Datadog is a monitoring platform for cloud applications which automatically detects potential application and infrastructure issues as it observes trends and patterns in application metrics like error rate, request rate, and latency—and unexpected behavior. (more…)
AWS Cloudwatch is an AWS monitoring tool that will help us to monitor the cloud resources. Also, it gives a detailed report for the cloud resource usage. Amazon CloudWatch has an open application programming interface (API) support with customized reports, notifications, and alarms. In Amazon CloudWatch, there is no up-front commitment or minimum fee. It will be charged at the end of the month for what we use. Using cloudwatch, we can track the below metrics. AWS also provides access application logs and it allows to create alarms when the metrics reach near to the pre-defined hit limit. Dashboards can also be created to display graphs and statistics for both up to the minute and historical data. Here is an example of …
Monitoring our systems, networks and server’s performance and activity is one of the duller aspects of administration, and often something that is overlooked until there is a problem. Fortunately, there are many tools that can be used to monitor our system resources with differing levels of complexity and difficulty to configure. One of the simpler tools for getting the details for all the above can be simply derived from the monitoring tools called “Munin”, which is considered as one of the most flexible network resource monitoring systems available for UNIX and UNIX-like operating systems including Linux, FreeBSD, NetBSD, Solaris.
EasyApache 3 to EasyApache 4 Migration Process =============== Easy Apache version 4 introduced by cPanel version 11.52. EasyApache web-based Graphical User Interface helps to configure all the back-end activities. Easy Apache Graphic tool allows you to enable multiple PHP extensions and multi-processing modules. The new user interface allows you to change Apache handlers for the installed PHP versions. We can install a default version of PHP in the server and per-host basis.
Apache Struts 2 is an open-source framework widely used for developing Java web applications. On March 6, 2017, a critical security vulnerability identified as CVE-2017-5638 was publicly disclosed. This flaw allowed attackers to execute remote code on vulnerable servers by sending specially crafted malicious requests. The vulnerability occurs when a server processes file uploads using a Jakarta-based multipart parser. Attackers can exploit this weakness by embedding malicious commands within the Content-Type header of a file upload request. When processed by affected versions of Apache Struts 2, the server may execute these commands, leading to unauthorized access or complete system compromise. The issue specifically affects Apache Struts 2.3.x versions prior to 2.3.32 and 2.5.x versions prior to 2.5.10.1, where improper handling …
HAProxy stands for High Availability Proxy. It is a very fast and reliable solution for high availability and load balancing. HAProxy is used as TCP/HTTP Load Balancer and for proxy Solutions. The HAProxy application will share the workload with multiple servers. Steps for Installation and Configuring HAProxy =========== Step 1: Before proceeding with the installation of HAProxy in the server, we need to install the epel repository on our system depending on the operating system version using the following command.
A serious vulnerability named Dirty COW has been discovered recently which has put the Linux kernel under risk. It is said that this vulnerability was noticed nine years ago (since version 2.6.22 in 2007) and remained unnoticed throughout this time. A researcher named Phil Oester was the man behind the detection of this serious threat. According to him, the vulnerability is described as a race condition where the Linux kernel’s memory subsystem handles the copy-on-write (COW) breakage of private read-only memory mappings. In this way, the attackers gain write access to read-only memory updates and this paves the way to their increased privileges on the system.
CloudLinux is one of the widely used Operating System nowadays due to the high-level stability and advanced server security it provides, which makes it the first preference for hosting providers, especially in a shared hosting environment. LVE (Lightweight Virtual Environment) is a kernel-level technology developed by the CloudLinux team. It is lightweight and transparent. The goal of LVE is to make sure that no single website can bring down your web server. The kernel makes sure that all LVEs get a fair share of the server’s resources, and that no customer can use more than the limits set for that customer. Today we can limit CPU, Memory (virtual and physical), IO, number of processes as well as the number of …
Security researchers identified a new OpenSSL vulnerability, called DROWN( Decrypting RSA with Obsolete and Weakened Encryption ) on March 2016. This attack was focused on servers that use the more secure TLS protocol, which also supports the obsolete SSLv2.This vulnerability allows an attacker to decrypt the highly secured TLS encrypted communication if the server houses SSLv2 cipher support. DROWN was assigned the CVE-2016-0800 id by the us-nert on the march (https://www.us-cert.gov/ncas/bulletins/SB16-067 ). More than 11 million websites that use TLS were vulnerable to DROWN attack. If your website is protected by TLS and your server directly on indirectly supports the older SSLv2, you are also vulnerable and an attacker may exploit it to get important information such as user names, …
The Zend OpCache provides faster PHP execution through opcode caching and optimization. It improves PHP performance by storing precompiled script bytecode in the shared memory. Installing Zend OPCache on PHP 5.3 or 5.4 1. Login to SSH on your server 2. Type the following commands: #cd /usr/local/src #wget http://pecl.php.net/get/ZendOpcache # to get the latest (master) build do the following instead: