<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Thoughts From Inside The Ether</title>
	<atom:link href="http://thoughts.contegix.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://thoughts.contegix.com</link>
	<description>Contegixians Thoughts and News</description>
	<pubDate>Mon, 25 Aug 2008 21:39:06 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
	<language>en</language>
			<item>
		<title>ErloungeSTL First Meeting, Sept 11 at Contegix</title>
		<link>http://thoughts.contegix.com/2008/08/25/erloungestl-first-meeting-sept-11-at-contegix/</link>
		<comments>http://thoughts.contegix.com/2008/08/25/erloungestl-first-meeting-sept-11-at-contegix/#comments</comments>
		<pubDate>Mon, 25 Aug 2008 21:37:45 +0000</pubDate>
		<dc:creator>joseph.williams</dc:creator>
		
		<category><![CDATA[Tech]]></category>

		<category><![CDATA[community]]></category>

		<category><![CDATA[erlang]]></category>

		<category><![CDATA[erlounge]]></category>

		<category><![CDATA[st louis]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/?p=13</guid>
		<description><![CDATA[
As of late, Erlang (the functional programming language behind ejabberd and portions of Facebook) has been picking up steam and gaining some popularity. Recently, there was a question regarding Erlounge meetings in Missouri on the Erlang email list. I have personally been hacking around with Erlang for a few months and decided it would be the perfect time [...]]]></description>
			<content:encoded><![CDATA[<p>
As of late, <a href="http://erlang.org/">Erlang</a> (the functional programming language behind <a href="http://www.ejabberd.im/">ejabberd</a> and portions of <a href="http://www.facebook.com/">Facebook</a>) has been picking up steam and gaining some popularity. Recently, there was a question regarding <a href="http://www.erlang.org/pipermail/erlang-questions/2008-August/037544.html">Erlounge meetings in Missouri</a> on the Erlang email list. I have personally been hacking around with Erlang for a few months and decided it would be the perfect time to start <a href="http://erloungestl.org/">ErloungeSTL</a>.
</p>
<p>
I am proud to announce the <a href="http://erloungestl.org/2008/08/24/first-erloungestl-meeting-sept-11-7pm/">first meeting</a> will be held at Contegix on September 11th at 7pm. There will be something for the seasoned Erlanger as well as the novice. The presentations/sessions should be interesting for anyone that has a background or interest in Erlang, functional languages, concurrent programming, or just programming.  More info can be found <a href="http://erloungestl.org/2008/08/24/first-erloungestl-meeting-sept-11-7pm/">here</a>.
</p>
<p>
All are welcome to come.  Contegix will be providing food and drinks to celebrate this first step.</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/08/25/erloungestl-first-meeting-sept-11-at-contegix/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Automatic Upgrades: Yay or Nay?</title>
		<link>http://thoughts.contegix.com/2008/06/30/automatic-upgrades-yay-or-nay/</link>
		<comments>http://thoughts.contegix.com/2008/06/30/automatic-upgrades-yay-or-nay/#comments</comments>
		<pubDate>Mon, 30 Jun 2008 22:40:52 +0000</pubDate>
		<dc:creator>mark.rogers</dc:creator>
		
		<category><![CDATA[Tech]]></category>

		<category><![CDATA[confluence]]></category>

		<category><![CDATA[plugins]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[upgrades]]></category>

