Release-4398: hypernode-magerun magerun2 modules installed system wide
In this Hypernode changelog we discuss the latest changes made to the hypernode-magerun package and the hypernode-image-optimizer. Hypernode-magerun In this release we’ve updated the hypernode-magerun package to install some modules for magerun2 system wide. Currently this only includes the hypernode:performance command. $ magerun2 | grep hypernode hypernode hypernode:performance Generate a performance report based on sitemaps….
Read moreRelease-4379: fix Blackfire for PHP 5.6
Fixed the Blackfire PHP 5.6 integration. When we released PHP 5.6 for Hypernode we forgot a small step which prevented Blackfire from working. This has been fixed.
Read moreRelease 4373: Importer improvements, log parser bugfixes and more
This release brings a new version of hypernode-importer3, some bugfixes for hypernode-parse-nginx-log and various changes to our cloud operations job processing backend. Magento path discovery in the importer is now breadth first The hypernode-importer3 tool will now find the top level Magento in the specified path. If a path was supplied that contained a Magento…
Read moreRelease 4366: PHP 5.6 is now the default for new Magento 1 Hypernodes
From now on when a new Magento 1 Hypernode is created the default PHP version will be 5.6 instead of 5.5. Magento 2 Hypernodes will still be created with PHP 7.0 as the default setting. PHP 5.6 is a lot faster than PHP 5.5, check out this benchmark of an unoptimized Magento 1 shop with…
Read moreRelease-4352: Updated magerun-hypernode
We’ve added a new version of magerun-hypernode to our repositories. Changes since the last release: [ Jochem Klaver ] * Fixing #46 hypernode:patches:list matching the inconsistent patch names in applies.patches.list (#47) * Do not list reverted patches as applied [ Timon de Groot ] * Make command hypernode:performance available for n98-magerun2 * Add information to…
Read moreRelease-4333: Install/prepare PHP 5.6 release
In preparation for the PHP 5.6 release, we are installing PHP 5.6 alongside the other PHP versions. The ability to use PHP 5.6 for your shop will follow soon. Additionally, we now allow LOAD DATA INFILE queries from all locations
Read moreRelease-4310: Updated PHP 7 to 7.0.22
We have updated our PHP 7 version to 7.0.22. This new release includes various minor bugfixes, for a complete list of changes click here.
Read moreRelease-4295: Updating php-redis, php-imagick and blackfire
PHP 5.6 preparations In preparation for the PHP 5.6 release we’ve rebuilt the php-redis and php-imagick PHP modules. These have already been re-built for existing PHP versions (PHP 5.5 & PHP 7). In addition they are also built for PHP 5.6 now. Blackfire updates We’ve also updated our Blackfire probes: blackfire-agent 1.11.0 -> 1.14.1 blackfire-php…
Read moreRelease-4293: New hypernode-importer3 with Magento 2 support
In the past month we re-wrote the hypernode-importer from scratch to fix a couple of issues, added some new functionalities and made it more efficient. Now it supports Magento 2, handles special characters in database passwords and imports the database and file-system in parallel. Hypernode-importer3 – loads of new options The original hypernode-importer will still…
Read moreRelease-4287: ioncube for php7, more mysql connections for larger nodes
Ioncube for PHP 7 We’ve made ioncube available for PHP 7 as an opt-in option. If you would like to use ioncube for PHP 7 please contact support, and let them know for which nodes you would like to enable ioncube. More MySQL connections For larger Hypernodes (from 20 cores and up) we’ve increased the…
Read moreRelease-4252: Automatic recovery delayed at night
We’ve changed our automatic recovery to be delayed at night. When a server goes offline or becomes unresponsive, an automated process attempts certain rescue strategies in order to resolve the issue. Some customers run cron jobs at night which would cause database locks and effectively causing their websites to go offline. Our recovery is now…
Read moreRelease-4236: Gzip vector based images by default and more
In this release GZIP compression in NGINX for vector based images is enabled by default. In the past this was already configurable by adding custom GZIP types to your NGINX config, but enabling this in the default config is a sensible default. The following image formats are now compressed: image/svg image/svg+xml image/eps. Suggested by Mark…
