Relocation and monitoring
The server has been moved to an isolated non-residential room equipped for reliable operation. A fire alarm and temperature and humidity sensors with remote telemetry were installed, enabling continuous monitoring of operating conditions.
Backup power
A UPS and battery provide 6–8 hours of operation without mains power. All network equipment is connected to the backup power supply, reducing the risk of downtime during power outages.
PHP and extensions
- PHP 8.2, PHP 8.3 and PHP 8.4 have been integrated into ISPmanager.
- Enabled ionCube for protected components and bcmath for high-precision calculations.
- Provided compatibility with the Flute CMS version current at the time of this update.
DDoS filtering
- Rate limits for incoming connections.
- Automatic blocking of attacking IP addresses.
- A whitelist for trusted IP addresses.
- Exclusion of IP ranges from countries with a high frequency of attacks.
Load test results
During botnet and L4–L7 attack tests, network load with protection enabled stayed at or below 50%. Without filtering, load reached 100% and a memory leak was observed. The protection withstood targeted L7 attacks typical of botnets.
Separate network connections
Gaming connection #1 received additional DDoS protection. Web hosting uses separate connection #2 and continues operating when the gaming connection is overloaded.
Result
Key infrastructure components have been upgraded: the room and environmental monitoring, backup power, software environment and traffic filtering. Following this work, the infrastructure operates reliably and the services meet the stated SLA targets.