		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/?p=12</guid>
		<description><![CDATA[
We&#8217;re often asked at Contegix, &#8220;Do you perform automatic upgrades of Application XYZ?&#8221;, and are answer is always emphatically, &#8220;No&#8221;. This tends to spark some debate, since we do tend to perform RHEL updates automatically. First, let&#8217;s define &#8220;automatic&#8221;, because obviously we&#8217;re not shutting down instances/servers without explicit permission from you or your team. In [...]]]></description>
			<content:encoded><![CDATA[<p>
We&#8217;re often asked at Contegix, &#8220;Do you perform automatic upgrades of Application XYZ?&#8221;, and are answer is always emphatically, &#8220;No&#8221;. This tends to spark some debate, since we do tend to perform RHEL updates automatically. First, let&#8217;s define &#8220;automatic&#8221;, because obviously we&#8217;re not shutting down instances/servers without explicit permission from you or your team. In regards to standard RHEL updates, we inform you after the updates have passed a rigorous round of testing and have both the Redhat and Contegix internal &#8220;go-ahead&#8221; that we need to perform updates on your servers. We consider these mandatory for the reasoning of security. Redhat doesn&#8217;t push superfluous updates down the pipe to your servers. They&#8217;re generally provided for very specific means, and the number one reason is security. We can push these updates because 99% of the time, the end-user (you) won&#8217;t even notice the difference in most cases. On the rare occasion an update may have an odd effect, but I&#8217;d like to stress that the case of that happening is excruciatingly rare.<br />
</ p><br />
</p>
<p>
Let&#8217;s compare this to&#8230; well, -any- web application you&#8217;re running right now. First off, keeping up with what&#8217;s running on every customer&#8217;s server is a massive chore in of itself. Keeping up with that list, and checking to make sure every web application is running the newest version is just a research nightmare. Obviously, the big applications (aka our managed applications) we&#8217;re aware of, such as the Atlassian suite of applications, Wordpress, Jive&#8217;s suite of applications, and so on. Unfortunately, keeping tabs on all the various web applications we use, and their version numbers, is a bit rough, but is something we plan on tackling in the future. The real problem however exists in the following question: &#8220;Do you really want to upgrade?&#8221;<br />
</ p><br />
</p>
<p>
The problem is that many applications have introduced the wondrous world of plugins into their applications. Honestly, from our side of the fence, plugins create a lot of havoc. For one, they&#8217;re not always supported by the main developers of the application in question, which leaves us restricted in the level of support we can offer to a product using them. Secondly, they make application upgrades comparable to a roller coaster where the cars may or may not come unhinged from the track, sending you careening into a brick wall. That&#8217;s not to say we don&#8217;t like plugins, because we love plugins. For instance, the Wordpress Automatic Upgrade Plugin turns Wordpress upgrades into a quick 5 minute ordeal. No need to worry about asking us to upgrade your Wordpress, take backups, and hope that we catch any theme changes that need to be made in the process. Instead, a few button clicks and this plugin will complete the upgrade in no time flat, bringing you to the latest version of Wordpress. I&#8217;ve used it on my personal blog a couple times now, and it worked flawlessly. Obviously, your mileage may vary, but if nothing else it performs backups before it does anything, so if the upgrade fails, reverting back is a snap.<br />
</ p><br />
</p>
<p>
Why on Earth would a Wordpress upgrade fail though? Plugins. It&#8217;s the same reason we have upgrade problems with any application we work with, plugins inherently create issues for upgrade procedures because they introduce new quirks that may fail when the core application is upgraded. Depending on how integral that plugin is to your application instance, this could cause an upgrade to become a complete failure. A default instance of Confluence/JIRA/Crowd upgrades smoothly, no problems to worry about. An instance of Confluence with a bunch of plugins, theme changes, and so on, however tends to be a bit more interesting. It&#8217;s not really Confluence&#8217;s fault, in fact it&#8217;s quite likely that weird plugin you were skeptical about installing is breaking something internally, thus causing the upgrade to fail. More often than not though, Confluence upgrades can fail due to heavy edits to themes, generally via the Theme Builder plugins. This causes theme anomalies, as the Theme Builder plugin is out of date, not functioning properly, and the changes in Confluence between versions have also contributed to some issues with your themes, such as in 2.8 when the theme was prettied up quite a bit (nice job Atlassian!). All of sudden, what should have been an easy, smooth ride, is now resulting in an extra half hour of down time as we scramble to fix the problems. Then we have to come to a decision on rolling back, or progressing through the issues.<br />
</ p><br />
</p>
<p>
This is why we generally frown on automatic upgrades, because plugins add a significant curve ball to the mix that we can&#8217;t foresee. If keeping up with every web application is a documentation job of epic proportions, imagine trying to track compatibility of plugins, the plugins installed, and the ones not installed on all customer Confluence instances! We like to keep downtime to an absolute minimum, which is half the reason you&#8217;re with us we hope, and that&#8217;s why we avoid automatic upgrades. Instead we encourage staging instances, scheduled tasks, and taking each upgrade on a case by case basis. Do you want us to merely say &#8220;Confluence 2.8.1 is out, and we&#8217;ll be upgrading you on MM/DD/YYYY at 00:00&#8243;? We believe it&#8217;s in everyone&#8217;s best interest for you to decide when to upgrade, and to let us know. We&#8217;ll work through the process with you, check compatibility/dependency issues, and set the event up for a time that suits your needs best. If you&#8217;d like to see it staged out first, that&#8217;s fine too, we&#8217;re more than happy to setup a small staging instance for the upgrade when necessary, assuming it&#8217;s not detrimental to the overall health of the server. We want to work with you, as much as we work for you and your company. If you have any thoughts or suggestions on our upgrade procedures, feel free to drop them in the comment box!</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/06/30/automatic-upgrades-yay-or-nay/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Go-Go Gadget Hyperic!</title>
		<link>http://thoughts.contegix.com/2008/06/05/go-go-gadget-hyperic/</link>
		<comments>http://thoughts.contegix.com/2008/06/05/go-go-gadget-hyperic/#comments</comments>
		<pubDate>Thu, 05 Jun 2008 16:02:42 +0000</pubDate>
		<dc:creator>mark.rogers</dc:creator>
		
