webpot@dev:~$ 

Stable foundations

A securely built Ubuntu VPS environment, with a considered architecture and proven technologies. We do not experiment on a live system; we use what is proven to work.

Security & monitoring

A firewall, intrusion protection, e-mail authentication and continuous monitoring. We do not deal with problems after the fact, we rule them out in advance.

Tuned for performance

Fast web serving, optimised server settings and scalable solutions. The goal is not merely that it runs, but that it is fast and holds up under load.

Ubuntu VPS server operation  at a high standard.

Looking for a secure and fast server?  Leave it to the WebPot DEV team.

By the way, this website runs on a VPS too. How do you like the speed?

Ubuntu VPS server operation at a high level

We do not just set the server up, we take responsibility for it for years. Build, security hardening, backups, monitoring and continuous supervision, all in one pair of hands.

VPS server operation does not begin when someone starts a virtual machine. It begins when someone takes responsibility for that machine still working the same way six months later, after a security update or a traffic peak. That is exactly the difference between a managed VPS and plain server rental: with one you get an empty Ubuntu installation and a root password, with the other a built, tuned, protected and supervised environment, with someone to call about it.

WebPot DEV runs its own live systems, this website among them, on the very same infrastructure. We do not know the pitfalls of Ubuntu server operation from theory: badly sized swap, a PHP-FPM pool that blows up, a cron that quietly stops, an expiring certificate, or a backup nobody has checked for weeks. We rule these out in advance, because we have met every one of them.

Who is a dedicated VPS for? For anyone whose website or webshop generates revenue, so downtime costs money. For anyone whose shared hosting resource limits are already causing slowdowns. For anyone who needs a custom software environment: their own PHP version, a Node.js service, a Redis or Varnish layer, server-side measurement. And for anyone who does not want to employ a system administrator but would like to know that someone is watching the server.

What does VPS operation cover with us?

Sizing and architecture

We work out the vCPU, memory and NVMe storage needed from the expected traffic, the database size and the services running. Over-sizing is waste, under-sizing is a time bomb; we avoid both.

Installation and hardening

An Ubuntu LTS base, password SSH switched off in favour of key-based login, non-standard ports, a UFW firewall, Fail2Ban, and a minimal set of services. The machine is protected from day one.

Web server and cache

Nginx or Apache in front of PHP-FPM, with a Varnish full page cache where needed, a Redis or Valkey object cache, and HTTP/2 and HTTP/3 delivery.

Database tuning

MySQL or MariaDB parameters set to the real memory: buffer pool, connection count, slow query log. Most complaints of a slow website are settled here.

Certificates and e-mail

Let's Encrypt with automatic renewal, plus SPF, DKIM and DMARC set up so that system messages and the newsletter do not land in the spam folder.

Backup and restore

Automatic, versioned backups to separate storage, with a retention period. A backup is only a backup once the restore has been tried too, and we do that regularly.

Monitoring and alerting

Watching availability, load, memory, disk, certificate expiry and service status. We hear about a fault first, not from a phone call by the client.

Updates and maintenance

Keeping up with security package updates, raising the kernel and PHP versions in a planned window, checked in a staging environment beforehand.

Server migration

Moving an existing site or webshop from another provider, with minimal downtime, a DNS switch and the old environment kept running in parallel.

What systems do we build VPS environments for?

The same server is not right for everything. A Magento 2 webshop calls for a different resource profile than a WordPress site or a Laravel application, so we always tailor the environment to the system it runs:

  • Magento 2 and Adobe Commerce: Varnish, Redis or Valkey, OpenSearch, cron supervision, scheduled indexing. In detail on the Magento 2 webshop page.
  • WordPress and WooCommerce: object cache, page cache, image optimisation, plugin hygiene and security hardening.
  • PrestaShop, OpenCart, custom PHP systems: a version-specific PHP environment, separated pools, an ordered permission scheme.
  • Laravel, Node.js, Python services: run as systemd services, behind a reverse proxy, with automatic restart.
  • Server-side measurement (sGTM): a server-side Google Tag Manager and Measurement Protocol run in your own container, with measurement that is cleaner from a privacy point of view too.
  • Internal business applications: admin interfaces locked behind a VPN, IP restrictions, a separate database instance.

