, forget about 'pageviews', 'hits', 'requests', or MB download per day, and anything similar, as they are completely irrelevant. The only figure of any use is the number of visitors or visits, aka 'uniques'. The sole exception to this is when specifically examining PPC advertising pageview and clickthrough figures, where pageviews has some relevance.
10. MySQL databases: the absolute minimum number of DBs to go for is two. Three is better, and might be all you'll ever need.
There are many hosts who don't provide a free database at all; or who only provide one free DB. The former are best avoided unless you intend never to install a CMS, ecommerce (shopping cart), blog, wiki, web analytics package, or anything else that needs a DB. If you have a four-page website on Neolithic hut circles, this could be you.
Otherwise find someone else; you can get 5 MySQL DBs and 5 PostgreSQL DBs on a £30 per year web hosting package, or 10 of each on a £50 per year package, for instance. Just look around.
One DB will be used by a CMS or ecommerce app if you install one, and one for any proper statistics package. A blog like Wordpress will need another one, and could share it with a wiki for instance. You can therefore see that a full-option website will need at least 3 databases.
It is a complete mystery why people subscribe to third-rate web hosting services that don't even supply one free database; these 'hosts' should have gone out of business years ago, and only the unbelievable ignorance of consumers keeps them going.
And of course it doesn't matter whether or not you are on a Microsoft IIS server, they can have MySQL databases (and PHP) installed without problem. There is no reason to have to do without SQL databases just because your webapps need an MS server - find another host.
Specialist hosts and databases
However, a valid point can be made that specialist hosts (such as ecommerce hosts) who already provide an extra, specialist service at a reasonable price, can fairly charge for some facilities that others would normally provide free. They may well provide additional services that others do not. Like true full-service SEO hosts (the type who can offer 50 unique IPs if requested), they are not usually at the 'value' end of the hosting market.
11. Apache modules: assuming that the server is a LAMP server and therefore running the Apache server app, it won't be much use unless all the basic facilities are available. The most important one of these is URL rewriting, which is provided by the module mod_rewrite. It would be unusual for this not to be in effect - but it doesn't hurt to ask if either this or any other common Apache modules are not in use. Life may be impossible without them, since you won't be able use an htaccess file.
12. PHP security: at least the default level of PHP security should exist, and the most commonly-required factors here are:
register_globals=off
magic_quotes_gpc=on
...which are vital for the security of many popular dynamic apps such as CMS. These are the default security settings for PHP, and have been for years. Any host overriding them is asking for trouble. In any case, overriding these security settings at server level is pointless, apart from dangerous, since, if needed, they can be overridden at website level by htaccess/ php config. Then, only the site requesting it is put at risk.
To explain this again: a software application called PHP is installed on every Linux / Apache server (and many Windows servers as well, of course). It is a script application that delivers vital functionality to the server, the databases, and the websites being served. All such applications have default security settings. These can be overridden if required, to help poorly written or old applications that cannot function properly with proper security settings. The settings can be overridden at server or local level - meaning it can be done at top level on the server (in the top-level htaccess file), which affects the entire server and every website on it; or at local level (in the local htaccess file for a particular website).
Of course, it doesn't make any sense to override these security settings at server level, since the whole server and every website on it are then vulnerable. It should be done at website level, for the old or poorly written apps that need it - then only they are vulnerable.
If the security is over-ridden at server level, 're-enabling' it in php.ini at local level actually does no such thing. All this does is allow functionality for the website application that needs it - it does not re-enable security, since the entire server has been made vulnerable. It seems that the majority of server tech support engineers do not realise this; please consult central php resources.
13. Hosting in the geotargeted area: perhaps it is obvious, perhaps not - but if you only sell in the UK, then don't use a webhost in the USA, and vice-versa of course.
Most search results (and therefore the resulting traffic) are prioritised for websites in the same region as the enquirer who has searched; so if you're in the UK and you search for 'large tent' you will get results prioritised for sites hosted in the UK selling large tents - not worldwide. Therefore, if you're a UK seller of tents, you don't host your site in the US, even if it happens to be the best or the cheapest deal. If you're in the USA, you don't get your site hosted in Australia, even if it's free - because it will cost you a lot of money.
If you sell worldwide, then your SEO consultants will advise on the best policies, which are complex and will vary according to numerous factors.
Let's repeat all this because many people ask and therefore it may not be clear:
- The physical hosting location is important for SEO. You should have your site hosted in the country where you operate. In cases where this is impossible due to poor hosting or for other reasons, things become more complex and your SEO consultants will advise on the best policy - there are work-arounds for this problem.
- If you operate worldwide then things become even more complex. Only your SEO people can help with the necessary options. There are numerous choices for when and where to use .com or local variants, and for multi-siting or multi-language sites.
14. Your own domain name - not a subdomain.
15. Your own website - not a rented website.
These issues, neither being strictly a hosting factor, are dicussed on page 3 of this section - Additional Factors.
Less-important hosting factors
Those are by far the most important factors. Much less important, and most likely existing in all but the cheapest and most restricted of hosting deals, are:
1. 500MB disk space plus; 1GB is fine for many sites (500MB = 0.5 GB more or less).
2. 50 email addresses (only a very few start-ups would need 100 email addresses, and they are no doubt very well aware of who they are).
Website traffic bandwidth
Bandwidth will eventually become an important factor for expanding commercial sites. In the past, bandwidth was very expensive and tightly controlled. This is no longer the case, and some hosts provide unlimited bandwidth. Yes - unlimited - this is not a msiprint.
How can they do this? It's because the majority of websites are very small concerns indeed and use less than 5GB a month. There are a vast number of small sites: vanity sites; family home pages; small businesses who only work offline and have 50 visitors a day; poorly-run sites with 100 visitors a day and no idea how to increase them; and so on.
Some are bigger - what you might call 'normal' commercial sites - and use between 10 and 25GB per month. A few use more than this. You can't use more bandwidth than your site traffic can consume, so with a tiny number of exceptions, sites can't use a whole lot even if it's free. So, it balances out roughly the same, for these unlimited-bandwidth hosts - what they have to give away for free, they get back from the majority of sites that don't use much. Plus: they get a big marketing boost from the offer; and they don't have to allocate any resources whatsoever to measuring bandwidth and billing for it. There are few sites that can actually use a lot of bandwidth: important sites with high traffic; and video sites or others that offer large downloads.
Choose
your host carefully for the best deal: the cost balanced against the
facilities offered. You really don't need 100 email addresses, so
ignore all these sorts of pointless sales ploys and concentrate on the important technical aspects of hosting.
Continue to Part 3:
Additional webhosting factors affecting search potential