		<category><![CDATA[Knowledge]]></category>

		<category><![CDATA[Tech]]></category>

		<category><![CDATA[atlassian]]></category>

		<category><![CDATA[hyperic]]></category>

		<category><![CDATA[monitoring]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/?p=10</guid>
		<description><![CDATA[We&#8217;ve spoken in the past about Hyperic monitoring, and the roll out of this application to our managed customers. I felt that Hyperic is so slick it deserved more lip service. Some of our customers have already been given access to our monitoring system, and from the feedback we&#8217;ve received it would appear they&#8217;re quite [...]]]></description>
			<content:encoded><![CDATA[<p>We&#8217;ve spoken in the past about Hyperic monitoring, and the roll out of this application to our managed customers. I felt that Hyperic is so slick it deserved more lip service. Some of our customers have already been given access to our monitoring system, and from the feedback we&#8217;ve received it would appear they&#8217;re quite ecstatic with it. That&#8217;s not to say that there aren&#8217;t some kinks, because there are, but I must say the microscopic kinks are almost unnoticeable. Hyperic is always improving though, and we&#8217;re doing our best to exploit the very best of this application to better serve your infrastructure here at Contegix. The servers that have Hyperic configured on them have a wide range of monitoring options such as:</p>
<ul>
<li>CPU Monitoring</li>
<li>Load Averages</li>
<li>Filesystem Usage</li>
<li>Database Monitoring (MySQL, PostgreSQL, EnterpriseDB, etc)</li>
<li>HTTP Checks</li>
<li>Zimbra 4.X</li>
<li>IMAP, POP3, SMTP (on any obscure ports imaginable!)</li>
<li>Memcached</li>
<li>Tomcat</li>
<li>Resin</li>
<li>Apache HTTP</li>
<li>And so many more options you would die reading the list</li>
</ul>
<p>We receive well over a thousand emails a day from our monitoring system, letting us know when your servers are leaving the realm of acceptable levels in a wide variety of categories. This allows us to be proactive in regards to your server&#8217;s health, and attack trouble areas before services are impacted. For instance, if we see the load on your server climbing above the typically acceptable level of 5, and staying high, we know to investigate the server before services are impacted.</p>
<p>Most importantly though, you don&#8217;t have to deal with the awkward situation of your website&#8217;s visitors telling you your site is down, if you&#8217;re monitored by our system. If Hyperic is monitoring your site, then that site will be checked every 5 minutes, making sure it gets a response, and checking the site for a search string that should appear on your site. If the monitor fails, we&#8217;re alerted immediately, and respond to the situation. If you have special instructions for us, we make every effort to follow them to a tee, and if you don&#8217;t have special instructions we&#8217;ll handle the situation the best way we know how to return your site to working order. For instance, on typical Java applications, we&#8217;ll thread dump the instance, restart it, and notify you of the maintenance that was performed.</p>
<p>I do admit though, as much as we strive to be, we&#8217;re not always perfect. At times we do require assistance from you and your team to help us be the best that we can be. While many servers at Contegix follow the Contegix way of doing things, not everything follows exactly what we&#8217;re accustomed to. That&#8217;s okay though, we don&#8217;t mind it, after all these are your servers! However, for us to fully monitor your services to our fullest potential, we do encourage you to let us know what needs to be monitored. Even if you don&#8217;t have a special setup, we don&#8217;t mind you checking with us on what&#8217;s being monitored. In fact, I encourage that too! We want you to feel comfortable here, and if double checking with us that everything you need monitored, is monitored, then drop us a line. There&#8217;s absolutely no harm in that, as it ensures that nothing is missed, and that we&#8217;re serving you to the best of our ability. Please keep in mind though that running the Hyperic agent on your server will require a small amount of memory, as this is a Java application which means it requires some resources. If you already have a heavily taxed server, throwing the Hyperic agent into the mix may not be a good idea, but I believe this to be a very rare situation.</p>
<p>Finally, maybe the coolest part of Hyperic is that we can give you access to the system as well! This gives you the ability to see the metrics that are produced by the monitoring system for your servers. The access that is granted to you is read only access, so you can&#8217;t create sensors, but you can always ask for new ones (again, it&#8217;s encouraged!). This ability has already helped a few of our customers, by giving them insight into how their services were behaving, allowing them to clean up trouble spots in their applications and infrastructure. All you need to gain access is drop a line to support@contegix.com, and we&#8217;ll be happy to get it setup for you. Let&#8217;s take a look at <a>Atlassian</a> for a perfect use-case scenario in which Hyperic can be of great assistance.</p>
<p>Their documentation has a section for <a href="http://confluence.atlassian.com/display/DOC/Operating+Large+or+Mission-Critical+Confluence+Installations#OperatingLargeorMission-CriticalConfluenceInstallations-ConstantMonitoringofProductionSystems">monitoring critical production systems</a>. If you visit that section you&#8217;ll notice the power of Hyperic on display in the images shown. They go onto demonstrate in that article one particular scenario how the graphs enabled them to catch a critical issue with an instance of theirs, which gave them the nudge in the right direction towards correcting the problem. Furthermore, Hyperic themselves <a href="http://www.hyperic.com/blog/hyperic/2008/05/30/atlassian-using-hyperic/">noticed Atlassian&#8217;s documentation</a>, and hint at a potential pair of plugins for monitoring Confluence and JIRA in particular! Just remember, we&#8217;re here to help you improve in anyway possible. Drop us a line, and get more from your hosting environment with us with Hyperic access!</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/06/05/go-go-gadget-hyperic/feed/</wfw:commentRss>
		</item>
		<item>
		<title>JIRA Studio, You Complete Me</title>
		<link>http://thoughts.contegix.com/2008/04/17/jira-studio-you-complete-me/</link>
		<comments>http://thoughts.contegix.com/2008/04/17/jira-studio-you-complete-me/#comments</comments>
		<pubDate>Fri, 18 Apr 2008 00:09:29 +0000</pubDate>
		<dc:creator>mark.rogers</dc:creator>
		
