[Owasp-board] [Vote] Adding a server to our Rackspace account

Josh Sokol josh.sokol at owasp.org
Wed Mar 28 19:57:13 UTC 2012


The fact is that we need hosting, we have an in-kind agreement in place
with Rackspace, and this won't cost us anything more than my time in
getting it set up.  Our team negotiated an agreement with Falling Rock
Networks for secure hosting, but it's proven to be a security vs usability
issue heavily weighted in security's favor and we need something that we
can spin up and start using very quickly.  To be perfectly clear, I am
volunteering to get Apache, PHP, and MySQL up and running on this server.
The LAMP stack will form the basis of almost any technical solution you
come up with in the future.  Our team will get a CMS running for use with
the AppSecUSA site.  I am not volunteering to do that for any of the other
sites though I can point them in the right direction to do it themselves.
For now, we just need a server that will enable us to get content up and
running on very quickly so we can start promoting the conference.  The
beauty of the cloud is that you can scrap the server completely and move to
a different tech stack in the future if that's really what you desire, but
we can't wait like you are for a decision on that.


On Wed, Mar 28, 2012 at 2:21 PM, Mark Bristow <mark.bristow at owasp.org>wrote:

> Yes josh it is rediculous that's why it's in the plan to get resolved this
> year.  Are you voluenteering to manage this platform for all events for as
> long as we keep that server?  We need to think of the long term maintaince
> questions and until we understand our long term requirements we should not
> lock in a technical solution.
> -Mark
> Sent from my wireless device
> On Mar 28, 2012, at 3:04 PM, Josh Sokol <josh.sokol at owasp.org> wrote:
> You don't think it's a little bit crazy that four AppSec Conferences have
> to fend for themselves to get a website online?  IMHO this is one thing
> that the GConfC should have ready to go regardless of which chapter is
> taking on this event.  We should have never had to negotiate for our own
> hosting platform.  We should not have to worry about importing and hosting
> historical content either or changing DNS.  Taking on an AppSec Conference
> from a web perspective should be a matter of here's your credentials, place
> last years content in a 2011 directory, and here's the OWASP preferred
> person to template things up for you.
> James and I are both former Web Systems Engineers and can handle the
> server piece without issue.  I will personally volunteer my time to get
> things set up and running.  From there it's up to the Foundation to get a
> resource to maintain it long-term, but at least the logistical headache of
> hosting and DNS would be fixed for all future conferences.
> ~josh
> On Wed, Mar 28, 2012 at 1:39 PM, Mark Bristow <mark.bristow at owasp.org>wrote:
>> So I'd object to this without more info on the available support.  The
>> conferences committee has been waiting to understand the tech director role
>> before selecting a solution as hosting all off wiki sites on a variety of
>> platforms and content managers can be very challenging from a logistical
>> standpoint.
>> -Mark
>> Sent from my wireless device
>> On Mar 28, 2012, at 2:29 PM, Matt Tesauro <matt.tesauro at owasp.org> wrote:
>> I was called by the AppSec USA 2012 team requesting a new host in
>> Rackspace's cloud.  They previously had a donated hosting plan for the
>> conference but operational problems are keeping that from working out for
>> them beyond the skeletal site at http://www.appsecusa.org/.
>> Proposed:  Add a new host to OWASP's Rackspace infrastructure to host the
>> current AppSec USA 2012 website as well as host an archive of AppSec
>> conference sites going forward.  In the past, each conference did their own
>> thing and those sites appear and disappear regularly. Rough costs for this
>> would be ~$100/month ($88/month for Linux @ 2GB RAM up 24x7 and 4 GB
>> outbound bandwidth).  We should continue to be under the donated monthly
>> max so this will not represent a cash spend for OWASP.
>> Do you support adding a host to OWASP's Rackspace cloud infrastructure?
>> Michael:
>> Eoin:
>> Matt:  Yes
>> Tom:
>> Seba:
>> Dave:
>> This is a particularly crazy week for me at work so I'm hoping to have a
>> quick vote via email so I can get the AppSec USA 2012 guys a host that
>> works for them and OWASP going forward.
>> I also have other less time critical queued requests around our cloud
>> infrastructure I plan on discussing at our April board meeting in DC during
>> the IT discussion.
>> --
>> -- Matt Tesauro
>> OWASP Board Member
>> OWASP WTE Project Lead
>> http://www.owasp.org/index.php/Category:OWASP_Live_CD_Project
>> http://AppSecLive.org - Community and Download site
>> _______________________________________________
>> Owasp-board mailing list
>> Owasp-board at lists.owasp.org
>> https://lists.owasp.org/mailman/listinfo/owasp-board
>> _______________________________________________
>> Owasp-board mailing list
>> Owasp-board at lists.owasp.org
>> https://lists.owasp.org/mailman/listinfo/owasp-board
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20120328/2353221b/attachment-0001.html>

More information about the Owasp-board mailing list