The technology layers we work with

Proven components with long-term support and a large community behind them. We do not experiment on a live system; we use what is proven to work.

Operating system

The Ubuntu Server LTS release, which receives five years of standard security support. LTS means the system gets fixes for years without forcing a full version change every six months.

Ubuntu Server LTSsystemdunattended-upgradesKVM virtualisation

Web serving

Nginx as a reverse proxy and static server, with separated PHP-FPM pools behind it. Modern protocols and compression, so that response time is not lost on the server.

NginxPHP-FPM 8.xHTTP/2 and HTTP/3Brotli, GzipApache (on request)

Caching

A full page cache in front of the web server, object and session caches in memory, plus a PHP opcode cache. A well configured cache layer is worth more than twice the vCPU.

VarnishRedis / ValkeyOPcacheCloudflare CDN

Database and search

MySQL or MariaDB as the system requires, with parameters tuned to the real memory and slow query logging. For a webshop, a separate search engine.

MySQL / MariaDBOpenSearchslow query logPostgreSQL (on request)

Security

A firewall that denies by default, automatic IP banning after repeated failed logins, key-based SSH, separation of privileges and regular vulnerability checks. Security is not an add-on but part of the build itself.

UFW firewallFail2Bankey-based SSH loginLet's Encrypt TLSModSecurity / WAF

E-mail

Authenticated sending, so that order confirmations and the newsletter do not end up in the spam folder. Where needed, an external sending provider connected as a relay.

SPF, DKIM, DMARCPostfixSMTP relayspam filtering

Backup and recovery

Daily automatic, versioned backups of the file system and the database, to separate storage. A backup never sits on the same machine it is backing up.

versioned file backupdatabase dumpexternal storagetest restore

Monitoring

Continuous availability and resource monitoring, with threshold-based alerts. The goal is to know about a problem before anyone has to intervene.

uptime monitoringresource metricscertificate expirylog analysis

Operational hygiene

Version-controlled configuration, documented changes, a staging environment for the risky steps and planned maintenance windows. We do not improvise on a live server.

staging environmentconfiguration version controlchange logmaintenance window

What runs on a WebPot VPS?

The layers built around the server and how they connect. Click any node: we show what it does, why it matters and what we configure on it.

UBUNTU 24.04 LTS Managed VPS 4 vCPU · 16 GB RAM · NVMe 128 days 04:22:31

How do we commission a VPS server?

Six stages from the survey to continuous supervision. The times given apply to commissioning an average sized website or webshop.

1

Survey and sizing

1–3 days

We go through what will run on the server: which system, how large a database, how much traffic, what the peak periods look like, what additional services are needed. From that come the vCPU, memory and storage requirements, and whether one machine is enough or the web and the database are better separated. The provider and the geographic location of the server are decided here too. For a Hungarian audience a domestic data centre gives a measurable advantage in response time.

2

Base install and security hardening

1–2 days

An Ubuntu LTS install, key-based SSH login with password login switched off, a firewall that denies by default, Fail2Ban, separate system users and a minimal set of services. The machine is in a protected state before the first public DNS record exists, because automated scanning bots find a fresh, open Ubuntu VPS within hours.

3

Service layers and tuning

1–4 days

Installing the web server, the PHP-FPM pools, the database, the cache layer and, where needed, a search engine, then setting the parameters to the actual memory and core count. Default configurations are usually tailored to a developer machine rather than live load, and the difference often shows up as several times the response time.

4

Migration and switchover

1–5 days

Moving the existing content, database and mail, setting up the certificate and the redirects, then testing the new environment before the live DNS switch. We lower the DNS TTL in advance, so the switchover is measured in minutes rather than hours. We keep the old environment running in parallel for a while, so there is somewhere to step back to.

5

Backup, monitoring, documentation

1 day

Setting up automatic backups to external storage with a retention policy, a test restore, uptime and resource monitoring with alerts, and documenting the environment in writing. The client is told what runs where and how anything can be restored. That is not a trade secret but basic professional decency.

6

Continuous supervision

ongoing

Keeping up with security updates, version upgrades in a planned window, capacity monitoring and a periodic status report. A server stays stable for years when someone looks at it even while nothing is wrong. This is the stage most places leave out.

Shared hosting, VPS or a dedicated server?

The three options are not better and worse versions of each other; they suit different situations. Here is the difference, honestly.

Aspect Shared hosting VPS server Dedicated server
ResourcesShared with others, cappedGuaranteed vCPU and memoryA whole physical machine
Neighbour effectA peak on another site slows you down tooIsolated, predictableNo neighbours
Software environmentWhatever the provider allowsFreely chosen, with root accessEntirely free
Varnish, Redis, custom servicesUsually not possibleYesYes
Monthly hardware costA few euros a monthFrom €10 upwardsFrom €100 upwards
Operational burdenOn the providerOn the owner, or on usOn the owner
ScalingChanging package, often with a migrationResources raised within minutesHardware swap, a longer switchover
Typical userA brochure site, a blogA webshop, a business application, several projectsHeavy load, compliance requirements

When is it worth moving to a VPS?

The question is not whether the company is big enough yet, but whether any of the signs below have appeared. If they have, the hosting is no longer serving you without a bottleneck:

The site slows noticeably at peak times even though the content has not changed. Usually the problem is not with the website but with the other clients packed alongside it.
The hosting reports a CPU or memory limit, or even stops your processes. That is not a fault but the limit of the package. And the limit will not widen.
You need to run a service the hosting does not allow: Varnish, Redis, a search engine, a Node.js process, a server-side measurement container or your own cron schedule.
The admin interface of the webshop is slower than the storefront. That is a classic sign that the database is not getting enough memory.
Several projects run side by side and you would like to manage them uniformly, by your own rules, in one place, with shared backups and supervision.
Order confirmation e-mails end up in spam and the hosting does not let you set up your own sending authentication.

And when is it not worth it?

If it is a static brochure site with a few hundred visitors a day and no special software needs, a VPS is needlessly complicated and more expensive than good hosting. In that case we say so, because over-sizing is just as much a professional mistake as under-sizing. A VPS pays off when there is something to protect: revenue, measurable traffic or a business process.

Service levels, response times and backups

Saying we look after your server means nothing on its own. So here is exactly what we undertake and what we do not.

What we undertake Supervision Operations Business continuity
Availability monitoringevery 5 minutesevery minuteevery minute, from several locations
Alert channele-maile-mail and SMSe-mail, SMS and a phone call
Response time in office hourswithin 1 working daywithin 4 working hourswithin 1 working hour
Response time outside office hoursnot undertakenthe next working morningon-call cover at weekends too
Security package updatesmonthlyweeklyweekly, immediately when critical
Backup frequencydailydaily, database more oftendaily full + intraday database
Backup retention7 days30 days30 days + a monthly archived copy
Test restoreyearlyevery six monthsquarterly
Status reportquarterlymonthlymonthly + a quarterly technical audit
Performance reviewevery six monthsquarterly
Staging environmenton requestpermanent
Dedicated contactyes

The table shows typical package contents. The actual commitments are always set out in a written agreement, matched to how critical the system is.

Backup policy: what we always settle

In most places the backup works right up until it is needed. So for every client there is a concrete answer to four questions, before going live:

  • How much data are we willing to lose in the worst case? That is the RPO: with one backup a day, at worst a day of work is lost. For a webshop that is rarely acceptable, so more frequent database backups are needed there.
  • How long does the system take to come back? That is the RTO. Restoring a 200 GB dataset takes hours, and it is better to know that in advance rather than during an outage.
  • Where does the backup sit? If it is on the same machine or in the same account, then a compromised account or a provider failure takes the backup with it. With us the backup always goes to separate storage.
  • Who tried it last? An untested backup is only hope. We regularly pull a copy back into a separate environment and check that it starts up.

