Friday 23 February 2018

CPanel/WHM Server Administration & Monitoring

cPanel/WHM Server Management, cPanel/WHM Support



actsupport offers a complete package for cPanel Server Management which includes cPanel server support, cPanel server management, Control Panel Installation and Setup, Server stabilization, Proactive Server Management, 24×7 cPanel Server Monitoring, cPanel Server Security, Server Optimization and Hardening through cPanel. Please feel free to ask for a Free Server Audit before you want to try us.</p align=”center”>

cPanel Server Management Plans & Pricing

One time / Immediate attention from server experts

  • Restore Crashed / Non-Responsive Services or Servers
  • Resolve Server or Service Performance Issues
  • Server / Application Hack Recovery and Hardening
  • Setup and Configure New Servers or Services
  • Upgrade Servers or Services
  • Fix Application, Service or Server Errors
  • Migrate Whole Server or Individual User Accounts
  • Repair Corrupted Database or Mail Server Data

End to End Server Support + Unlimited Customer Support

  • Server Standardization
  • Security Monitoring
  • Performance Monitoring
  • Server Health Monitoring
  • 24/7 Proactive Server Administration
  • Periodic Server Hardening
  • Performance Optimization
  • Software Upgrade
  • Server Backup & Restoration
  • Hack Analysis
  • L3 Server Support

Ideal for: Uptime Monitoring

  • Server Monitoring
  • Performance Monitoring
  • Server Health Monitoring
  • Service & Server Reboot
  • Issue Escalation

Cost Effective Multi-Server Support From Server Experts

  • Pay Per Ticket
  • Support for Unlimited Servers
  • Unlimited Customer Account Support
  • 24/7 Support Coverage
  • White Label Help Desk Support

Application Support

Actsupport offers application management services to help clients maintain, operate and improve business applications. We have worked with 100 different organizations spanning across 20 different industries to deliver high-performance results through application management and outsourced support solutions.

How actsupport provides a solution for Application Support and Management?





We follow an iterative approach where we develop an understanding of how technology can be used to facilitate your business applications and ensure that they are operated seamlessly to provide a secure and high-performance platform, thereby reducing maintenance and support cost for your applications. Our experts work as a well-balanced team covering the Architecture Design, Incident Investigation, Troubleshooting and Root Cause Analysis (RCA).

The processes defined for application management and support, strictly validate SLGs (Service Level Goals) for each metric which usually comes from SLA (Service Level Agreement), in order to provide high-quality, round-the-clock maintenance and support services. Our team expertise spans multiple operating systems, databases, languages, software, and enterprise applications. The responsible Account / Service Manager conducts regular service reviews with you and thereby ensures loyalty to the outlined SLA.

Our engineers work with application vendors directly for development escalations, bug reporting, and testing workarounds. The team also generates knowledge repository of issues/resolution for future references.

Git Errors and Fixes





Git Clone Over Http Returns 500 errors
Summary:
When you clone, push and pull changes between Gitlab repositories and your computer there are two network protocols, one is HTTPS and the other one is SSH.. If Gitlab uses Apache instead of built-in Nginx server and if you are able to clone over SSH but not over http, have to check Apache related configurations. Here we are going to see some solutions to fix 500 errors.
Expected behavior:
Cloned repo.
Actual behavior:
Error 500.
Solution:
HTTP status code 500 usually indicates that there is an issue with the remote end and not a problem on your client side.
  • ModSecurity rules may block, ModSecurity helps to block potential attack attempts from malicious users, but sometimes it can also block legitimate requests. If ModSecurity rules block Cloning process, find out the Rule ID from Apache error logs and whitelist it (or) disable Modsecurity rules for the certain domain to get a successful result over the http.
  • Check server memory. If the server is running out of Memory, try to run the program after increased Memory.
  • Increase the Git buffer size to the largest individual file size of your repo:

  • Git clone over SSH returns fatal error
    Summary:
    If we choose Gitlab installation from source, Gitlab will be available under /home/git and we create an username called “git”. On cloning, the git creates a directory, fails to authenticate the user then it keeps prompting for the password.
  • Solution:
    Check the Gitlab directory permission and ownership, files and folders should be read and writable by the “git” user.

  • Syntax error in Gitlab
    Summary:
    If Gitlab installed from source, we have to use ‘bundle exec rake’ command to execute some tasks. Why ‘bundle exec’? running any executable without ‘bundle exec’ will have Rubygems fetching the latest version of the gem installed in your system. By adding the ‘bundle exec’ prefix instead will have the executable running in the context of your Gemfile.lock, which means tasks will be run using the version defined in the Gem file.
  • Expected behavior:
    The command should run without any errors.
  • Solution:
    From the error message, the Gemfile file syntax is based on Ruby 1.8.x which is an older version of Ruby and no longer supported. Gitlab gems may be using the system Ruby that needs to be removed so make sure the bundle executable doesn’t have system ruby. The command will give you the version details of Ruby.

Getting an A+ rating on the Qualys SSL Test on all cPanel Domains






Getting an A+ rating on the Qualys SSL Test on all cPanel Domains


Security is a basic requirement of the server. We will use SSLLabs, a testing project of Qualys, a company that provides strategic security solutions. In this post, we will see how to use their A+ indicator which is the industry high standard in SSL security and try to meet its requirements. The SSLLabs checker covers two substantial parts of the investigation: Authentication, which reflects details about installed SSL certificate and additional certificates provided by a server, and Configuration, which shows server settings for secure negotiation used in client-server interaction.
This blog will cover the steps to get your A+ rating on Qualys without affecting the web-server configuration.
STEP 1 :
Go to WHM >> Home -> Service Configuration -> Apache Configuration -> Global Configuration
Change the default cipher suite to the following by selecting the custom entry for cipher suits:
  • SSL/TLS protocols are OK to keep set as default.
  • Server Tokens are also set to “Product Only” to avoid leaking information about the server OS.
  • Turn Trace Enable off per PCI recommendations and standards

  • Click Save. Apache will now favor stronger protocols before others.
  • Now time to set forward secrecy with a long date in advance.
STEP 2 :
Go to WHM >> Home -> Service Configuration -> Apache Configuration -> Include Editor
Then jump to Pre Main Include
Alternatively, we can manually add this on the below configuration path,
/usr/local/apache/conf/includes/pre_main_global.conf
After saving the the file restart the service by using the below command,
This will rebuild the Apache configuration as would be done from WHM and restart Apache as well.
STEP 3 :
Now test your website at Qualys SSL Labs to see the score you get, if you’ve followed instructions properly, you should have an A+
Now A+ SSL settings applied on all domains on the cPanel server that have certificates installed. By using the global pre-main includes and modifying the server wide ciphers for Apache, every domain using SSL will enjoy the same security