Product Improvements: Flexible
Cloudways values its customers and their feedback! You can now give us your feedback on how we can improve Cloudways services, solution and products by pitching in your ideas!
94 results found
-
SSH/Platform Login Alerts
As an agency hosting a magnitude of customers through Cloudways we would like to see the ability to get Cloudways Bot alerts and email alerts for the following:
- Cloudways Login
- SSH Login (IP/Location etc)
- SFTP Login
- Changes to application/server configiration
1 vote -
Hide origin IP option rather than relynon cloudflare
Don't rely on cloudflare
1 vote -
provide a way for site-administrators to view the auth.log
When sites are hacked the first thing to check is the auth.log to see who accessed what, when. When a compromise happens we need to be able to investigate immediately and find a fix.
Can site owners be provided with a way to see the auth.log for their site, similar to how we can currently view web access/error logs?Specifically what I'm requesting is live (and perhaps filtered to my site) visibility on:
* auth.log
* sftpserver.log
* history of auth and sftpserver logs so that we can go back at least a week to see if we…1 vote -
Allow closing shellinabox
The shellinabox service that runs on port 4200 is not secure enough, for a number of reasons:
* it accepts non-TLS traffic
* no multifactor authentication
* no battle-tested frontend webserver like nginx before itInstead of fixing all of these, perhaps just allow to disable this service like you allow for other services.
3 votes -
Automatic IP attack blocking
I would suggest that ips be blocked automatically by Cloudways when they were hitting on the site of yours continuously
9 votes -
close the different IP verify
Our different colleagues need sign in cloudways frequently, so we suggest if can close the different IP verify
1 vote -
Integrate firewall with CDN
There are probably many needed enhancements to the firewall. One that would be especially helpful would be to block traffic that doesn't originate through the CDN.
For example, with Cloudflare, hackers can sometimes use historical dns records to discover your server's origin IP address. They can then circumvent Cloudflare's ddos and firewall features.
An option in the Cloudways firewall to only accept traffic through the CDN would eliminate this whole class of vulnerabilities.
14 votes -
4 votes
-
Integrate mod_evasive to mitigate DDoS attacks
DDoS issues are getting out of control. It would be a good idea to integrate mod_evasive apache module to mitigate them.
I was suggested by the support team to mitigate the attack using app level firewalls but that's far to be an optimal solution.
They confirmed that the current infrastructure of their servers is not ready for adding this apache module but they are open to evaluating it as an option.
4 votes -
Feature Request: Log analysis section
I made contact via suppot chat and ask if it was possible to install GoAccess on my server for a visual and accurate log view.
Since it was not possible all i can do is suggest to make a section on server panel to analyse server logs and have a clear vision of traffic and load.Gabriel G.
4 votes -
2FA with Whitelisting
For those with 2FA, allow someone to whitelist their work ip address for XX days, so that 2FA is only required when time expires or access is from a new ip.
1 vote -
5 votes
-
Ability to add multiple SSL certificates per application (neither wildcard nor SAN)
If we have a multisite, we need a wildcard SSL for the subdomains. However if we go further, and provide custom domain (domain mapping) the problem comes that the SSL certificate is only for our domain not the mapped. Would be great if we can (even manually) create more than one certificate. SAN certificates is not the good option, since:
- We are using the wildcard for the own subdomains.
- There is a hard limit with the 100 domains.
- All the custom domains would be listed as secondary domains in the certificate details.
4 votes -
Allow disabling of weak SSH key exchange algorithms
PCI Compliance now regards weak ssh key exchange algorithms as a liability. There should be a way to disable them. It's fairly easy to set up in open-ssh: https://infosec.mozilla.org/guidelines/openssh#Configuration
4 votes -
Force 2FA for Team Members
As account owner, I can setup 2FA on the main account, but I can't force my team members (some of whom have full access) to do so. This obviously creates a security loophole.
6 votes -
Firewall Management + fail2ban support
It would be useful to have the ability to configure the default firewall rules at server level, rather than relying on htaccess files which are useless for managing large data sets (i.e. IP lists/ranges).
Additionally, having fail2ban installed and bridging between the firewall would be extremely helpful for using plugins like wp-fail2ban, which automatically bans "bruteforce" login attempts at server level, rather than application level.
30 votes -
Fix security problem with Team Member
My niche is high risk for online hacking. In Cloudways I can add a team member, which sends his un-encrypted password to his account. This is high risk. As owner of my account I should be able to change his password, and then I can share via a secure app like Last Pass. Please consider this a high priority request. Thank You
2 votes -
Add ability to add multiple IP addresses at once in the Security panel
Provide the ability to add multiple IP addresses at once in the Security panel for when we need to whitelist IPs for managewp and other services.
2 votes -
Provide an Edit feature for the admin panel URL path name
Vendors (magento) recommend changing the control panel name from "admin" to something else, it would be great if you can provide an edit facility so we can modify the admin URL so that we can launch the control panel from within cloudways as it only permits the default control panel name.
2 votes -
Fix password change system
At the moment, when signing up there is no limit to password length, but when changing a password, it is limited to 20 characters. This results in the "old" password not being recognised correctly, presumably as it's looking for a password of maximum 20 characters.
So if you create a password with more than 20 characters as your first password, you can't change it without logging out and doing "forgotten password". Rubbish!
1 vote
- Don't see your idea?