What we tell you honestly, in advance

A dedicated VPS is not magic. A virtual server runs on shared physical hardware, so a failure in the data centre of the provider affects us too; real geographic redundancy only comes from a multi-machine, higher cost architecture. A badly written plugin or a query stuck in an infinite loop brings even the best tuned server to its knees, so the quality of the operation and of the development count together. And if the system is fundamentally under-sized, that has to be solved with a bigger package rather than with configuration; we say that too, instead of spending weeks tuning the impossible.

Try it: what a well maintained server looks like

Click a command, or type it into the prompt yourself and the terminal will type it out. The outputs are typical values from a real Ubuntu VPS we operate, and under every answer we explain what it means. Start with the help command.

webpot@vps-01: ~ — ssh (key-based login)
webpot@vps-01:~$

A demonstration terminal: no real command runs, the output is pre-recorded, and the numbers are the real magnitudes of a tuned WebPot VPS.

How much does a managed VPS server cost?

The total is made up of three items, and it is worth looking at them separately. The first is the VPS rental fee you pay the provider: that is the price of the hardware and starts at €10 a month. The second is the one-off commissioning, when a bare Ubuntu install becomes a working, protected and tuned environment. The third is the monthly fee for ongoing operation, which covers supervision, updates, backups and availability.

Experience says the most expensive option is always the operation that never happened: restoring a compromised, outdated server with no backups costs more than years of supervision fees. And lost orders and lost search positions cannot be invoiced back to anyone.

One-off commissioning

Basic commissioning
€200 – 400
net, one-off
2 – 4 days
An Ubuntu LTS base, hardening, Nginx and PHP-FPM, the database, a certificate, backups and monitoring configured. For websites and smaller systems.
Tuned for webshops
€400 – 1,200
net, one-off
4 – 10 days
Everything in the basic package, plus Varnish, Redis or Valkey, a search engine, cron supervision and performance tuning for Magento 2 or a larger WooCommerce.
Server migration
€300 – 1,000
net, one-off
3 – 10 days
Moving an existing site or webshop from another provider, with mail and redirects, minimal downtime and a rollback plan.
Complex architecture
Custom quote
by agreement
an agreed schedule
Separated web and database layers, several machines, load balancing, internal services closed behind a VPN, a server-side measurement environment.

Monthly operation packages

Supervision
€50 – 120
net / month
Availability monitoring, monthly security updates, daily backups with 7 day retention, a quarterly status report.
Operations
€120 – 300
net / month
Everything in Supervision, plus weekly updates, a 4 working hour response time, 30 day backup retention and a performance review every six months.
Business continuity
€300 – 800
net / month
Everything in Operations, plus a 1 working hour response time, weekend on-call cover, a quarterly technical audit and a dedicated contact.
Custom
By agreement
monthly arrangement
Several servers, higher availability, operation shared with a development team, bespoke compliance requirements.

What does the price depend on?

The same sentence, we need a VPS, can mean a machine costing €10 a month or a serious piece of infrastructure. These are what make the difference:

  • What runs on the server: there is an order of magnitude between a brochure site and a webshop with ten thousand products, both in resources and in supervision needs.
  • How many services have to be held together: every further layer (cache, search, measurement environment, mail) means separate configuration and separate monitoring.
  • How much downtime the business can take: a faster response time and weekend on-call cover mean availability, and that has a price.
  • What the backup requirement is: longer retention and more frequent database backups turn into storage costs.
  • What state we start from: mapping out an inherited, undocumented server is a phase of its own, sometimes more work than a clean install.
  • Whether several environments are needed: a permanent staging and a development instance need a separate machine or separate resources.

