I am considering using suphp. It seems that newly created files in php get ownership apache.apache and this can become an issue. Also it seems that monitoring of spam sent and load usage by php scripts is easier to monitor with suphp.
However I am afraid this will reduce performance on the servers. I use the Plesk and DirectAdmin control panel for servers and host about 200 domains per server, but I don't want to see a high increase in load with suphp. Also I am not sure if suphp is just a fancy name for php via cgi.
suphp
- almost 10 times slower?
- this is just php under cgi? the way we did it 10 years ago?
- easier for monitoring, all scripts run under username.
- minimum permissions = 640.
mod_php
- much faster
- better integration with apache?
- scripts run under apache:apache.
- minimum permissions = 64 4(!), reading of password files only restricted by open_basedir, not the actual linux default permisisons system?
So... does suphp offer increased security? and does it offer much benefits in monitoring threats (spam), benchmarking (spiking php scripts), etc? And how big is the drain in performance?