WV WPVelocity COMMERCE RUNBOOK
WPVelocity Affiliate Disclosure: Clicking /go/ partner links may earn WPVelocity a referral commission from hosting vendors at zero extra cost to you. Read Full FTC Disclosure →
WPVelocity Runbook / Stack Playbooks / AGENCY-ISOLATION
WPVELOCITY PLAYBOOK 07 • MULTI-SITE AGENCY FLEET ISOLATION

WPVelocity Runbook: WordPress Agency Fleet Isolation & Redis DB Key Separation

We show how agencies prevent one unpatched client brochure site or shared Redis instance from cross-contaminating 25 retainer stores — using per-vhost Linux users and salted Redis DB indexes. (WPVelocity Modeled Targets: 56 ms (Isolated LVE) • 1.3s Modeled LCP • 84 ms Modeled INP).

WPVelocity Engineering Note: Placing 25 client WordPress installs under one shared Linux account (`www-data`) lets a single vulnerable plugin compromise every sibling domain — and pointing two sites at Redis database `0` without `WP_CACHE_KEY_SALT` overwrites `alloptions`, leaking menus and redirects across client domains!

Load Preset in WPVelocity PHP Worker Calculator →

WPVelocity Isolation Risk: Shared Linux Pools & Redis Key Collisions

Under our WPVelocity queueing equations, unoptimized defaults push dynamic origin responses toward 780 ms (Noisy Pool) under concurrent load.

WPVelocity Mandatory Per-Client Redis Salt & File-Edit Lock

// wp-config.php — WPVelocity Per-Tenant Redis Isolation Guard
define('WP_CACHE_KEY_SALT', 'wpv_tenant_acme_prod_2026_');
define('WP_REDIS_DATABASE', 3); // Assign distinct DB 0..15 or ACL prefix per site
define('DISALLOW_FILE_EDIT', true); // Disable wp-admin PHP theme/plugin editor

WPVelocity Persistent Cutover Checklist (AGENCY-ISOLATION)

  1. GATE 01

    Provision a dedicated Linux system user (CloudPanel vhost, CyberPanel user, or CloudLinux CageFS account) per client domain.

    wp plugin list --status=active --format=table --allow-root
  2. GATE 02

    Set a globally unique WP_CACHE_KEY_SALT and separate Redis DB index in wp-config.php BEFORE enabling any object cache drop-in.

    wp cache flush --allow-root && redis-cli -s /var/run/redis/redis.sock info memory
  3. GATE 03

    Enforce DISALLOW_FILE_EDIT=true across every client install so compromised editor logins cannot write PHP shells.

    curl -I https://store.yourdomain.tld/ | grep -iE "x-litespeed-cache|cf-cache-status"
  4. GATE 04

    Stagger nightly backup cron minutes (00..59) across client sites to prevent simultaneous NVMe IOPS saturation at midnight.

    systemctl status wp-action-scheduler.timer --no-pager

WPVelocity Concurrency & Tier Sizing Matrix (2026-11-12)

Concurrency Tier PHP Workers Redis RAM Matched Public Spec (2026-11-12)
Boutique Agency (10–20 Client Sites) CloudLinux CageFS + LSWS Per-cPanel Socket ChemiCloud Turbo ($5.45/mo • 2026-11-12)
Managed Agency Cloud (30–50 Sites) Dedicated IP + 60 Workers 200 GB NVMe + CDN Hostinger Cloud Startup ($7.99/mo • 2026-11-12)
High-Scale Fleet (50–100+ Sites) Per-Vhost Linux Users Multi-Socket Redis UltaHost VDS 32GB ($58.00/mo • 2026-11-12)

WPVelocity Rate Notice: Public rates retrieved 2026-11-12 from each vendor’s official pricing page; promotional introductory discounts and multi-year renewal prices may change at any time — always verify exact billing terms on the vendor’s official checkout page before purchasing.

STAR #1 • LSWS ENTERPRISE From $2.95/mo

WPVelocity: ChemiCloud LiteSpeed Enterprise NVMe Cloud

Star #1 Pick • LiteSpeed Enterprise + Redis + Singapore/Tokyo Nodes + 45-Day Refund + Free Migration (LiteSpeed Enterprise (LSAPI + ESI Edge Cache) • Memcached & Redis Object Cache Socket).

Inspect ChemiCloud Specs via WPVelocity ↗
MANAGED LITESPEED CLOUD From $3.99/mo

WPVelocity: Hostinger Managed LiteSpeed Business & Cloud Startup

Up to 75% OFF + Extra 20% Partner Discount + Built-In Object Cache & Free CDN (LiteSpeed Web Server + Hostinger CDN • 1-Click LiteSpeed Object Cache + Staging Tool).

Inspect Hostinger Specs via WPVelocity ↗

WPVelocity Engineering FAQ: AGENCY-ISOLATION

When does WPVelocity advise WordPress Multisite Network vs isolated single installs?
WPVelocity recommends Multisite Network only when sub-sites belong to a single corporate owner sharing users; independent agency clients should always run in isolated Linux accounts for security and clean handoffs.
What symptom alerts WPVelocity readers to a missing WP_CACHE_KEY_SALT collision?
Both WordPress sites overwrite identical `wp_options:alloptions` keys in RAM, causing Domain A to suddenly redirect visitors to Domain B or render Domain B’s navigation header.