The ranges above are net and indicative; they do not constitute an offer. The VPS rental fee is separate from them. Every environment is priced after an individual survey and agreement.

VPS hosting is no longer a privilege


A dedicated VPS server is available from €10, where the resources are used by you alone.


No sharing with other clients, no unpredictable slowdowns; stable performance, fast response times and reliable operation instead. Ideal for websites, webshops and business applications where speed and control genuinely matter.

The service comes with a one-off commissioning fee, during which we optimise the server for speed and security (system tuning, protection, core services).
Thanks to that the VPS provides a fast, stable and dependable environment from the very first minute.

Frequently asked questions about VPS servers

The questions that come up most often, without the marketing copy, answered the way we would answer them in person.

What is a VPS server and why is it called virtual?

A VPS (Virtual Private Server) is an isolated virtual machine created inside a physical server, with its own operating system, its own file system and guaranteed resources. It behaves as if it were your own server, with root access and software you can install freely, but the physical hardware is shared by several tenants. Modern virtualisation (typically KVM) guarantees that neighbouring instances cannot see each other data or take each other resources.

How much does a VPS server cost in Hungary?

The VPS rental fee starts at around €10 a month for a smaller machine with one or two vCPUs, and grows in proportion to its size. That, however, is only the price of the hardware. On top of it come the one-off commissioning, when a bare install becomes a protected, tuned environment, and the monthly fee for ongoing operation, if you do not want to supervise it yourself. The specific ranges are set out in the pricing section.

What is the difference between a managed and an unmanaged VPS?

With an unmanaged VPS the provider gives you the virtual machine and the network; everything else is your responsibility: installation, security, updates, backups, troubleshooting. With a managed VPS an operator takes that on. The difference shows when something goes wrong: with an unmanaged machine the provider will at most tell you that the virtual machine is running. Why the website is not is none of their business.

Why use Ubuntu, and what does LTS mean?

Ubuntu Server is the most widely used Linux distribution for web serving, which brings two practical advantages: almost every piece of software has an official package and documentation for it, and whatever fault we run into, chances are someone has hit it before. LTS (Long Term Support) releases get five years of standard security support, so the system stays updatable for years without forcing a full version change every six months.

Do I need to employ a system administrator if I use a VPS?

Not necessarily; that is exactly why managed operation exists. Supervising an average web environment does not fill a full-time position, but it does require expertise. The monthly operation fee is a fraction of the cost of an employee, and in exchange the knowledge and the availability are continuous. If you have an in-house IT person we can still work together – with many clients we provide server-level support alongside the internal team.

How long does it take to commission a VPS?

An environment for an average website comes together in 2–4 working days, from the survey to going live. For a webshop, where a cache layer, a search engine and performance tuning are also needed, it is 4–10 working days. The time for a migration depends mainly on the volume of data and the state of the old environment, because mapping out an undocumented server that has grown together over years sometimes takes longer than the move itself.

Can my existing website be moved? How much downtime does it involve?

Yes, and planned properly the downtime is measured in minutes rather than hours. The method: we build and test the new environment in advance, lower the DNS time to live (TTL) the day before, then switch over and copy the fresh data during a low traffic window. We keep the old server running in parallel for days afterwards, so there is somewhere to step back to.

How big a VPS does a webshop need?

That depends on the system, the size of the catalogue and the traffic, not on a general rule. A WooCommerce shop with a few hundred products usually runs well on a few vCPUs and a couple of gigabytes of memory, while a Magento 2 system needs serious memory for indexing and the search engine alone. We always start sizing by calculating from real load data, and we prefer a package that can scale over one that is over-sized from the start.

Is the backup from the provider not enough?

On its own, rarely. A provider snapshot is taken of the whole machine, is often stored in the same infrastructure, and is kept only for a short time. If a single table or file has to be restored, a snapshot is too blunt a tool; and if the provider account is compromised, the snapshot goes with it. That is why in every case we also make versioned backups to separate, independent storage.

How secure is a VPS?

