Where an application runs affects its reliability, speed, security and cost. There is no single best option; the right choice depends on the application, its users and who will look after it.
The main options
Shared hosting places many websites on one server managed by a provider. It is inexpensive and simple, but offers limited control and is usually suited to small websites rather than business applications.
Virtual private servers give you a dedicated slice of a server with full control. You gain flexibility but take on responsibility for updates, security and backups.
Managed platforms and cloud services run your application on infrastructure the provider maintains, often with automatic scaling, backups and monitoring. You manage less, but costs need watching and some services tie you to a provider.
On-premises servers sit in your own building. They can suit specific regulatory or connectivity needs but require power protection, cooling, physical security, hardware replacement and skilled administration.
Questions that guide the decision
- Where are the users? Hosting closer to users, or using a content delivery network, reduces delays.
- How critical is availability? What would an hour of downtime cost?
- Are there data residency or regulatory requirements?
- Who will maintain the servers? Unmanaged infrastructure needs ongoing attention.
- How will usage grow?
- What is the realistic monthly budget, including support?
Hidden costs to include
- Data transfer and storage charges.
- Backups and their retention.
- Monitoring and alerting tools.
- Time spent on updates and incident response.
- Licences for operating systems or databases.
Avoid unnecessary lock-in
Using a provider’s specialised services can save time, but may make moving later difficult. Keep data exportable, document the setup and prefer standard technologies where the benefit of a proprietary service is small.
Keep ownership with the organisation
Hosting accounts, domains and billing should be held in the organisation’s name, with access shared among more than one responsible person. Many difficulties arise when a single individual or former supplier controls critical accounts.
Review periodically
Usage and prices change. Review hosting arrangements at least annually to confirm they still match the application’s needs and budget.
