Dedicated Servers

Physical Position

Located in Nuremberg, Germany; in Falkenstein Vogtland, Germany; and in Arezzo, Italy; Tier IV enterprise data centers offer a green, leading-edge infrastructure for your Internet business. Thanks to redundant carriers and network latencies of less than 20ms, they guarantee fast access to your website. This applies regardless of whether you are in the web hosting space, use your own server or have opted for root Dedicated Servers high performance or managed servers.

Power supply

• AC: 230V, 16A
• Redundant UPS structures
• Battery mode: approx. 15 minutes
• Standby power system
• Diesel power generator for autonomous mode
• Power is supplied via a raised floor system

Climate Control

• Energy efficient direct cooling N + 2 redundancy
• Containment of the cold aisle
• Underfloor air conditioning
• Raised floor system above average
• Air temperature monitoring and server / distribution cabinets

Fire protection and safety

• Modern rapid fire extinguishing system with direct connection to the local fire brigade
• Special door locking systems
• High security perimeter fences monitored by video throughout the data center park
• Entrance via electronic access control terminals with transponder key or entrance card
• State-of-the-art surveillance cameras for 24/7 monitoring of access routes, entrances, security door interlocking systems and server rooms

DDOS protection

• Latest hardware appliances
• Sophisticated perimeter security technologies
• Automated system capable of protecting web applications, websites, servers and IT infrastructure
• Attempting thwarted botnet communications

Certifications

• Certified according to DIN ISO / IEC 27001
• Internationally recognized standard for information security
• Certification for our entire parks and data center infrastructures
• Check for our ongoing evaluation and continuous improvements in safety standards

Secure servers from network attacks

In a distributed denial-of-service (DDoS) attack, a malicious attacker aims to render an online service inaccessible by flooding the system with an overwhelming flood of fake requests. This attack is orchestrated by sending thousands, if not millions, of spurious requests with the goal of saturating bandwidth, exhausting server resources, and consequently overloading the system. When this happens, legitimate requests, such as those from real users, are queued, delayed, or in the worst case, denied outright. These attacks are often augmented by a botnet, which is essentially a network of compromised computers used to generate such a massive volume of data traffic that it overwhelms most systems.

Managed Server, recognizing the seriousness of such threats, has implemented advanced and automated security tools to safeguard your web applications, websites, servers and entire IT infrastructure. Thanks to a proactive detection system, we are able to identify most attack patterns early, allowing us to intervene quickly, blocking attacks and effectively neutralizing them. Our defense uses the latest hardware equipment and the most advanced perimeter security technologies, thus guaranteeing high-level protection against DDoS attacks, even large-scale ones at no extra cost to you.

The perfect anti DDOS solution

Our system is designed with the utmost attention to the security and integrity of your data. Using top-of-the-line hardware from industry leaders like Arbor and Juniper, we ensure robust and reliable protection. Arbor, known for its advanced DDoS mitigation solutions, ensures your assets are protected from external attacks, while Juniper, with its reputation for excellence in networking solutions, provides secure, high-performance connectivity. This combination of high-quality hardware allows us to offer multilayered defense, protecting both the physical infrastructure and data in transit. Furthermore, with the implementation of these devices, we are able to quickly monitor, detect and respond to any potential threats, thus ensuring that you and your data are always safe.

Normal data transmission.

Data transmission during a DDOS

Automatic recognition of the DDOS attack pattern

At Managed Server, we have developed an advanced attack detection and response system that goes far beyond simple identification based on the amount of traffic or number of packets. Our ability to discern between types of traffic allows us to accurately identify and react to specific threats, ensuring optimal protection.

To illustrate, while a flood of UDP packets with a rate of 500k pps might seem worrisome at first, it might not actually have a significant impact on a well-configured server. On the other hand, a SYN attack with the same rate of 500k pps could pose a much more serious threat, as it aims to deplete server resources by creating semi-open connections. This subtlety in the nature of the attacks requires a targeted and specific response.

This is where our expertise comes into play. Managed Server DDoS protection tools are designed to detect these nuances and differences between various types of attacks. Thanks to this discrimination capability, we can not only identify the attack, but also implement mitigation measures specific to that particular type of threat, thus ensuring that your assets remain safe and operational even in the face of the most sophisticated attacks.

Traffic filtered for known attacks

This method allows us to effectively filter the most well-known attacks, passing them through traffic scrubbing filters. The method is particularly effective in eliminating the following types of attacks: DNS reflection, NTP reflection, and UDP flooding on port 80.

Challenge Response authentication and filtering

In this final layer, attacks in the form of SYN floods, DNS floods, and invalid packets are filtered out. We are also able to flexibly adapt to other unique attacks and reliably mitigate them. The above technologies support a high level of automation, which in turn will continue to be optimized step by step. We can improve the system by analyzing each attack and constantly adjusting our filters and responses.