Exactly as secure as it is looked after. Automated password guessing starts against a fresh, exposed Ubuntu VPS running on defaults within hours. That is why commissioning includes key-based SSH login, disabling password login, a firewall that denies by default, automatic banning of repeated attempts, and minimising the set of running services. Most compromised servers are not the victims of an elaborate attack but of an update that never happened.

What happens if the server is compromised after all?

In that case we do not clean up an infected system, because after a compromise it can never be stated with certainty that every back door is gone. The correct procedure is: isolate the server, identify the route of the intrusion from the logs, then build a clean environment and restore the data under control, closing the exploited gap along the way. That is what makes a working backup system worth so much.

Where should the server be located geographically?

If the overwhelming majority of visitors are Hungarian, a domestic or central European data centre makes sense: the shorter network path gives a measurably better response time, which shows up in the Core Web Vitals too. For an international audience the difference can be evened out with a CDN. From a privacy point of view a data centre inside the European Union is the easiest choice to defend.

Is a VPS really faster than good hosting?

Not automatically. A VPS running on defaults can be slower than well optimised hosting. The advantage of a VPS is not raw speed but control: you decide what cache layer runs, how much memory the database gets, which PHP settings apply. Speed comes out of that control, when someone uses it with expertise.

Do I need a cPanel or Plesk interface?

It is not compulsory, and if we run the operation it is usually unnecessary: control panels mean a licence fee, more resource use and another attack surface. If you do need an interface of your own, for example to manage hosting for several clients, one can be installed, and there are free alternatives too. We settle this at the survey.

Can several websites run on one VPS?

Yes, and it is often the most economical solution. The key is isolation: every site gets its own system user, its own PHP-FPM pool and its own database access, so a security problem on one site does not spread to the others. It is worth making sure, though, that a project which would steal resources at peak times does not end up next to a high traffic webshop.

How can it be scaled later?

In two directions. Vertically: more vCPU and memory can be requested from the provider, which usually involves a short restart. Horizontally: the web layer and the database can be split onto separate machines, a load balancer can be put in front, and static content can be moved to a CDN. For most Hungarian webshops the first route is enough for a long time; the second comes when the traffic really demands it.

Do I get root access to my own server?

Yes. The server is your property or your subscription, so full access comes with it, as does written documentation of the environment. Our only request is that while we run it together, manual configuration changes are agreed with us, because an undocumented change is the most common reason a previously stable system suddenly breaks on its own.

What happens if I cancel the operation contract?

There is no technical captivity. The server, the domain, the backups and the documentation stay yours, and we hand the credentials over to the next operator with a handover record. We do not use closed solutions only we understand: the environment is standard Ubuntu with standard services, so any professional can take it on.

What server is needed for server-side measurement (server-side GA4)?

The server-side Google Tag Manager runs in its own container and uses resources in proportion to traffic; for small to medium traffic a dedicated VPS is more than enough, with its own subdomain and certificate. The advantage is that the measurement does not depend on an external script, the advertising data is more accurate, and what leaves the system is easier to control from a privacy point of view.

Do you use this in production yourselves, or only recommend it?

We use it. The systems of WebPot DEV, including this website and the webshops we build, run in Ubuntu VPS environments built on exactly these principles. What did not work out for us, we do not recommend to a client either.

Is Cloudflare or a CDN needed alongside the VPS?

It is not compulsory, but in many cases it is worth it. Even the free tier of Cloudflare provides DDoS protection, bot filtering and a global cache for static content, which gives visitors abroad a good response time from a Hungarian VPS. When configuring it, care is needed so the cache layers do not conflict. On request we handle the setup and the fine tuning too.

Can e-mail (a mail server) run on the VPS too?

Technically yes, but running incoming and outgoing mail is one of the most delicate server tasks: deliverability depends on IP reputation and on precise SPF, DKIM and DMARC settings. We set up the transactional mail of the website (order confirmations, forms) properly from the VPS, but for full company e-mail we often recommend a dedicated mail service. We make that decision together at the survey.

