Multiple Shared IP Addresses

Nathan Lierbo shared this idea 4 years ago
Open Discussion

Multiple Shared IPs

Allow a cPanel/WHM server to have many shared IPs, rather than 1. This means all sites on the shared IPs should be accessible via all shared IPs. For example, Apache VHosts should be configured to listen on all shared IPs, not just a single main shared IP.

The intent behind this feature request is to diffuse script kiddie DoS attacks, assuming they attack only one IP address for a site rather than all IPs associated with a site, which would be easily retrievable via running a dig command on that site's domain.

Original thread: http://forums.cpanel.net/f145/case-45896-multiple-shared-ip-addresses-160349.html

Best Answer
photo

To those interested in this idea, are you looking for:

1. a feature that automatically distributes new accounts over a group of shared IP addresses; or

2. a feature that allows you to manually select the shared IP address during account creation?

In case you want both, which would you prefer to have first?

Comments (27)

photo
2

Great thing to have, if you get a DDoS And the IP Is nulled its ngoing to affect less websites.

photo
2

This is a great idea. It would be great if this feature can be included... This certainly helps in case of DDoS attacks. It will have less impact if you can spread the accounts on multiple IPs.

photo
2

All these have been discussed over and over.

It is a MUST! Highly appreciated...

What do you think cPanel? When can we get it?

Please, listen to this and related topics.

photo
1

I'd love to see this, thats way we are protecting our IP's

photo
3

To those interested in this idea, are you looking for:

1. a feature that automatically distributes new accounts over a group of shared IP addresses; or

2. a feature that allows you to manually select the shared IP address during account creation?

In case you want both, which would you prefer to have first?

photo
1

For me personally, I prefer manual control, therefore #2 first gets my vote.

photo
3

This functionality is actually already supported, unofficially:

http://www.thecpaneladmin.com/how-to-set-up-multiple-shared-ips-on-a-cpanel-server/

photo
1

This would be a great feature

photo
1

I can see another usage for this. If you were to host users files on different nas mounts say homea homeb homec and homed and had a shared IP per nas, you could then move accounts of one nas, say nasb to a new server while leaving sites on nas homea and homec on the old server.

We would like to be able to set the default shared IP for new accounts and be able to manually change an account's IP.

This would make alot of sense added to the feature to allow to have multiple apache servers that is currently in planed stage.

photo
1

Kenneth Power wrote:

To those interested in this idea, are you looking for:

1. a feature that automatically distributes new accounts over a group of shared IP addresses; or

2. a feature that allows you to manually select the shared IP address during account creation?

In case you want both, which would you prefer to have first?

1 & 2 both are good options.

For me 1st one is comparatively much good idea as multiple groups means a website may have multiple ips from the server

While in 2 only 1 ip can be assigned.

I believe if vote for 1 option is required, I will go to 2nd as in 2nd option we get more control over the accounts and IP usage.

photo
1

What about a simple setting :

Shared IP :

Random

IP1

IP2

Etc

This would solve both usages.

photo
1

I think cPanel needs this feature, but it's already possible using scripts/workarounds/reseller accounts. At any rate, it would hopefully coincide with a fix for keeping a site online during an IP switch, otherwise it's impractical to be moving sites around all the time. We have our own script that handles this exact scenario right now, but it's far from perfect.

photo
2

Kenneth Power wrote:

To those interested in this idea, are you looking for:

1. a feature that automatically distributes new accounts over a group of shared IP addresses; or

2. a feature that allows you to manually select the shared IP address during account creation?

In case you want both, which would you prefer to have first?

both should be included but if you include feature 1 first then it would be great. Any idea when you will implement it as it will save us alot of time from unblocking our Ips from RBL in case of any abusive website.

photo
1

Both features are good. We'd prefer feature 1 first - account creation is taken from a pool of shared IP addresses.

photo
1

i prefer to see first

2. a feature that allows you to manually select the shared IP address during account creation?

and ability to move account between shared ip .

photo
1

I know hostgator have this function but I don't know how can they make it.

photo
1

If you get a Ddos attack the server stops responding meaning not only on 1 IP but all because it's stops responding due to heavy load. This will not solve your Ddos attack issue.

photo
1

Correct but if the datacenter null-routes the IP for an extended period of time then

you're down even longer. Where as with having sites on other IP's they

would be working during that time. We have worked around this by setting

up multiple reseller accounts that our shared hosting accounts are

setup under instead of root. This allows you to assign a shared IP to

each reseller account that the shared accounts will use when created.

photo
photo
1

Multiple shared IPs are also important when applying to SSL certificates for multiple domains.

I have >200 domains on my cPanel account, over a shared IP.

By using "Let's encrypt' or other CAs, I can issue a single certificate for all these 200 domains. The problem is that, if someone clicks to see the "Certificate Information", this person would have access to all my shared domains list. If I could distribute my accounts between multiple shared IPs (let's say, 10 IPs, 20 accounts per IP), the damage would be significantly lower.

photo
1

This will not mitigate DDoS attacks. The attacks cause the server response to slow down (or stop) because of excessive load. The only benefit of this "feature" is that null routing one of the shared IP addresses, won't knock out access to the others. ;)

photo
1

I'd like to be able to have multiple shared ip's so that we can seperate non-https sites from websites using SNI. In this same use case it'd be preferable if the default ssl vhost would be the server's hostname with the cpanel parking page as well.

Another use case would be to spread the impact of blacklisting (if assigning an account to a certain shared ip would also imply that e-mails for that account would be sent via the respective ip)

photo
1

is this feature hard to release in 3 years now ?!!!!

we need multiple shared ip option , that way we can select in account creation wich ip to use , we can also use ip for https , otehr for forums, other for enreprise website ..ect ...

photo
3

I have managed to get around this (without modifying files) steps below:

  1. Setup a placeholder reseller (doesn't have to own any accounts), modify one account and give it reseller privileges.
  2. Using Manage Reseller's Shared IP feature select the new placeholder reseller and assign it an IP that is not currently in use.
  3. You can now use the Change a Site’s IP Address feature and select the new shared IP (without changing ownership of the account)

This works perfectly and I now have my cheap TLS hosts on a new shared Ip, without chnaging the owner from root.

Hope this helps.

Thanks

Bob

photo
1

you can't use multiple ip as shared ip, from your case you will be able to chaneg site hosted in old ip to the new shared ip , you can't move them to another ip . you will have only only 1 shared ip .

photo
1

Im sorry I don't understand your point, I have this setup on a shared server and it is working perfectly for nearly 3 months, I can confirm I have 2 shared IP's on this server with multiple accounts on each one.

photo
photo
2

I would like to see this option added as well. Don't see why I need to create a reseller, purely to have some clients on a different shared IP. It just complicates matters.

photo
1

Yes, good and required feature. I would like to have one main-shared IP and be able to select other IPs either on account creation or later. Basically I want to be able to set current "dedicated" IPs to become "shared" if needed and this should be regardless reseller.