		<category><![CDATA[News]]></category>

		<category><![CDATA[Tech]]></category>

		<category><![CDATA[atlassian]]></category>

		<category><![CDATA[JIRA Studio]]></category>

		<category><![CDATA[sysadmin]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/?p=9</guid>
		<description><![CDATA[At Contegix, the NOC engineers spend a lot of time working with Atlassian&#8217;s products. We are in a constant cycle of installing, maintaining, and upgrading Confuence, JIRA, etc. for customers.  We install their plugins, help work out the kinks, and make sure the applications stay running as close to 100% of the time as [...]]]></description>
			<content:encoded><![CDATA[<p>At Contegix, the NOC engineers spend a lot of time working with <a href="http://www.atlassian.com">Atlassian&#8217;s</a> products. We are in a constant cycle of installing, maintaining, and upgrading Confuence, JIRA, etc. for customers.  We install their plugins, help work out the kinks, and make sure the applications stay running as close to 100% of the time as possible. Oddly, up until lately we&#8217;ve mainly only used one application of Atlassian&#8217;s internally - Confluence.   Of course, we use Crowd here and there as well, but it’s transparent and I never need to worry that it even exists in our infrastructure.  JIRA is used for projects with our development consultants and special projects.  Everything we document ends up in Confluence, and that allows us to be more productive as we have this incredible encyclopedia of knowledge constantly at our disposal. The need for JIRA by the engineers didn&#8217;t every really seem excessively relevant in the past, nor did Bamboo, Fisheye and Crucible. We&#8217;re a hosting company with system administrators, not a software development company.  In our minds, it didn&#8217;t make as much sense. At least, it wasn&#8217;t overtly clear that we needed JIRA.<br />
<br />
We have Subversion running to handle the code for most of our internal projects, emails to and fro between engineers worked as bug reports for the internal scripts we use, and email was used to announce new versions of various scripts. We&#8217;d also use Confluence in a backwards way to help manage some of our internal projects as well, which wasn&#8217;t the best solution. It worked, yes, but it wasn&#8217;t optimal. We didn&#8217;t know any better though. We&#8217;re administrators, not users! How were we supposed to know that JIRA was so slick?<br />
<br />
Well, the advent of <a href="http://www.jira.com">JIRA Studio</a> has taught us a solid lesson, the NOC engineers needed JIRA a looooong time<br />
<br />
ago. We often ran into problems in the past where one person would write a script or an application, but it wouldn&#8217;t gain widespread use amongst our engineers. The simple fact was that either not everyone knew about it or the script would need updates; however, it wasn&#8217;t being properly maintained. This would lead to a wide variety of editions of the script floating around - the absolute death of the script in the first place. Then, we&#8217;d revert back to everyone doing everything by hand again. It was an endless cycle that would start everytime someone wrote a mediocre or decent script. We wouldn&#8217;t give the script the proper care and love it deserved, it&#8217;d gain moderate use for a bit, and later find itself in the script graveyard. The other alternative reality was the individual engineers wrote their own scripts, but never really found the means to openly share their scripts. All of that soon changed, as our illustrious leaders bestowed upon us a great and magical gift&#8230; JIRA Studio (add your own fantasy based sound effects here, I prefer trumpets personally).<br />
<br />
All of a sudden, we went from having no way to manage our many scripts that have been tossed around the office like dirty laundry, to having so far five projects managed in JIRA Studio. We haven&#8217;t had the instance up for more than a couple weeks, and I&#8217;m sure the number of projects we maintain internally with JIRA Studio will only increase. It&#8217;s amazing how much easier it has made life for us already though. We have subversion repositories for our individual projects, issue tracking, code reviews, great tools to analyze our repositories with, plus a solid documentation backbone. Each project is sectioned off to what feels like its own little world, yet it&#8217;s still a part of the big picture that is our developmental operations here at Contegix. We have scripts for customers, programs that make our internal life less chaotic, along with our very website just in case anyone feels the need to make improvements to it.<br />
<br />
I think the best part of the whole experience is that we&#8217;re all finally starting to share code, discuss new ides for automation, and expanding our thinking quite a bit. Gone are the days of not enough time, not enough resources, or too much effort. We don&#8217;t have to worry about those issues now. Now I can whip up a script that has a solid base to help out our company, create a JIRA Studio project, and as a team we can nurture the script to a fruitful life.<br />
<br />
It’s odd how just having a launching pad for our internal development projects has opened our eyes quite a bit. Before we were quite content doing a lot of our work by hand, because our development process wasn’t exactly the best. The big problem with automating what we do is we’re dealing with your (our customers) production systems. If we’re going to develop automation tasks for your systems, they absolutely must be 100%. We won’t mess around with your systems by testing half baked scripts on what for many of our customers is their livelihood. That was the past though, because now we have solid testing sandboxes setup for our automation tests, along with JIRA Studio to help us manage the process of developing our applications. We’re already starting to see the benefits as bug reports roll in, fixes roll out, and new projects are being started. I’d say this is the beginning of a new era for Contegix, as we’re now more capable of streamlining of our efforts thanks to JIRA Studio<br />
<br />
I guess my overall point is that if you think JIRA Studio isn’t right for your company, because you’re not a development team, you may want to reconsider. I don’t believe we ever though we needed JIRA, and we don’t need it, but I sure don’t want to go back to life without it!</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/04/17/jira-studio-you-complete-me/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Wordpress Security And You!</title>
		<link>http://thoughts.contegix.com/2008/03/28/wordpress-security-and-you/</link>
		<comments>http://thoughts.contegix.com/2008/03/28/wordpress-security-and-you/#comments</comments>
		<pubDate>Fri, 28 Mar 2008 22:32:27 +0000</pubDate>
		<dc:creator>mark.rogers</dc:creator>
		