Is there a test or staging environment?

Yes; on request we set up a separate staging environment alongside the live one, on the same VPS or on a separate machine. Updates, new development work and larger configuration changes run here first and only go live after review. For a webshop this is the basis of safe operation, not a luxury.

What availability (SLA) do you undertake?

Every server we operate is monitored around the clock with automatic alerts, so we usually know about a problem before the visitors do. In an outage we act as a priority; the response time undertaken differs by package and is set out in writing. For business-critical systems we agree a bespoke SLA.

Server operation glossary

The technical terms that come up most often, explained briefly, so that a quote or a conversation with an operator does not stay incomprehensible.

VPS

Virtual Private Server: an isolated virtual machine created inside a physical server, with its own operating system and guaranteed resources.

KVM

The virtualisation technology built into Linux. It gives strong isolation between instances, which is why a KVM-based VPS is worth choosing over older, more weakly separated solutions.

vCPU

A processor core allocated to the virtual machine. It matters whether the capacity is guaranteed or merely shared; the difference shows at peak times.

LTS

Long Term Support: an Ubuntu release supported for the long run, with five years of standard security fixes. A live server always calls for LTS, never an interim release.

Hardening

Security tightening: switching off unnecessary services, narrowing permissions, restricting the ways in. It is part of the installation, not an afterthought.

SSH key

Login with a cryptographic key pair instead of a password. It cannot be guessed or brute forced, which is why we switch password SSH login off.

Firewall (UFW)

It only lets in the ports that are genuinely needed. Everything is denied by default and only the necessary services get an exception.

Fail2Ban

Watching the logs, it automatically bans IP addresses that repeatedly fail to log in. That is what puts an end to the bot attacks flooding the logs.

Reverse proxy

A server placed between the visitor and the application (typically Nginx) that handles encryption, compression and traffic distribution.

Varnish

A full page cache in front of the web server. Most visitors get a finished, stored page, so PHP and the database are never troubled.

Redis and Valkey

In-memory caches for sessions and object caching. Valkey is the open-source branch that carries Redis on.

PHP-FPM pool

An isolated group of PHP processes. A separate pool per website means that one site being overloaded or compromised does not take the others with it.

OPcache

It keeps the precompiled PHP code in memory, so the source does not have to be parsed again on every request. Free speed, when it is sized properly.

Cron

The engine of scheduled background tasks: indexing, sending e-mail, generating feeds, backups. If cron does not run, the system appears to work while a great deal quietly fails to happen.

systemd

The service manager of Ubuntu. It starts and keeps background processes alive, and restarts them if they stop unexpectedly.

RPO

Recovery Point Objective: how much data we are willing to lose in the worst case. With one backup a day that is at most a day of work.

RTO

Recovery Time Objective: how long the system takes to come back after a serious failure. With a lot of data that is measured in hours, and it is worth knowing in advance.

Snapshot

A point-in-time image of the whole virtual machine. Good for a quick rollback, but no substitute for versioned backups on separate storage.

SPF, DKIM, DMARC

Three DNS-based e-mail authentication standards. Together they make sure that mail sent in your name counts as genuine and does not end up in spam.

TTL

The lifetime of a DNS record. Lowered before a server migration, the switchover goes through in minutes rather than hours.

Uptime

The proportion of time a service is available. 99.9 percent means about 43 minutes of outage a month; it is worth thinking in numbers rather than adjectives.

Load average

The indicator of system load. On its own it says nothing; it makes sense relative to the core count, and that is when it becomes clear whether capacity is tight.

Staging

A copy of the live system where updates and development work can be tried out first. Whoever tests directly in production is testing with their customers.

WAF

A web application firewall that filters incoming requests for known attack patterns. Good additional protection, but no replacement for updates.

Last updated: · WebPot DEV

#VPS server # VPS operation # managed VPS # Ubuntu server # Linux server management # server migration # Magento VPS # server security