Services included in a fully managed dedicated server
At RSHosting.com, we have an experienced team of professional engineers to take care of your servers right from the server setup to daily proactive updates and tweaks. Our fully managed server management services include a full array of services executed by our team of professional and experienced Level3 engineers.
Hence, we take care of your server right from the point when the OS is installed which further includes server setup, software installation, security monitoring, performance tunning, service tweaks, backups, and 24x7 technical support to give you a complete peace of mind.
Our 24x7 precise monitoring system ensures all services on your server are running with the best performance.
Tasks performed with our management services :
Webserver security
* Installation of mod_security with our own custom ruleset. This module consists of many different rules.
* The ruleset that we use blocks dangerous attempts to hack the server. Add an additional rule or disabling one is possible for us whenever needed as it consists of many rules.
* Compiled PHP version 4, 5 or 6 as per the requirements of the client.
* Installation of mod_evasive to prevent DDoS Attacks.
* PHP Security (disabling few php functions which can be used for php backdoor:"exec,system,passthru,readfile,shell_exec,escapeshellarg,escapeshellcmd,proc_close, proc_open,ini_alter,dl,popen,parse_ini_file, show_source,curl_exec") (on clients request)
Security Audit
* Installation of Rootkithunter and Configuring it to update and run itself on a daily basis - It will then send you a report if anything goes wrong.
* Repair or Re-installation of corrupt binaries.
SSH Security
* Installing and compiling the latest version of OpenSSL.
* Installing and compiling the latest version of OpenSSH and Configuring it with the latest version of OpenSSL.
* Disabling Root access and enabling key based access as per the client request.
* Changing default SSH port, disabling SSH1 protocol and enabling SSH 2 protocol.
Firewall configuration
* Installing CSF/APF firewall (latest version) and Configuring the firewall to accept only incoming/outgoing
connections on ports that are needed on a cPanel system.
* Disabling port 22 (on request).
* Brute Force Detection setup and configuration with the firewall.
* Linux socket monitor setup - This will send you an alert whenever a new port is opened on the server.
Server Monitoring
* Installing System Integrity Monitor to monitor the following services
- Apache
- MySQL
- Email
- Server load
- SSH
- FTP
* The System will automatically try to fix any problems which may arise such as big log files that would automatically get recycled. If the system is not able to fix the problem itself it will send a notification to our support department.
Environmental security
* Mounting /tmp partition with noexec permissions so that no files on these partitions can be executed.
* Disabling compilers for all users but root.
* Sysctl.conf hardening to make it much harder to get attacked by syn floods.
* Open basedir protection setup.
* Installing chkrootkit and configuring it to send daily report to our support department.
Apache tweaking
* Installing Zend Optimizer.
* Installing eaccelerator for optimum performance of php on the server.
* Installing suhosin for security of php (on request).
* Tweak Apache configuration.
* Recompile Apache with commonly used Apache and PHP modules.
Securing Binaries
* Installing/updating Libsafe.
Proactive Updates
* All our managed servers come with weekly and monthly proactive security checkup and updates to ensure your server remains healthy. Proactive checkups include checking of /tmp, /dev/shm, /var/spool/mail etc for vulnerable files and folders. Checking the integrity of server binaries for any kind of backdoor hack attempt etc, is included in proactive updates.
24x7x365 precise server monitoring
All our managed servers are precisely monitoring at a 3 minute interval gap for the following services :
- Apache (on port80)
- SMTP / POP3 (on port 25 / 110 respectively)
- Mysql (port 3306)
- DNS (port 53)
- FTP (port 21)
Our 24x7 monitoring ensures that our clients have a complete peace of mind when they have their servers hosted with us.
|