Author: Matthew

Update 11 Jan 2021: This site is back on WordPress again.

Update 21 Jan 2017: TechFright posts were merged in to MatthewNewill.com which runs on Jekyll. I also moved away from PowerVPS a few years ago and went with WebSynthesis for my other blog. I also use a shared MediaTemple account. Some of this content is now out of date.

TechFright.com runs on a VPS server from PowerVPS at the moment. The blog runs alongside several of my other blogs which some are occasionally updated and another is regularly updated. Most get a little amount of traffic each month while others get several hundred visitors a month and one gets a few thousand visitors a day. I run on the fuse basic hosting package which costs $109/month (although I used a coupon to get something like 20 or 25% off of that). I use Centos 5.8 on that VPS which comes with WHM and cPanel. I have used Window hosting extensively before moving to Linux a few years ago but find Linux far easier to work with when using WordPress (for example, rewriting URLs is easier). But, go with what you find familiar.

I want to keep my largest blog (a gadget blog) running as fast as possible with the cleanest code. To achieve this I go to what you might call extreme lengths to keep pages loading fast and WordPress working well. Here’s a few things that I have done to shave a few seconds off the page load speed.

The Genesis Framework

For a long time I was a big fan of the Thesis theme from DIY themes. Looking back through my emails, I purchased a developers licence in April 2008. Unfortunately, I just couldn’t get my site to look how I wanted it to look when wanting to redesign a few months ago, so I switched. I still think the Thesis framework works extremely well and still feel confident in using it from a technical standpoint. I can also manage hooks quite well now and customise the look of my websites, but unfortunately I just don’t have the skills to take the design to the next level and also found it difficult to find themes that I liked. For this reason I dropped Thesis in favour of the Genesis Framework. I did this because of the child themes that you can purchase for relatively cheap. The link just above there gives you a rundown of the technical aspect of Genesis.

I currently use several themes which include Freelance, Magazine, Minimum (I like this one!!) and one called Sample. Price wise, the framework and 1 theme seems to cost $79.95 but when you buy that, you can use it on unlimited sites. You can then also buy child themes at a discount and they usually cost around $20, again they come standard with the unlimited option.

Rather than messing with hooks, I tend to use the Genesis Simple Hooks plugin (for free) which allows you to paste PHP code in to the one of many hooks found in WordPress. I wont go in to the technicalities of using hooks instead of editing theme files, but in simple terms it prevents the need to modify the theme code making it easier to update your theme at a later date.

The page load speed isn’t really recognisable with the Genesis Framework, but the reason I use it is because it is a good foundation for a blog and this is important.

Replace Apache with Litespeed

This is perhaps one of the best enhancements that my blog received. Apache is the standard install at PowerVPS but I had recently read about Litespeed as a replacement for Apache. At the moment I am running on a trial licence for the next 10 or so days and at that point I will decide if I am going to lease a licence for it or opt for another host such as VPS.net that supports Litespeed for a small cost.

The benefits are amazing with Litespeed. As I’m running the trial version I only get to utilise 2 CPUs of the 8 on the VPS, but the page load speed has increased as has the waiting time for a page to be served. While running Apache I was seeing a pause of about 3 – 4 seconds with the waiting…. in the status bar at the bottom of the page. Switching to Litespeed the waiting time is now below a second and overall, the blog and the admin area run a lot smoother.

I recommend trying Litespeed. It is quiet easy to install and I’ll do a tutorial on it at a later date for those who want to install it themselves.

W3 Total Cache

Caching is essential for almost all blogs. WordPress is quiet heavy in terms of how many requests are made to the database and how much PHP is needed to render every single page. Although a blog with modest traffic wont struggle without caching you’ll find that if you write something that hits Stumbleupon or gets linked to from a large blog, the blog will fall on its knees. So, install W3 Total Cache.

