Linux Hosting on LinuxHosted.com

How to Harden SSH on an Ubuntu VPS (2026 Guide)

Sun, 31 May 2026 00:00:00 +0000

The moment an Ubuntu VPS gets a public IP, automated bots start knocking on port 22. Within hours you will see thousands of failed login attempts in your auth log — scripts cycling through root, admin, ubuntu, and a dictionary of weak passwords. SSH is the front door to your server, and the default configuration leaves it wider open than it needs to be. This guide walks through hardening sshd on Ubuntu 22.04 so that the door only opens for you.

UFW Firewall Rules for a Public VPS: 2026 Setup

Sat, 30 May 2026 00:00:00 +0000

A firewall decides which network ports on your VPS the outside world can reach. Without one, every service you start — a database, a stray dev server, a debugging tool — is exposed to the entire internet the instant it binds to a public interface. Ubuntu ships with UFW (Uncomplicated Firewall), a friendly front end to the kernel's nftables backend, and configuring it well takes about five minutes. This guide sets up a sensible default-deny firewall for a public server and shows how to verify it before it ever has a chance to lock you out.

Fail2ban on Ubuntu VPS: Stop SSH Brute Force 2026

Fri, 29 May 2026 00:00:00 +0000

Hardening SSH with keys stops password attacks from succeeding, but the attempts keep coming — bots will hammer your server thousands of times a day regardless. Fail2ban turns that noise into action: it watches your log files, spots the pattern of repeated failures from a single IP, and tells the firewall to ban that address for a while. It is the automated bouncer for your VPS, and on Ubuntu 22.04 it takes about ten minutes to set up properly. This guide installs it, configures a tuned SSH jail, and verifies that bans actually fire.

Systemd Service Hardening: Sandbox a Unit (2026)

Thu, 28 May 2026 00:00:00 +0000

Most services on a Linux VPS run with far more power than they need. A web app that only has to read its own files and listen on a port often runs able to write anywhere on the filesystem, see every other process's temp files, and acquire new privileges at will. If that service is ever compromised, all of that latent power becomes the attacker's. Systemd has a deep sandboxing toolkit built directly into the service manager — no extra software, just directives in the unit file — that strips a service down to only what it actually requires. This guide hardens a unit step by step and scores the result.

Linux VPS Performance Tuning: sysctl & swap 2026

Wed, 27 May 2026 00:00:00 +0000

A small VPS — 1 or 2 GB of RAM, a couple of vCPUs — ships with kernel defaults tuned for a generic desktop or a large server, neither of which describes your box. A handful of sysctl and limit adjustments can make that same hardware noticeably more responsive under load: less needless swapping, more simultaneous connections, and headroom for the file descriptors a busy web server burns through. This guide covers the tuning that actually moves the needle on a small Linux VPS, how to apply each change so it survives a reboot, and how to confirm it took effect.