		<category><![CDATA[Knowledge]]></category>

		<category><![CDATA[Tech]]></category>

		<category><![CDATA[php]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/2008/03/28/wordpress-security-and-you/</guid>
		<description><![CDATA[As a large hosting provider we use a lot of different applications, and we try to keep them all as secure as possible. Unfortunately, we can only win so many battles at any given time, and we do require help from you, the customer at times to ensure your system is safe. Wordpress, as great [...]]]></description>
			<content:encoded><![CDATA[<p>As a large hosting provider we use a lot of different applications, and we try to keep them all as secure as possible. Unfortunately, we can only win so many battles at any given time, and we do require help from you, the customer at times to ensure your system is safe. Wordpress, as great as it might be as a blogging platform, seems to find itself getting hacked more than most applications that we host. Now, I&#8217;m not saying that Wordpress is a bad application by any means, but with it being such a large platform it draws a lot of unwanted attention.<br />
<br />
As such, there are quite a few hackers and script kiddies out there that will try to compromise your Wordpress based website. We&#8217;re hoping that with this article we can further educate Wordpress users on how to protect their sites. Here&#8217;s a few helpful tips we can provide, some of which you can have us do, and some things we&#8217;ll recommend that you do:<br />
<br />
5. Please, please, please don&#8217;t use a user name of &#8216;admin&#8217;! I know that&#8217;s the Wordpress default, and it&#8217;s just easy to use it, but what user name do you think is in every brute force attack? You guessed it, &#8216;admin&#8217;. We&#8217;d recommend using a unique user name for administration purposes, like &#8216;mark.rogers&#8217;, or &#8216;mrogers&#8217;. Of course, you can use your own name if you don&#8217;t like mine I suppose.<br />
<br />
4.  Remove the Wordpress version number from any headers, footers, css, etc, etc. Leaving the version number in your page source is a dead giveaway to would be vandals to dig through google to find ways to exploit your specific version. Granted this is the equivalent of leaving your lights on at home while you&#8217;re away, but if it deters someone, then consider it a victory! It&#8217;s just too easy to use the version number to find exploits for your site, as Wordpress exploits become public knowledge too often.<br />
<br />
3.Let us put basic Apache authorization on the /wp-admin section of your blog! We&#8217;d be more than happy to do it, and it&#8217;ll make every php file in the /wp-admin path even harder to get to. Granted it can be a bit of a nuisance to double login, but not nearly as big of a nuisance as restoring from that backup you took last week right? We can also limit access to the wp-content, and wp-includes directories as well. Plus we can lock it down by IP, or user name/password combos.<br />
<br />
2.  I know it should go without saying, but please choose hard, random passwords. I know a lot of blogs, my own included, started off really small, and I never worried about getting hacked.  My blog never got big, but maybe yours will! Either way, play it safe, and go with a hard password from the get go. That way if your little playground gets bigger one day, or if you land on Digg by accident, you&#8217;ll be at least somewhat prepared.<br />
<br />
1.  While the above options are great for helping secure your instance of Wordpress, there&#8217;s one piece of the puzzle that is probably the most important. That piece? Keep Wordpress up to date at all costs! There isn&#8217;t an option that can replace this critical piece, because Wordpress being the giant of blogging that it is, is constantly being updated to fix security flaws. Staying up to date is a way of staying ahead of the game, and it&#8217;s generally a ten minute ordeal that we&#8217;ll take care of for you if you&#8217;re a customer of ours! Look at it this way, if you&#8217;re running a year old version of Wordpress then you&#8217;ve given vandals a year to figure out how to hack you. Why give them that edge? Most Wordpress upgrades are painless, and you know we&#8217;ll gladly work with you to schedule it for a time that&#8217;s best for your company&#8217;s needs as well.<br />
<br />
Hopefully this helps answer some question on how to protect yourself from would-be hackers in regards to Wordpress. The fun part is that this applies to quite a few PHP applications in a general sense. Drupal, Simple Machine Forums, and so on can all benefit from these security tips, especially security tip #1! As always customers, drop us a line at support@contegix.com with any question you might have.</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/03/28/wordpress-security-and-you/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Top 5 Confluence Plugins</title>
		<link>http://thoughts.contegix.com/2008/03/20/top-5-confluence-plugins/</link>
		<comments>http://thoughts.contegix.com/2008/03/20/top-5-confluence-plugins/#comments</comments>
		<pubDate>Thu, 20 Mar 2008 21:16:20 +0000</pubDate>
		<dc:creator>mark.rogers</dc:creator>
		
