Changelog

Release 6052: RabbitMQ on Hypernode

In this release we deploy the possibility for Hypernodes to run RabbitMQ. Now that Magento 2.3 has been released, RabbitMQ can be used on Magento Open Source installations. Previously it was already possible to use RabbitMQ in the Enterprise version of Magento 2, or with the help of custom third party modules. While Hypernode has…

Release 6047: trials have more specs

In this release, we’ve equipped our trials with more specs. New customers trying out our platform for free now get 3 cores, 4G memory and 62G storage (before: 2c-2G-44G). Of course, all features like Sphinx, Varnish, New Relic, Blackfire are still included. Also (spoiler alert!) RabbitMQ will very soon be available on trials. Magento 2…

release-20: SSH keys

SSH keys It’s now possible to add and remove SSH keys on your Hypernode via the control panel. This feature includes the ability to limit login access to specific IP addresses if required. Information about how to add a limited IP SSH key can be found in the SSH keys support documentation. To use the…

Release-6025: Hypernode Diagnostic

In this release we added a new command, hypernode-diagnostic. It gathers some basic information related to your Hypernode and Magento shop and presents this in a nice and easy to read format. Information such as PHP version, cron jobs, Magento version/edition and more. $ hypernode-diagnostic Magento information on 2018-12-20 10:29:27: – Magento version 2.3.0 Community…

Release 6016: Bugfix in hypernode-parse-nginx-log, also known as pnl

In this release we have pushed a new version of hypernode-parse-nginx-log to fix a bug relating to access logs in the file access.log.1. The pnl, or hypernode-parse-nginx-log tool can be used to convert the JSON Nginx webserver logs into a human readable format and filter specific fields. Previously the tool would only read files like…

20181217.1 – Checks ordering, webgility update, generic malicious JS check and more

New check ordering We received a lot of feedback about the ordering of checks. Previously they would be ordered based on the most recently added checks, but this does not always make sense from a user’s perspective. For users it’s a lot more important that checks that fail are shown first so you can get…

Release 6000: Magerun2 updated to support Magento 2.3

In this release we will update the command-line tool magerun2 from 2.2.0 to 3.0.1. This new version will add support for Magento 2.3. The new Magento version was previously not yet supported. Note that this new version will also remove support for 2.0.x and for PHP 5.6. If you still depend on those versions you…

release-19: Varnish, edit subscription and more

Varnish It’s now possible to enable Varnish for your Hypernode via the control panel. You can find this feature under the “Caching” tab on the left when you’ve selected a Hypernode. Alternatively you can check it out by visiting this link. Editing subscriptions You can now edit the subscriptions for your Hypernodes by either clicking…

20181203.1 – SUPEE-10975, new magento versions, sidebar bugfix, new malware signatures

SUPEE-10975 and new magento versions On the 28th of November Magento released the following versions for Magento: 2.3, 2.2.7, 2.1.16, 1.14.4.0 and 1.9.4.0. In addition to these new versions they also released SUPEE-10975. The new versions plus the SUPEE fix some critical security issues in Magento and it is highly recommended you patch or upgrade…

Release 5953: Magento 2 preinstall updated to 2.3.0

Magento released a new version of Magento 2 yesterday. The Magento 2 preinstall on Hypernode has been updated to reflect this. The new preinstalled version when you order a Hypernode is 2.3.0. ./bin/magento –version Magento CLI 2.3.0 Note that as of right now magerun2 is not yet compatible with this new version, so keep that…

Release 5946: Configurable memory management policy and RSS bruteforce detection

Configurable memory management policy In this release we will amend the change we made earlier this month where we increased the limit for our non-essential process slaying mechanism in order to allow more one-off memory hungry processes to run without executing overly drastic measures. While this change worked as intended, it did however result in…

release-384: Users can list flows and set Varnish settings

Users can list flows For some time now it’s been possible for users to list flows for their apps by calling the Hypernode-API. This lets users inspect which tasks are currently running for their node. This can be useful for users to anticipate when changes are going to be propagated when they requested changes via…

