HAProxy stands for High Availability Proxy. It is a very fast and reliable solution for high availability and load balancing. HAProxy is used as TCP/HTTP Load Balancer and for proxy Solutions. The HAProxy application will share the workload with multiple servers. Steps for Installation and Configuring HAProxy =========== Step 1: Before proceeding with the installation of HAProxy in the server, we need to install the epel repository on our system depending on the operating system version using the following command.
A serious vulnerability named Dirty COW has been discovered recently which has put the Linux kernel under risk. It is said that this vulnerability was noticed nine years ago (since version 2.6.22 in 2007) and remained unnoticed throughout this time. A researcher named Phil Oester was the man behind the detection of this serious threat. According to him, the vulnerability is described as a race condition where the Linux kernel’s memory subsystem handles the copy-on-write (COW) breakage of private read-only memory mappings. In this way, the attackers gain write access to read-only memory updates and this paves the way to their increased privileges on the system.
CloudLinux is one of the widely used Operating System nowadays due to the high-level stability and advanced server security it provides, which makes it the first preference for hosting providers, especially in a shared hosting environment. LVE (Lightweight Virtual Environment) is a kernel-level technology developed by the CloudLinux team. It is lightweight and transparent. The goal of LVE is to make sure that no single website can bring down your web server. The kernel makes sure that all LVEs get a fair share of the server’s resources, and that no customer can use more than the limits set for that customer. Today we can limit CPU, Memory (virtual and physical), IO, number of processes as well as the number of …
Security researchers identified a new OpenSSL vulnerability, called DROWN( Decrypting RSA with Obsolete and Weakened Encryption ) on March 2016. This attack was focused on servers that use the more secure TLS protocol, which also supports the obsolete SSLv2.This vulnerability allows an attacker to decrypt the highly secured TLS encrypted communication if the server houses SSLv2 cipher support. DROWN was assigned the CVE-2016-0800 id by the us-nert on the march (https://www.us-cert.gov/ncas/bulletins/SB16-067 ). More than 11 million websites that use TLS were vulnerable to DROWN attack. If your website is protected by TLS and your server directly on indirectly supports the older SSLv2, you are also vulnerable and an attacker may exploit it to get important information such as user names, …
The Zend OpCache provides faster PHP execution through opcode caching and optimization. It improves PHP performance by storing precompiled script bytecode in the shared memory. Installing Zend OPCache on PHP 5.3 or 5.4 1. Login to SSH on your server 2. Type the following commands: #cd /usr/local/src #wget http://pecl.php.net/get/ZendOpcache # to get the latest (master) build do the following instead:
Icinga is a fork of Nagios monitoring system. There are lots of changes and upgrades compared to Nagios, especially in version 2. The main visible difference is UI which is built on ext js. Other significant differences are in hosts and services definitions. Icinga2 designed to monitor large complex environments. Pre-requisites We need to make sure to install a LAMP stack and epel repository on the CentOS7 server for other dependency application which will support icinga2 . Icinga2 will collect the service information based on the monitoring plugins, so we need to install nagios plugins. Also, we should install IDO modules for MySQL which will use for Icinga2 Web interface and other web interfaces. Then set up MySQL database (create …
Nowadays, brute force attacks on servers/websites are frequent. A brute force attack is generally a password-guessing technique. It is a type of attack that tries every possible combination of characters or data in order to find the decrypted message. Brute force guarantees finding the key – it tries every possible combination and does not rely on any potentially incomplete dictionaries or lists of possible keys. cPHulk Brute Force Protection is an inbuilt protection used in WHM to prevent brute force attacks. cPHulk Brute Force Protection will detect and block continuous failed login attempts from IP addresses. cPHulk is a brute force protection system developed by the cPanel team and is exclusive to cPanel / WHM control panels. It has been integrated …
Pyxsoft antimalware Plugin for cPanel/WHM protects your server from attacker scripts such as c99shell, r57shell, ANIShell, and hundreds more. It is a real-time Anti Malware for cPanel/WHM. Attackers can take control of your servers or can damage your customer’s data by uploading one of these scripts. Pyxsoft antimalware plugin works to protects your server in two ways: Protecting from the six server’s entrance SQL Injection Legitimate Access (SSH, cPanel etc) Web Forms FTP Brute Force Attacks Installed Trojans or shells (more…)
As we are aware, usually installing SSL Certificate requires Dedicated IP . The cost of this address is typically being passed down to the end user. Also the IPv4 address will be filled completely if every domain require a dedicated IP. So administrators decided to use multiple SSL installation on a single IP. Thus SNI (Server Name Identification) is established. >> What is SNI : —————— Server Name Indication (SNI) is an extension to the TLS protocol that indicates what hostname the client is attempting to connect. SNI is an extension of the TLS protocol, which allows browsers and servers to map multiple SSL-secured domain names to one IP address and gate, without this making any difference to the site …
The SSLv3 POODLE vulnerability, disclosed on October 14, 2014, is a protocol-level security flaw affecting the SSL 3.0 encryption standard. POODLE, which stands for Padding Oracle On Downgraded Legacy Encryption, exploits weaknesses in how SSLv3 handles padding during encryption. This vulnerability arises when plaintext is converted into ciphertext. To match cryptographic requirements, extra padding is added, and during decryption, this padding can leak sensitive information. Attackers can take advantage of this flaw through a man-in-the-middle (MITM) attack, gradually decrypting secure communications. How to Check if Your WHM/cPanel Server is Vulnerable To verify whether SSLv3 is enabled on your server, log in via SSH as the root user and run the following command: Example: A typical secure response will show: Advanced …