Changelog

Release-3540: fix CVE-2016-8655, disable the freshclam daemon and more

Because it is December we have done our best to make as little alterations to the platform as possible to provide the most stable hosting experience for our customers during these busy holiday months. However we do have some updates to share. These are some of the things we have been up to since the…

Release-3523: block Visbot user-agent

We now block all user-agents which contain the term “Visbot” inside the user-agent string.

Release-3513: Updating MySQL to 5.6.33

We are in the process of updating MySQL to the latest version, to get the latest improvements and security fixes. Last night we updated all Hypernodes with starting letters U-Z. Tonight we will update all Hypernodes with starting letters M-T. Tomorrow night all Hypernodes with the starting letters A-L and 0-9 will be updated. …

Release-3512: More granular hypernode-importer error logging and more

This release implements Magento 2 detection for the hypernode-importer so that a message can be displayed that we at this time do not support Magento 2 in the hypernode-importer yet when a Magento 2 shop is attempted to be imported with this tool. The message reads “importing Magento 2 with the hypernode-importer is not supported…

Release-3480: Additional PHP modules

Today we are installing two requested packages on all PHP 7 Hypernodes. php7.0-odbc php7.0-sybase

Release-3470: Improved auto recovery

We’ve improved our auto recovery to automatically attempt fix filesystem inconsistencies on boot. In rare occasions a Hypernode would be forced to reboot off an uncleanly closed filesystem. On boot it would then prompt asking what to do (if it should recover). A recovery is now automatically attempted, reducing recovery time for these cases.

Release-3347-1: update PHP7 to 7.0.13-1

Today’s release updates PHP on PHP 7 Hypernodes and other minor changes. PHP 7 updated from 7.0.12-1 to 7.0.13-1. You can look at our packaging here if you are interested in that sort of stuff. The hypernode-importer can skip Magento path autodetection If the host has many files in the directories where the hypernode-importer will…

Release-3447: stricter fail2ban rules on rss notifystock

We tightened our fail2ban rules for rss/notifystock bruteforce attempts to ban 24 hours instead of previously 2 hours. Additionally we enabled the automatic recovery for all nodes now, along with a minor improvement in the auto recover logic.

Release-3428: Stop HHVM on all A-L Hypernodes which are not using it

For all Hypernodes with the first letter A-L we’ve stopped HHVM unless it was used. On the remaining Hypernodes (M-Z), we stopped HHVM already in an the earlier release. HHVM is deprecated in favor for PHP7. In order to save memory we’ve stopped HHVM on all nodes which were not using it to reclaim memory….

Release-3421: Stop HHVM on all M-Z Hypernodes which are not using it

For all Hypernodes with the first letter M-Z we’ve stopped HHVM unless it was used. The remaining Hypernodes (A-L) will also receive this feature in due time. HHVM is deprecated in favor for PHP7. In order to save memory we’ve stopped HHVM on all nodes which were not using it to reclaim memory. New Hypernodes…

Release-3411: Automatic recovery

For all Hypernodes, whose first letter begins with M-Z, we’ve enabled a new automatic recovery feature today. All Hypernodes starting with letters A-L will receive this feature as well in due time. Should a Hypernode become unreachable or unresponsive, our automation will attempt to resolve the problem before alerting one of our technicians. The automation…

Release-3405: new hypernode-importer features, tweaks in memory management

Today we deployed some changes to the hypernode-importer which might end up saving you some time when migrating a Magento shop to a Hypernode or a local hypernode-vagrant development environment. The –set-maintenance-on-source flag This new option for the hypernode-importer enables you to automatically put the Magento installation you are importing from in maintenance mode before…

Release-3377: Remove HHVM for new Hypernodes

As of now newly ordered Hypernodes will not have HHVM available anymore. Support can re-enable HHVM for you, should it really be necessary. We recommend everyone to use PHP7 instead. It delivers an even better performance boost and is better maintained by the community.

Release-3359: NGINX config reloader no longer allows absolute includes

We’ve updated the NGINX config reloader to not allow absolute includes. Absolute includes worked against the NGINX config reloader. The purpose of the config reloader is to ensure that the live config is syntactically correct and working, having an outside dependency (include) that can change the running live config can cause NGINX to no longer come up. Specifically the following includes are…

Release-3359: Let’s Encrypt Firefox fix

We’ve improved the let’s encrypt implementation. Firefox now accepts the certificates as expected.

Release-3331: Increased server_names_hash_bucket_size and more

In this release we made a couple of minor changes to our configurations on Hypernode. Increased the server_names_hash_bucket_size to 128 The server_names_hash_bucket_size NGINX config value was increased from 64 to 128 as it was causing issues with longer domain names. For example previously trying to generate an SSL configuration for domains of a certain length…

Release-3331: Fix multiple domains in user generated SSL configs and changes to WAF

Yesterday we started rolling out a pre-configured Let’s Encrypt automatic renewal and configuration mechanism based on dehydrated. We noticed a bug in our SSL config generation script that made it impossible to load certificates for more than one domain. This has been fixed now. If you ran in to this problem you can re-run dehydrated…

Release-3323: Let’s Encrypt support [BETA]

In this release we started rolling out compatibility with Let’s Encrypt auto-renewal. Previously it was already possible to use Let’s Encrypt certificates on Hypernode by uploading them to the service panel, but the real beauty of Let’s Encrypt is in it’s short lived certificates which can be automatically updated. Requesting a Let’s Encrypt certificate on…

Release-3318: patch OpenSSL CVE-2016-6304, notify out of memory killed on SSH login

The last couple of weeks we have been mostly focused on improving our back-end logic for dealing with external API failures and implementing extra tests for our automation. However there were some things we did that might be interesting to hear about for Hypernode users so here is a short summary. OpenSSL CVE-2016-6304 Early last…

Release-3294: new magerun commands, prepare for Let’s Encrypt

This release contains an update of the wildly popular Hypernode & Elgentos n98-magerun modules. Import change: all Hypernode commands can now be found in the hypernode:* namespace (see a list here). Also, we have released software to support Let’s Encrypt in an upcoming release shortly.

Release-3285: updated Blackfire and GeoIP database, and added GeoIP city

We updated the Blackfire PHP5 probes to the latest versions (agent 1.7.4, PHP probe 1.12.0) We updated the GeoIP* database to the latest version which comes with Ubuntu 16.04 We included the GeoIP city database into NGINX. The city fields are now available in the PHP $_SERVER environment variable. Fixed a problem where backups were…

Release-3274: NGINX upgrade for all remaining nodes

Today all Hypernodes starting with N-Z and 0-9 will be upgraded to a newer NGINX version. Additionally we made some changes to our Web Application Firewall (WAF). If you notice something out of the usual or think this new configuration is somehow clashing with your NGINX configuration, please contact us.

Release-3272: PHP 7 update to version 7.0.10

We’ve deployed the latest PHP 7.0 to all nodes running PHP 7.0. This is PHP 7.0.10, that contains a couple minor security fixes. Please find the changelog here: http://www.php.net/ChangeLog-7.php#7.0.10

Release-3270: NGINX upgrade, hypernode-importer can use a jumphost

Today all Hypernodes starting with the letters A-M will be upgraded to a newer NGINX version. Additionally we made some changes to our Web Application Firewall (WAF). If you notice something out of the usual or think this new configuration is somehow clashing with your NGINX configuration, please contact us. Also we upgraded the globally…