Layer7 protection with CloudFlare

Cloudflare, Inc. is a renowned American company specializing in providing advanced solutions for the web. Among its main offerings are content delivery network (CDN) services, which accelerate the delivery of web content by distributing and replicating this content across a vast network of global servers. This ensures that website visitors receive data from the server closest to them geographically, reducing loading times and improving the user experience.

In addition to CDN services, Cloudflare offers robust internet security services, designed to protect websites from a variety of threats, such as DDoS attacks, malware, and security vulnerabilities. These services monitor and filter web traffic, blocking threats before they can reach a site's infrastructure.

Another key pillar of Cloudflare's offering is its distributed DNS services. These services not only translate domain names into IP addresses, but they do it with superior speed and security, ensuring that websites are always accessible and protected from potential DNS-targeted attacks.

A distinctive aspect of Cloudflare is its role as a reverse proxy server. By acting as an intermediary between a website visitor and the user's hosting provider, Cloudflare can optimize and filter traffic, improving site performance and security. In essence, when a visitor accesses a Cloudflare-protected site, Cloudflare actually manages and directs that request, ensuring fast, secure and efficient delivery of content.

Level 7 Attacks

Level 7 attacks
A new generation of attacks is targeted at layer 7 of the OSI model, the “enforcement” layer. Such attacks focus on the specific characteristics of web applications that create bottlenecks. For example, the so-called Slow Read attack slowly sends packets across multiple connections. Because Apache opens a new thread for each connection, and because connections are maintained as long as traffic is sent, an attacker can overload a Web server by exhausting its thread pool relatively quickly.

Cloudflare offers protections against many of these attacks, and speaking of real cases, we typically reduce HTTP attack traffic by 90%. For most attacks, and for most of our customers, that's enough to stay online. However, the 10% of traffic going through traditional protections can still be overwhelming for customers with limited resources or facing very large attacks. In this case, Cloudflare offers a security setting called “I'm Under Attack” (IUAM) mode.

IUAM is a security level that you can set for a site when you are under attack. When IUAM is enabled, Cloudflare adds an extra layer of protection to block malicious HTTP traffic from passing through the server. While some additional background checks are performed, an intermediate page is presented to site visitors for 5 seconds as the checks are completed. You can think of this as a challenge where testing is automatic and visitors never have to fill out a CAPTCHA.

After being verified as legitimate with automated tests, visitors can freely browse your site. JavaScript and cookies are required for testing and to record whether the tests have been successfully passed. The page that visitors see when they are in IUAM can be fully customized to reflect your brand. I'm Under Attack mode doesn't block Cloudflare's search engine crawlers or whitelist.

The backup policies adopted by Managed Server are aimed at satisfying all professional and technological needs, guaranteeing important features and full satisfaction of the legal requirements regarding backup and disaster recovery obligations.

Incremental backups with dual technology.

In Managed Server we know more than anyone else how important it can be to have the mathematical certainty of having up-to-date, functional and always usable backups.

With this awareness we have chosen the best technologies on the market that can guarantee us speed of execution, data integrity and encryption.

However, not being able to rely exclusively on a single software (as happens in most other suppliers) we have decided for our own scruple and that of the customer to use 2 different technologies for incremental backup in order to ensure in any case the correct functioning of at least one of the two versions.

Borg Backup : (Borg for short) is a deduplication backup program. Optionally, it supports compression and authenticated encryption. Borg's main goal is to provide an efficient and secure way to back up your data. The data deduplication technique used makes Borg suitable for daily backups, as only changes are stored. The authenticated encryption technique makes it suitable for backups to non-fully trusted targets.

Restic : a versatile and complete cross platform utility already mature for creating and managing backups locally and on the cloud. The utility supports encryption (AES-256 algorithm) and data deduplication.

Redundant external storage backup.

All backups converge on external storage equipped with RAID6 configuration and relative redundancy on further storage in RAID6 in order to avoid any hardware problems and always have a healthy copy of the last 60 days of backup that can be restored if necessary.

Daily backups and storage for at least 60 days.

All backups have a minimum daily frequency and a retention of at least 60 days up to 180 (according to the options chosen and according to the contract).

Backups take place during the night (between 02:00 and 04:00 at night), having a minimal impact on performance given the time with little traffic flow.

Hot backup of MySQL without service interruptions.

Unlike other hosting providers, we perform hot MySQL backups without interrupting the service and without using a table lock for a long time. We use in fact Contact XtraBackup and not mysqldump which appears to be absolute today the best solution available on the market, allowing us to obtain very high data integrity and backup and restore speeds when compared to the more infamous mysqldump utility.

In other words, the sites that use databases will continue to be visible and reachable even during the backup phases, avoiding errors of type 500 or timeout errors at night where crawlers and spiders of search engines such as Google can pass.

Encrypted Backups

All Backups are encrypted with public key encryption techniques with RSA encryption key in order to make decryption impossible if not in possession of the corresponding private key.

Secure file transfer.

All backup operations in which the file transfer takes place take place via SSH and therefore via a channel encrypted by public key cryptography.