20181106.1 – Run checks in batches, new patch check, updated Magento version check and new RCE check

Running checks in batches Recently we received some information that under-powered servers could suffer performance loss when scanned by MageReport. This is due to the amount of requests MageReport has to make to determine your shop’s safety. This is of course not our intention, so to fix this we’ve added running checks in batches for…

Release 5874: Better out of memory pattern detection for preventive non-essential process slaying

On Hypernode we have a very sophisticated system for dealing with low memory situations. As described in these earlier changelog articles this system has evolved quite a bit over time and we are constantly looking for tweaks and adjustments so that we can strike the best possible balance between stability, performance and flexibility. Over time…

Release 5869: Configurable ft_min_word_len for products with short names

In this release we expose functionality in the hypernode-api that will make it possible to configure the ft_min_word_len for MySQL. The ft_min_word_len is the minimum length of the word to be included in a MyISAM FULLTEXT index. So, if you sell things in your Magento shop like wol or a sok then today is your…

20181026.1 – Added Magecart zero day extensions checks

Magecart zero day attacks Recently it was brought to light by security researcher Willem de Groot that attackers are making use of unpublished security flaws in about two dozen Magento extensions. The vulnerabilities in these extensions allow the attackers to gain full control over the targeted websites via Remote Code Execution (RCE). Added checks The…

Release 5852: Additional PHP Object Injection WAF rules

In this release we will expand on the configuration changes we’ve made in yesterday’s release which addressed a number of the PHP Object Injection vulnerabilities in third party Magento 1 extensions. Today’s change contains extra filters for probes we’ve seen with an URI encoded version of the payload and for probes where the payload is…

Release 5850: Blocking Magecart zero-days

In this release we will deploy a preliminary new version of our Web Application Firewall which will block various forms of known attacks that have been encountered in the wild on a selection of the vulnerable Magento 1 extensions that were disclosed in this blogpost by Willem de Groot, security researcher and ex-Byte founder. The…

Release 5840: hypernode-servicectl can also restart Redis

In this release we will push an update to the hypernode-servicectl command-line tool that will make it so that the app user is now also privileged to restart the Redis service. It will be possible to restart the default Redis instance that is commonly used for the full page cache, but it will also be…

Release 5793: ImageMagick security update

This week a security release for imagemagick was pushed to fix a vulnerability relating to the underlying Ghostscript interpreter. Because in Magento sites it is not very common for non-trusted users to upload images that will be converted to one of these formats, this vulnerability isn’t very critical. But because people can get very creative…

Release 5785: Migrating Hypernode DEV plans to the new Combell OpenStack

In this release we have started our previously announced effort to migrate production resources from DigitalOcean to the brand new Combell OpenStack cloud. This change will allow for a couple of cool new features like volume swap migration between the Magento Professional 3XL, 4XL and 5XL plans and way faster provisioning (around 10 minutes from…

20180925.1 – Updated CC hijack and cryptojacking checks and updated style

Update Credit Card Hijack check Recently MagentoCore and MageCart have been getting some traction as Magento specific malware to skim credit card details. We’ve updated our signatures so we’re able to detect shops infected with this malware. Update Cryptojacking check Recently there were some updates to cryptojacker signatures. We’ve updated our database to make sure…

Release 5734: Default n98-magerun.yaml configuration file

From this release on we will start placing a default .n98-magerun.yaml configuration file for Magerun in /data/web if no such file exists yet. Previously we already placed this file when a new node was ordered with a Magento 1 preinstallation. But, for the instructions in this article about installing Magento 1 on Hypernode to work…

Release 5678: New hypernode-postsuper utility to clear mail queue

In this release we introduce a new command which exposes the capability of clearing out or removing individual items from the mail queue to the app user. The command is called <code>hypernode-postsuper</code>. Use case The common software systems providing email services queue messages as part of their operations. Hypernodes are configured to process a capped…