What it does is caches pages to either disk or some sort of memory cache like xcache or memcached. When a visitor hits the page for the first time, it renders the page the normal way by querying the database and pulling the images from the disk. The next time a visitor hits that same page, they get served a page from the cache. With pages and posts loading from RAM with Xcache, APC or memcached, it speeds up things a lot and takes load off the CPUs, doesn’t use as many concurrent connections to the MySQL database and doesn’t do much PHP scripting at all. A huge saving for a server. When hundreds of people descend on your post the server can generally handle it with W3 Total Cache because of the load being taken off the server.

You can also use W3 Total Cache to combine CSS and JS files with Minify as well as do Object caching, Browser caching and database caching (I recommend using some sort of memory cache rather than disk caching for database).

Memcached, APC or Xcache

Although caching to disk with W3 Total Cache is possible (there’s a basic and enhanced version), there are several free options that can be installed which as Memcached, APC and Xcache (there are a few others mentioned). Installing one of these is the better way to run caching because it takes the strain off the disk and puts it in to RAM. RAM is far quicker than a regular hard drive, so performance is also a notch higher with these. I’ll also do a post at a later date on how to install Memcached. Although WHM can do some of the installations with the click of a mouse, each of them still require you to edit php.ini to configure them the best way.

Use MaxCDN to Push Images, Theme files, CSS and JS across Continents

Because of how the internet works, the further you are away from a server the longer it takes to get the content to you. Adding a few milliseconds per packet of data soon adds up with a homepage that might be 2.5MB in size. A CDN (Content Delivery Network) aims to tackle that problem by placing servers in busy internet areas around the world. I opted for MaxCDN.com partly due to the price but also because of the good reviews and coverage.

By putting multiple servers around the world and having your blog push content to those servers, it allows someone in Seattle to load up most parts of your website from a server close by to Seatle. Likewise, if someone in the Netherlands loads up your website, a copy of most of the content is pushed on to a CDN server in the Netherlands and they load your site up as though they were local to the server. This cuts down a lot of transport time. Price wise, 1TB of traffic is valid for a single year at costs just $39.95. That low cost and high amount of traffic more than compensates due to the better experience your visitors get. If you run ads, you’ll likely also see revenues increase as well. In my experience, the quicker the page load time, the better the conversion because people like fast loading websites.

With MaxCDN and W3 Total Cache, the service is simple to set up and can be fully configured within an hour of purchasing the service. You also get the added benefit of setting up different domain names for the cdn so that you can have cdn1.yourdomain.com, cdn2.youdomain.com, cdn3.yourdomain.com. The reason you do this is because it spreads images, JS and CSS files around the different host names and speeds up page load. Typically a browser will only load 5 – 8 items at the same time from a single host name. If you have 40 images to download on your page, it will only do them in batches of 5 or so. If you run multiple hostnames it allows several blocks of 5 items to be downloaded simultaneously, thus loading the page faster.

Use the Smush.it plugin to Squash Image File Sizes

A lot of images you will upload will not be as small as they could be. Depending on where you get the images from you might see some that are far bigger than they need to be (referring to file size). Installing a plugin like Smush.it allows you to automatically smush images with a lossless tool. What that means is that your image filesize might end up being 10% to 90% smaller but yet, look identical. Lossless means it doesn’t lose any clarity when being compressed.

If you have an image heavy site, run the images through smush.it to cut down filesize. This of course means that a user has a lot less to download, and therefore the page will load quicker.

I also recommend grabbing all your theme images and running them through the smush.it tool linked above.

In Closing

Although each step only shaves a bit here and a bit there, it’s the combination of all these things that can make a site load in 2 seconds as opposed to 8 second. It’s difficult to put them in priority order because they each do something different, but my loose order would be caching, Litespeed, MaxCDN followed by smushit.

Do you have any other advice on what will help speed up a website? Post your ideas in the comments below.

Just a quick tip for today. I found my self fixing a problem earlier that required I logged out as a user and back in as an admin and back in as a user to test etc… Although the Windows 7 PC was attached to a domain, I didn’t want to log in with a domain account. Instead, I had two local accounts set up. One in the admin group and the other in the users group.