		<category><![CDATA[Knowledge]]></category>

		<category><![CDATA[atlassian]]></category>

		<category><![CDATA[confluence]]></category>

		<category><![CDATA[plugins]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/2008/03/20/top-5-confluence-plugins/</guid>
		<description><![CDATA[Did you know that right now, while you read this, there&#8217;s a sleeping giant sitting unopened in your Confluence instance? While your wiki might be a wealth of information for your enterprise business, for your project in development, or for whatever you might be using Confluence, it can also be used as a platform for [...]]]></description>
			<content:encoded><![CDATA[<p>Did you know that right now, while you read this, there&#8217;s a sleeping giant sitting unopened in your Confluence instance? While your wiki might be a wealth of information for your enterprise business, for your project in development, or for whatever you might be using Confluence, it can also be used as a platform for an enterprise (maybe social?) networking.  Now I know what you&#8217;re saying, &#8220;I don&#8217;t want my company&#8217;s Confluence instance to become a MySpace clone!&#8221; That&#8217;s understandable, and it doesn&#8217;t have to be; however, it can bring your team closer together with a variety of plugins found in your Plugin Repository.  This means, your Confluence instance literally just a few clicks away from unleashing new functionality in your Confluence instance.<br />
<br />
Just remember, happy employees that have fun together tend to work harder together.  As an employee who wants to have fun while working hard, bias is in full effect:<br />
<br />
5.  <a href="http://confluence.atlassian.com/display/CONFEXT/IM+Presence+Plugin" target="_blank">IM Presence Plugin</a><br />
<br />
This plugin is valid in all Confluence version from 2.0 up through 2.7.2.  Plus, it&#8217;s an official Atlassian Supported Plugin.  By adding this plugin, you enable a new macro which allows you to show a user&#8217;s status on a variety of instant messaging clients within Confluence.  All you need to do is enable the plugin via the repository, create a dummy user for Confluence to use, and that dummy user will query the user found in a macro tag such as the following:<br />
<br />
{im:my_username@hotmail.com|service=MSN}<br />
<br />
Afterwards, the user, in this case &#8216;my_username@hotmail.com&#8217;, will receive a message from the newly created dummy user.  After &#8216;my_username@hotmail.com&#8217; accepts the request, you&#8217;ll be able to see that user&#8217;s status anywhere the above mentioned macro tag is placed!<br />
<br />
4.  <a href="http://confluence.atlassian.com/display/CONFEXT/Google+Maps+Plugin" target="_blank">Google Maps Plugin</a><br />
<br />
Want to make sure nobody gets lost on their way to the big meeting coming up? Perhaps you&#8217;re having a company event soon? Well I can&#8217;t personally think of a better way to get everyone on the same page than the illustrious Google Maps! This plugin allows you to slap a map from Google right up on the Wiki, and even allows the Satellite image view as well.<br />
<br />
3.  <a href="http://confluence.atlassian.com/display/CONFEXT/mail2news+Plugin" target="_blank">Mail2News Plugin</a><br />
<bvr /><br />
Don&#8217;t feel like logging into Confluence? Have an email you want to turn into news? This plugin should do the trick for you, much the same way you can do with applications such as Wordpress.  You setup an email account for Confluence to access, and keep it preferably hidden, install the plugin, and configure it to grab news from the email address you created.  If the email address created supports wildcards, you can even direct the news via email straight to specific Confluence spaces!<br />
<br />
2.  <a href="http://confluence.atlassian.com/display/CONFEXT/Calendar+Plugin" target="_blank">Calendar Plugin</a><br />
<br />
I would assume most people know about this plugin already, but it&#8217;s just too useful to ignore.  With this you can create calendars, or subscribe to an iCalendar thus keeping everyone on the same schedule! I know you probably have other calendar applications you prefer to use, but accessing a global calendar with a few clicks is incredibly convenient.<br />
<br />
1.  <a href="http://confluence.atlassian.com/display/CONFEXT/Sudoku+Plugin" target="_blank">Sudoku Plugin</a><br />
<br />
Now, I&#8217;m completely incapable of playing Sudoku, it makes my head hurt.  I&#8217;ll be happy to make sure this plugin gets installed for you, but we&#8217;re not your hint line when you get stuck alright? That aside, it is a fun a little diversion you can add to your wiki if you so please.  Is it useful in any major way? Well, no, not really.  At least they&#8217;ll be playing on the company site, rather than trying to get out to Yahoo Games right?<br />
<br />
We&#8217;ll continue to keep you up to date with new plugins, macros, tricks, and other fun Confluence related information.  If you have any hot tips you&#8217;d like to drop on us, feel free! We&#8217;re always in the hunt for improvements to our favorite wiki application, Confluence!</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/03/20/top-5-confluence-plugins/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Apache vs. nginx : Web Server Performance Deathmatch</title>
		<link>http://thoughts.contegix.com/2008/03/07/apache-vs-nginx-web-server-performance-deathmatch/</link>
		<comments>http://thoughts.contegix.com/2008/03/07/apache-vs-nginx-web-server-performance-deathmatch/#comments</comments>
		<pubDate>Fri, 07 Mar 2008 21:42:16 +0000</pubDate>
		<dc:creator>matthew.porter</dc:creator>
		
		<category><![CDATA[Tech]]></category>

		<category><![CDATA[apache]]></category>

		<category><![CDATA[mongrel]]></category>

		<category><![CDATA[nginx]]></category>

		<category><![CDATA[rails]]></category>

		<category><![CDATA[ruby]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/2008/03/07/apache-vs-nginx-web-server-performance-deathmatch/</guid>
		<description><![CDATA[In the past few months, nginx (pronounced &#8220;Engine X&#8221;) has become The Little Engine That Could.  This is most evident in Rails deployments and in Zimbra 5, where it replaced perdition for IMAP/POP3 proxying.  For Rails, it is typically replacing Apache 2.2 proxy_load_balancer as a front-end to Mongrel.

