Best Practices for Securing Your VDS Server

1. Use Strong and Complex Passwords

Ensure your passwords are strong and unique:

• At least 12 characters long

• Include uppercase, lowercase, numbers, and special characters

• Regularly update passwords

2. Strengthen SSH Access

• Change the default SSH port (22) to a custom port.

• Use SSH Key Authentication instead of passwords.

• Disable root login in /etc/ssh/sshd_config by setting PermitRootLogin no.

3. Set Up a Firewall

A firewall allows you to control traffic flow to your server. Use UFW (Ubuntu) or firewalld (CentOS):

sudo ufw allow 22/tcp
sudo ufw allow 80/tcp
sudo ufw enable

4. Install Fail2Ban for Brute Force Protection

Fail2Ban blocks IPs that repeatedly fail to log in:

sudo apt-get install fail2ban
sudo systemctl enable fail2ban
sudo systemctl start fail2ban

5. Implement DDoS Protection

Use services like Cloudflare or AWS Shield to prevent traffic overload and attacks.

6. Regularly Update Software

Outdated software may contain vulnerabilities. Keep your system updated:

sudo apt-get update && sudo apt-get upgrade -y

7. Establish Automatic Backups

Set up daily or weekly backups to restore data in case of attacks or hardware failures.

8. Restrict Root Access

Instead of logging in as root, create a new user and assign necessary privileges:

sudo adduser new_user
sudo usermod -aG sudo new_user

9. Install Malware Scanners

Regularly scan your VDS server for malware using:

• ClamAV for open-source malware protection

sudo apt-get install clamav
sudo freshclam
sudo clamscan -r /var/www

10. Use Access Control Lists (ACL)

Limit user access to only essential files to improve security.

11. Configure File Permissions

Set proper permissions for your directories to protect sensitive data:

sudo chmod 750 /var/www
sudo chmod 600 ~/.ssh/authorized_keys

12. Monitor Logs and Use Tracking Tools

Use log monitoring tools like Logwatch, GoAccess, and Fail2Ban to track suspicious activity and unauthorized access.

Conclusion

By following these security practices, you can strengthen your VDS server’s security, prevent attacks, and ensure your data remains safe.