Read moreRelease-4224: add php snappy module
We’ve added the snappy compression algorithm to PHP. Snappy offers much higher compression/decompression speeds compared to gzip, at a slight compression ratio cost. This is taken from the Squash Benchmark, which is a good overview over various compression algorithms vs various input data. From the above benchmarks, using the core i-7 machine together with the…
Read moreRelease-4220: Patch NGINX CVE-2017-7529, PHP5.6 in hypernode-vagrant
Last night NGINX issued a security advisory for versions 0.5.6 – 1.13.2 regarding an integer overflow issue in the built-in range filter module. This issue could potentially allow denial of service or disclosure of worker process memory if abused. Our NGINX build has been patched to fix this issue. The patched version is nginx/1.13.2. We…
Read moreRelease-4199: Various improvements
We’ve fixed a bug where nginx configuration was not correctly re-generated when using Let’s Encrypt and enabling/disabling Varnish. This could have resulted in SSL domains pointing towards Varnish while varnish was disabled/not running resulting in a 502 error. Now depending configurations are re-generated correctly when changes are being applied. We’ve added TLS support for FTP…
Read moreRelease-4176: Enhanced brute-force detection, NeoPi and libfcgi
Today we deployed some changes to the code of our emergency rescue strategy. In case a Hypernode goes down as a result of a saturated PHP-FPM queue we try to detect malicious patterns in the pending requests running on the FPM workers. If the request pattern across the server looks like a brute-force attack or…
Read moreRelease-4164: Varnish 4.1.3 and Nginx 1.13.1
Today we will be gradually rolling out a version update of Varnish and Nginx on the Xenial Hypernodes. Nginx will be upgraded from nginx/1.10.2 to nginx/1.13.1. The changelog for the differences between these versions can be found here. Our current 1.10.2 build has IPv6 disabled, which we expected to be fine since the Hypernodes do…
Read moreRelease-4091: Varnish improvements
We’ve improved how our code manages the varnish installation for Ubuntu 16.04 Xenial and Ubuntu 12.04 Precise nodes. fixed configured vcl being lost on full update (16.04 Xenial) fixed configured vcl being lost between node migrations (16.04 Xenial) fixed varnish getting reinstalled on full update (16.04 Xenial) fixed varnish getting restarted on full update (12.04…
Read moreRelease-4046: whitelisted Ayden’s user agent
We’ve whitelisted the Ayden’s HTTP user agent, from the bot ratelimiting. It’s no longer subject to the bot ratelimiting mechanisms.
Read moreRelease-3981: Deny specific configuration files on magento1 installations
We’ve moved certain security restrictions from the magento2 configuration into the global magento1/2 security configuration file. In specific the following files are no longer reachable from external: auth.(json|lock) package.(json|lock) composer.(json|lock) Gruntfile.js cron.php Hidden files are also denied with a 403 now instead of a 404. Furthermore we’re working hard on the Xenial migration. Many changes…
Read moreRelease-3943: Xenial hypernode-vagrant
Over the past couple of weeks we’ve been very busy preparing to upgrade Hypernode to the latest LTS version Ubuntu 16.04 Xenial. While for Hypernode we highly modify the Ubuntu base, upgrading to this newer version will have many advantages like newer releases of various packages. For Hypernode we build all important parts of the…
Read moreRelease 3914: n98-magerun weak password tester
We’ve released a new version of the Hypernode plugin for n98-magerun, that you can use to test weak admin passwords. As admin accounts are increasingly brute forced, it is essential that you don’t use “guessable” passwords (such as steven123). This plugin will show you weak passwords in your store. More information, run magerun hypernode:crack:admin-passwords –help…
Read moreRelease-3864: IP authentication exceptions on development plans
In this release it becomes possible to whitelist IP addresses on development plans, so that they are exempt from the basic authentication requirements. This may be useful to test external payment providers or other kind of external services which do no support basic auth. The whitelist file is placed in /data/web/nginx/whitelist-development-exception.conf and looks like this:…
Read more