CHOOSING HOSTING
Managed hosting vs a VPS: which does your site actually need?
By Anupa Dinuranga, FounderUpdated 7 min read
What you are actually choosing between
Both options run your site on a Linux server in a data centre. The real difference is who is responsible for that server once it is running.
With managed hosting, the provider runs the operating system, web server, language runtime and usually the database. You deploy your code, from a Git repository, an upload or a WordPress dashboard, and the provider handles security patches, server configuration, monitoring and (depending on the plan) backups. You give up root access and some freedom in exchange for not having to think about the machine.
With a VPS (virtual private server), you rent a slice of a physical machine with its own operating system and full root access. The provider keeps the hardware, power and network up. Everything above that is yours: installing software, configuring Nginx, renewing certificates, applying updates, taking backups and noticing when something breaks.
Neither is better in general. The useful questions are whether you need what a VPS gives you, and whether you have the time and skill to look after one properly.
Managed hosting vs a VPS, side by side
| Managed hosting | VPS | |
|---|---|---|
| Root access | No | Yes, full control |
| OS and security patches | Provider | You |
| Installing system packages | Only what the platform supports | Anything that runs on Linux |
| Web server and SSL setup | Provider | You |
| Backups | Provider, if your plan includes them | You build them and test restores |
| Long-running background workers | Depends on the platform | Yes |
| Custom ports and protocols | Usually HTTP and HTTPS only | Yes, within the provider's network rules |
| Monitoring and alerts | Provider watches the server | You set them up and respond |
| Who fixes a 2am outage | Provider support | You |
| Skills you need | Deploying your app | Linux administration plus deploying your app |
| What it really costs | The monthly fee | The monthly fee plus your time |
That last row matters. A VPS often has a lower sticker price for the same CPU and memory, but the comparison isn't fair until you count the hours you spend on upkeep and the cost of the site being down while you learn. Our breakdown of what hosting costs in Sri Lanka goes through the line items worth checking.
When a VPS is the better choice
A VPS earns its upkeep when you genuinely need one of these:
- Root access. You need to change kernel settings, run your own Nginx or Caddy configuration, manage users, or install agents that a managed platform won't allow.
- Custom system packages. Your app shells out to ffmpeg, headless LibreOffice, ImageMagick with specific delegates, GDAL, or a PHP extension that isn't on the standard list.
- Long-running background workers. Queue consumers, WebSocket servers, chat bots, scheduled scrapers or anything else that runs continuously rather than answering a web request and finishing.
- Unusual ports or protocols. Game servers, MQTT brokers for IoT devices, a WireGuard VPN, an SMTP relay, or any raw TCP or UDP service. Managed web hosting is built around HTTP and HTTPS.
- Learning Linux. If the point is to learn how servers work, there is no substitute for running one. Use it for side projects first, not for a client's shop.
- Several small projects on one machine. If you are comfortable administering it, one VPS can host a handful of internal tools, staging sites and experiments.
If the only reason you want a VPS is to run a few Docker containers, check whether managed container hosting covers it first. You keep control of what runs inside the container without owning the operating system underneath.
What running a VPS really involves
The setup is the easy part. Most of the work is the ongoing upkeep, and it doesn't stop once the site is live.
Patching
Security updates for the operating system, OpenSSH, OpenSSL, your web server, your language runtime and your database arrive constantly. Some need a service restart, kernel updates need a reboot, and every so often an update changes a default and breaks something. Automatic security updates help, but someone still has to watch for the ones that need a reboot or a manual fix.
Security
A new server with a public IP sees automated SSH login attempts quickly. You need key-only SSH, a firewall, intrusion blocking and services that listen only where they should. Our first-hour Linux security checklist covers the baseline, and it is the minimum, not the finish line.
Backups
Backups have to leave the server, cover both files and databases (dumped properly, not copied while running), run on a schedule, and be restored at least once so you know they work. A snapshot taken by the provider is useful but is not the same as a backup you have tested.
Monitoring
Somebody has to notice a disk filling up with logs, memory running out, a certificate renewal that silently failed, or the site returning errors. That means an external uptime check plus alerts that reach your phone, and the habit of reading logs now and then.
The 2am outage
When the database gets killed for using too much memory at 2am, or a disk fills and the site stops taking orders, you are the on-call engineer. If you are asleep, travelling or in an exam, the site stays down until you are back. Be honest about whether that is acceptable for this particular site.
The most common VPS failure isn't a hack. It is a server that was set up well once and then left alone for a year: unpatched, backups quietly failing, disk nearly full. Plan for the upkeep before you plan the setup.
When managed hosting is the better choice
Managed hosting is usually the right call when:
- The site is a business website, portfolio, blog, WordPress site, online shop or a standard Node.js or Next.js app.
- Nobody on the team wants to be responsible for a Linux server, or has the time to be.
- Downtime costs you sales, leads or a client relationship.
- You'd rather spend your hours on the product, the content or the customers.
- You want backups, SSL and security updates handled without having to remember them.
The trade-off is flexibility. You run what the platform supports, in the way it supports it. For most websites that is not a real limitation. If you are a startup weighing this up, our guide to choosing hosting for a Sri Lankan startup covers the other questions to ask, such as how easily you can move away later.
A five-question test
Answer these honestly:
- Does the app need root access, custom system packages or a non-HTTP port?
- Does it need a process that runs continuously, outside of web requests?
- Can you, or someone you pay, apply updates and check the server every week?
- Do you have off-server backups and have you practised restoring them?
- If the server breaks at 2am, is it acceptable for it to stay down until you can fix it?
If you answered no to the first two, managed hosting fits and the other three questions stop being your problem. If you answered yes to one of the first two and yes to the last three, a VPS is a reasonable choice. If you need a VPS but answered no to questions 3 to 5, you need either help running it or a different architecture.
Where NevaraCloud fits
NevaraCloud is managed hosting. We don't sell VPSs or root-access servers. Our plans run static sites, WordPress and Node.js apps with free SSL and the Cloudflare CDN included, and from the Business plan up you get a MySQL or PostgreSQL database and daily automated backups kept for 7 days. Plans start at LKR 1,500 a month, billed in rupees with no contract; the plans and add-ons page has the details.
If you have decided you really need a VPS, our honest advice is to rent one and run it yourself. If you'd rather not do the setup alone, or a server you already run is misbehaving, we can help set it up or fix it, quoted after we look at the setup.