Online stores outgrow shared hosting faster than other websites. Shoppers with carts, checkouts, logged-in customers, stock updates and payment webhooks generate uncached, dynamic requests, and a slow checkout costs sales directly. A VPS gives a store dedicated resources, full control over the software stack, and room to grow.
Signs you need a VPS
- Checkout and cart pages are slow, especially during promotions.
- Your shared host throttles CPU, or limits PHP processes (“resource limit reached”).
- You need specific PHP versions or extensions, Redis, or server-level caching.
- You want isolation from other customers’ sites (security and performance).
- You run several stores, or need staging environments.
Platform choices
| Platform | Stack | Resource needs | Notes |
|---|---|---|---|
| WooCommerce | WordPress, PHP, MySQL | Moderate | Most popular; huge plugin ecosystem |
| Magento / Adobe Commerce (Open Source) | PHP, MySQL, OpenSearch, Redis, Varnish | High (4+ vCPU, 8–16 GB+) | Powerful for large catalogues |
| PrestaShop | PHP, MySQL | Moderate | Popular in Europe |
| Shopware | PHP, MySQL, OpenSearch | Moderate–high | Strong in Germany/EU |
| Medusa, Saleor | Node.js / Python, PostgreSQL | Moderate | Headless, developer-focused |
See WooCommerce VPS requirements.
Sizing
| Store | Starting point |
|---|---|
| Small (few orders a day, < 1,000 products) | 2 vCPU, 4 GB RAM |
| Growing (dozens of orders a day) | 4 vCPU, 8 GB RAM |
| Busy, or Magento | 6–8 vCPU, 16 GB RAM |
| Large catalogue + search engine | 8+ vCPU, 16–32 GB, or separate database and search servers |
Key metric: concurrent uncached requests × PHP memory per worker. Plan ahead for campaigns such as Black Friday: upgrade before the traffic arrives. On VPS.DO, plan upgrades are handled through a support ticket. See how much RAM a VPS needs.
A fast store stack
- Nginx + PHP-FPM (PHP 8.2/8.3) with OPcache.
- MySQL 8 / MariaDB with a tuned InnoDB buffer pool. See MySQL performance tuning.
- Redis for object cache and sessions.
- Full-page cache for catalogue pages (Nginx FastCGI cache or Varnish), with cart, checkout and account excluded. See Nginx FastCGI cache.
- CDN for images and static files. See CDN for websites.
- Search: OpenSearch, Elasticsearch or Meilisearch for large catalogues. See Meilisearch.
WooCommerce specifics: speed up WooCommerce.
Security and PCI DSS basics
- Use hosted payment fields or redirects (Stripe Elements, PayPal, Adyen and others), so card numbers never touch your server. This keeps you in the simplest PCI DSS self-assessment category.
- HTTPS everywhere, with HSTS. See Let’s Encrypt.
- Keep the platform, extensions and OS updated. Test on staging first.
- SSH keys only, a firewall, Fail2ban, and 2FA for admin accounts. See Linux server hardening checklist.
- Separate admin access (IP allowlist or VPN for
/wp-adminor the Magento admin) where practical. - For large public stores that attract attacks, consider DDoS protection. VPS.DO offers DDoS protection as a paid add-on for dedicated servers. See dedicated servers.
Backups and recovery
Orders change every minute, so back up the database frequently (hourly dumps, or binary log based backups for busy stores), plus daily file backups, all off-site. Test restores. See database backup automation and backup strategy.
Location and latency
Host close to your main customers. Checkout involves several round trips, and latency adds up. For customers in mainland China and Asia, Hong Kong (CN2+BGP) or Tokyo (CN2 GIA) routes help. For North America, choose a US location. See choosing a VPS location, USA VPS, Hong Kong VPS, and Japan VPS.
Order confirmations and shipping notices must arrive. Use an SMTP service with SPF, DKIM and DMARC. See WordPress email and SMTP and transactional email services.
Quick reference
| Area | Recommendation |
|---|---|
| Starting VPS | 2 vCPU / 4 GB (small), 4 vCPU / 8 GB (growing) |
| Caching | Page cache (exclude cart/checkout) + Redis |
| Payments | Hosted fields/redirects; never store card data |
| Backups | Frequent DB dumps, off-site, tested |
| Peak sales | Upgrade before campaigns |
Related: WordPress VPS hosting and VPS vs cloud hosting.