One of our engineers, Joe Williams, [...]]]></description>
			<content:encoded><![CDATA[<p>In the past few months, <a href="http://nginx.net" target="_blank">nginx</a> (pronounced &#8220;Engine X&#8221;) has become <a href="http://en.wikipedia.org/wiki/The_Little_Engine_That_Could" target="_blank">The Little Engine That Could</a>.  This is most evident in Rails deployments and in Zimbra 5, where it replaced perdition for IMAP/POP3 proxying.  For Rails, it is typically replacing Apache 2.2 proxy_load_balancer as a front-end to Mongrel.<br />
<br />
One of our engineers, Joe Williams, decided to put both system to the test with a Battle Royale.  Check out the <a href="http://www.joeandmotorboat.com/2008/02/28/apache-vs-nginx-web-server-performance-deathmatch/" target="_blank">results</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2008/03/07/apache-vs-nginx-web-server-performance-deathmatch/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Contegix Case Study : BakBone and RedHat</title>
		<link>http://thoughts.contegix.com/2007/12/11/contegix-case-study-bakbone-and-redhat/</link>
		<comments>http://thoughts.contegix.com/2007/12/11/contegix-case-study-bakbone-and-redhat/#comments</comments>
		<pubDate>Tue, 11 Dec 2007 12:42:38 +0000</pubDate>
		<dc:creator>matthew.porter</dc:creator>
		
		<category><![CDATA[News]]></category>

		<category><![CDATA[backup]]></category>

		<category><![CDATA[bakbone]]></category>

		<category><![CDATA[redhat]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/2007/12/11/contegix-case-study-bakbone-and-redhat/</guid>
		<description><![CDATA[Beginning in September, we began to quietly upgrade our backup system.  The previous system worked well and never lost customer data.  It was the perfect system when we purchased it in December 2005.  It suffered a few problems, including slow startup restore times and a sad dependence on filesystem inodes for the [...]]]></description>
			<content:encoded><![CDATA[<p>Beginning in September, we began to quietly upgrade our backup system.  The previous system worked well and <strong>never</strong> lost customer data.  It was the perfect system when we purchased it in December 2005.  It suffered a few problems, including slow startup restore times and a sad dependence on filesystem inodes for the indexing system.  This led to scaling issues that would have drastically impacted us by mid-2008.<br />
<br />
After a lengthy investigation into option, we decided to use NetVault from <a href="http://www.bakbone.com" target="_blank">BakBone Software</a>.  The decision was made due to fulfilling specific criteria - native Linux client <strong>and</strong> server software, support for MySQL, PostgreSQL, and Oracle hot backups, Disk-to-Disk-to-Tape (D2D2T) capabilities, and the ability to implement quickly, very quickly.  The last one was key to minimizing our costs for the implementation as we knew we would need to maintain the old system for a minimum of 60 days after the last server was migrated.  This also led to RedHat and Bakbone producing a case study.<br />
<br />
Feel free to read it <a href="http://customers.press.redhat.com/2007/12/10/red-hat-and-bakbone-help-contegix-support-400-growth-rate/" target="_blank">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2007/12/11/contegix-case-study-bakbone-and-redhat/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Announcement - DNS Policy Change</title>
		<link>http://thoughts.contegix.com/2007/10/03/announcement-dns-policy-change/</link>
		<comments>http://thoughts.contegix.com/2007/10/03/announcement-dns-policy-change/#comments</comments>
		<pubDate>Wed, 03 Oct 2007 18:00:09 +0000</pubDate>
		<dc:creator>matthew.porter</dc:creator>
		