The typical way of not logging in to the domain is by entering the following in the username box:

hostnameusername

After a while this can get a little tedious, especially as the hostname was a mix of country and serial number. A quick work around is to simply type in:

.username

Putting the . before the username instructs Windows 7 to log the user in locally rather than on to the domain.

I figured if you run in to the same problems sometime that this might be of benefit to you.

I wrote a couple of weeks back about two-step authentication that was added to Dropbox and how it can make your Dropbox account more secure. Two-step authentication is only part of the challenge though and only protects you from people trying to break in to your account. What happens when one of your Dropbox devices is stolen? Unfortunately the results can be grim depending on how secure you have kept the device that was stolen although there is hope for iOS and Android users. Let me take you through a quick guide on what you can do to make things a little safer and potentially remotely remove files that are stored in Dropbox on that device that was stolen.

First things first, all aspects of security need to be thought about. Remember that if you run Dropbox on a Mac or Windows laptop or desktop computer then ALL files are typically copied locally unless you specify otherwise. This means that if someone gets your computer and you have no password or a week password then the intruder can simply open up your local Dropbox folder and have access.

My first quick recommendation is log in to Dropbox on the web (if you use two-step authentication then make sure you already have your backup password if your phone that gets the authentication code is the one that is stolen). When logged in, click your name at the top right and then on Settings. When the settings have loaded up, go to the Security tab and unlink the device so that it is no longer connected to your account. Unfortunately, this doesn’t include a remote wipe, so if they have access to files then you are simply preventing them from accessing your online Dropbox account and making any changes.

I recommend full-disk encryption

When laptop or desktop devices are stolen I more worry about the data that is stored than the device that is stolen. If I have good enough backups then the computer can be replaced and although annoying and leaving you with a vulnerable feeling, your data is safe. But, if you have no backup and lose your data, that is way more costly.

There is a risk with storing information anywhere. If information isn’t protected correctly then potentially anybody can gain access to it. This is why I recommend you use encryption. I personally use full disk encryption on the Mac although if you just want to keep files in a secure folder, you could potentially just secure that particular folder. For more information on why it is important to secure your device with a password and encrypt the data, take a read of my full disk encryption post. This also includes instructions or links to instructions on how you could secure your data.

Should an encrypted device with a good password be stolen then you can take more comfort in the fact that the intruder will likely just reformat the device and use the hardware. In a lot of cases the intruder is interested in the hardware.

What if your iOS or Android Dropbox device is stolen?
Luckily with iOS the device doesn’t store files locally (typically). By simply using the unlink method mentioned above you can disconnect your stolen iPad or iPhone from Dropbox and when the intruder loads up the app they VERY briefly see a list of folders and files but in less than a second they are taken back to the login/register screen.

The same, I believe, is the case for Android although I have been unable to test as I have no available Android device. Users on the Dropbox forum indicate that Android will also be presented a registration screen when the device is unlocked.

Another option, and one that all iOS users should have active, is Find my iPhone which comes part of icloud.com and is built-in for free on iOS 4+ devices in the mail/calendar settings menu. Activate this and if your device is stolen you can track it, lock it, remotely wipe it or set an alarm on it with a message. My preferred method is to use an 8-digit pin (company restrictions mandate this to get email). I’d first unlink from Dropbox as it’s quick and easy. I’d then remotely lock with a stronger password and track for a while and if no luck with that, I’d initiate a remote wipe.

Either way, if your iOS device running Dropbox is stolen a simply unlink in Dropbox’s web interface will clear the contents for you.

How to prepare now

Although the chances are that you are reading this because of a Dropbox device being stolen, hopefully it can bring some hope in that if you are on Android or iOS then you can simply unlink. But, if you are reading this and your device hasn’t been stolen then go enable two-step authentication now and look at adding passwords to all devices as well as encryption and backups where possible. It’s all about preventing access both virtual through a hack or physical through encryption to ensure that your data doesn’t get in to the wrong hands.