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/?p=3</guid>
		<description><![CDATA[In an ongoing effort to improve service to customers, Contegix will be making some upgrade infrastructures to our core DNS services.  Effective October 20, 2007, Contegix will be making changes to cache value, called TTL (http://en.wikipedia.org/wiki/Time_to_live#Time_to_live_of_DNS_records), of all DNS records to one hour (3600 seconds).  In the past, most TTL values were set [...]]]></description>
			<content:encoded><![CDATA[<p>In an ongoing effort to improve service to customers, Contegix will be making some upgrade infrastructures to our core DNS services.  Effective October 20, 2007, Contegix will be making changes to cache value, called TTL (<a href="http://en.wikipedia.org/wiki/Time_to_live#Time_to_live_of_DNS_records">http://en.wikipedia.org/wiki/Time_to_live#Time_to_live_of_DNS_records</a>), of all DNS records to one hour (3600 seconds).  In the past, most TTL values were set at 24 hours except during migration or changes where this value was lowered in order to minimize downtime.  This was the Contegix default.<br class="webkit-block-placeholder" /><br />
<br />
Hopefully, these FAQ below will help answer any questions:<br />
<br />
Q: Why is Contegix making this change?<br />
<br />
A: This change is being done in order to help facilitate quicker changes to customer DNS records.  Customers previously had to wait up to 24 hours to see the change replicate among all DNS servers throughout the Internet.  With the change, this time has been shortened to 1 hour.<br />
<br />
Q: According to the Wikipedia link, lower TTLs cause heavier loads on the name servers.  Is the infrastructure capable of handling this?<br />
<br />
A: Absolutely.  The core Contegix DNS infrastructure is capable of handling this load and much higher.  Current name servers are sitting approximately 99% idle with an average response time of 5-8 milliseconds.  This level is being held even with TTLs at 600 seconds or lower for over 4,000 DNS records.  In addition, the change for reverse DNS (IP to hostname lookup) has been using the new value for over 6 months with no noticeable load difference.<br />
<br />
Q: Will Contegix still allow custom TTL values - lower and higher?<br />
<br />
A: Absolutely.  Contegix will continue to offer customers the option of having lower and higher TTL values.  Contegix remains one of the few providers who allow TTL with values below one hour.  Please file a support request if you wish to have a different value set for an entry after the changeover.<br />
<br />
Q: What action do customers need to take?A: Unless the customer has specific TTL requirements, no action is needed upon the part of the customer.<br />
<br />
Q: What if I do not host my DNS with Contegix?<br />
<br />A: No changes are required on your side.<br />
<br />
Q: I like what I hear about Contegix&#8217;s redundant DNS infrastructure. Can I move my domain(s) there?<br />
<br />
A: Contegix provides DNS hosting as part of our services.  You are welcome to move your DNS hosting to us.  Contact support at your convenience and the engineers will guide you through the process.  Please do not change your DNS until you have contacted support and planned a migration strategy.<br />
<br />
As always, thank you for your continued business.  We look forward to helping you build the best infrastructure available.  As promised, this is one additional announcement on our continued improvements to drive more customer value.</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2007/10/03/announcement-dns-policy-change/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Infrastructure Improvement - Go Hyperic! Go!</title>
		<link>http://thoughts.contegix.com/2007/09/13/infrastructure-improvement-go-hyperic-go/</link>
		<comments>http://thoughts.contegix.com/2007/09/13/infrastructure-improvement-go-hyperic-go/#comments</comments>
		<pubDate>Thu, 13 Sep 2007 21:41:37 +0000</pubDate>
		<dc:creator>matthew.porter</dc:creator>
		
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://thoughts.contegix.com/2007/09/13/infrastructure-improvement-go-hyperic-go/</guid>
		<description><![CDATA[ Our single most important commitment to our customers is to provide the absolute best support possible.  Part of our support commitment is continuously pushing the response from reactive to pro-active.  We want to be able to address an infrastructure problem before our customers realize it is a problem.  When it is [...]]]></description>
			<content:encoded><![CDATA[<p> Our single most important commitment to our customers is to provide the absolute best support possible.  Part of our support commitment is continuously pushing the response from reactive to pro-active.  We want to be able to address an infrastructure problem before our customers realize it is a problem.  When it is an application issue, we want to be able to provide you every piece of data available to help you resolve the application level issue.  A key component to this goal is our monitoring system.  With this goal in mind, I am please to announce that we are making a significant improvement to this core infrastructure.<br />
<br />
We have selected Hyperic (http://hyperic.com) as the foundation of our new monitoring infrastructure.  Specifically, we are deploying the Hyperic HQ Enterprise Edition (http://hyperic.com/products/hq_for_ent.html).  Hyperic HQ drastically increases our monitoring capabilities by focusing on the health of the server and the applications in your infrastructure.  Purpose-built for web infrastructure, and architected to consider all layers of infrastructure including hardware, middleware, virtualization and applications, Hyperic HQ delivers system monitoring, trending, and analysis.<br />
<br />
So what does this mean for you - our customer?  Let&#8217;s look past the server health and examine the application infrastructures:</p>
<ul>
<li>For our customers utilizing Apache, we will now be monitoring the health of Apache, including its availability and number of available Workers/Servers.</li>
<li>For our customers utilizing Java, we will now be monitoring the health of the JVM via JMX.  These statistics will be collected to determine the health of your application.</li>
<li>For our customers utilizing Rails, we will now be monitoring the health of individual Mongrel instances.</li>
<li>For our customers utilizing Zimbra, we will now be monitoring the individual components, including availability, speed of IMAP connections, and LDAP connections.</li>
</ul>
<p>All of this means faster support, faster resolution, and great visibility.  And that&#8217;s just the beginning&#8230;<br />
<br />
We have decided to raise the bar on the managed hosting industry and deliver even more value through our trademark Beyond Managed Hosting.  For our managed customers, the monitoring will continue to be included in your services.  This drives more value from the management services we provide with more visibility into your infrastructure.    Beginning this weekend, our support engineers will begin making the necessary changes to customer firewalls to accommodate the Hyperic agent.<br />
<br />
The rollout of the agent will begin in approximately two week with completion by March 15, 2008.  After the rollout is complete, direct customer access to the system will begin rollout with completion by end of March 2008.<br />
<br />
If you are a colocation customer, feel free to contact your account executive or sales@contegix.com to find out how you can take advantage of this monitoring solution at a reasonable per-device cost.</p>
]]></content:encoded>
			<wfw:commentRss>http://thoughts.contegix.com/2007/09/13/infrastructure-improvement-go-hyperic-go/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