Managed Server support is not just a service, but a promise of uninterrupted support. We are here for you 24 hours a day, 7 days a week, 365 days a year, including public holidays. We know how crucial it is for your business to maintain a stable and reliable online presence, and we are committed to ensuring that any outage is handled with the utmost urgency.

In case of serious blocking problems, our team of experts are trained and ready to intervene in less than 15 minutes. This commitment also applies when the source of the problem could be an error on your part. Our priority is always to ensure that your system is back up and running as quickly as possible, regardless of the cause of the outage.

To facilitate communication and ensure a timely response, we have implemented an advanced online ticketing system. This system allows you to track, monitor and manage your requests in real time. Also, for those situations that require immediate communication, we offer a priority telephone line. By calling this line, you will have direct access to a senior, experienced and qualified system administrator who is ready to assist and guide you through the resolution process. Our mission is to ensure that every issue is dealt with professionally and competently, giving you peace of mind knowing that your IT infrastructure is always in good hands.

The beating heart and the true excellence of our company lies in the complete managed management. This premium service has been designed with a clear objective: to guarantee our customers the maximum return with the minimum investment, ensuring efficiency and cost optimization.

Opting for a managed solution with us offers a number of invaluable benefits. First, you will have the opportunity to work closely with a team of experienced professionals, who will guide you in choosing the best hardware configuration and selecting the optimal software stack for your specific needs. This means that you can benefit from the latest technological innovations without having to worry about the technical details.

Furthermore, by choosing to outsource the management of your server, you can free yourself from the burden of having a dedicated internal team. Not only does this reduce costs associated with training and hiring specialized staff, but it also allows you to focus on your core business knowing that your server management is in the hands of experts.

Our managed service goes far beyond simple maintenance. We proactively take care of all those critical aspects that are essential to ensure the stability and security of your system. This includes timely implementation of updates and patches, performance optimization, backup management, disaster recovery strategies, and protection against DDoS attacks and cyber threats.

With us at your side, you no longer have to worry about these often complex and burdensome tasks. They will be handled with precision, competence and efficiency by our team. In short, we transform what could be a source of stress and worry into a smooth and seamless process, ensuring the continuity and security of your online business.

advanced.

We have specialized for over 10 years on server-side optimization and WordPress and WooCommerce installation application. Although our knowledge spans 360 degrees on most CMS and most PHP frameworks also used for the creation of custom projects, we are particularly experts in the optimization of WordPress and WooCommerce which more than any other are affected by native performance problems. of the CMS itself.

State-of-the-art software stack.

Our offer is based on a cutting-edge technological approach, with a software stack that integrates some of the most advanced and performing solutions available on the market today. Using NGINX, known for its efficiency and scalability, together with Varnish for a high-performance HTTP cache, and leveraging the latest innovations such as Http/2, Http/3 and the QUIC protocol, we ensure fast and smooth content delivery. Completing our stack are solutions such as Memcached and REDIS.IO for optimal cache management, and Percona Server, which offers superior performance and reliability for database applications.

But it's not just technology that speaks for us. Our experience and expertise are demonstrated by the trust placed in us by high caliber clients, with over 300 million unique visitors per month. This volume of traffic, often with significant peaks, requires impeccable management and real-time responsiveness, and we are proud to say that we are equal to this challenge.

For ambitious editorial projects, which aim not only to reach, but also to involve and maintain a large audience, our infrastructure and management present themselves as the ideal choice. The combination of cutting-edge technology, experience and a successful track record makes us the perfect partner for those looking for outstanding performance, reliability and excellent value for money.

For more than a decade, we have distinguished ourselves as specialists in server-side and application optimization for Magento and Magento 2 platforms. Even though we have extensive expertise covering most CMS and PHP Frameworks, including those used to develop custom projects, our expertise in Magento and Magento 2 is particularly deep and recognized.

Cutting-edge technology for superior performance.

Our technological proposal is based on an avant-garde approach. Our software stack combines the best and most innovative solutions currently available on the market. We rely on NGINX, which is appreciated for its scalability and efficiency, and on Varnish, which ensures a high quality HTTP cache. By integrating recent innovations such as Http/2, Http/3 and the QUIC protocol, we are able to ensure fast and smooth content delivery. Our stack is further enhanced by solutions such as Memcached and REDIS.IO, which optimize cache management, and Percona Server, known for its outstanding performance and reliability in database applications.

Security and compliance are fundamental pillars of our organization, and we constantly strive to ensure that our operations and services meet the highest standards in this area. Our entire infrastructure is proudly certified according to ISO27001, one of the most prestigious and globally recognized certifications for information security management. This certification certifies our commitment to ensure that data is treated with the utmost integrity, confidentiality and availability, in compliance with current regulations.

As we highlighted in our data center section, it not only meets standards of excellence, but is also certified according to DIN ISO/IEC 27001. This international standard underscores our dedication to implementing and maintaining best practices for security of information, assuring our customers that their data is kept in a highly secure and monitored environment.

Beyond that, we recognize the importance of personal data protection and the need to comply with ever-changing regulations. Therefore, the entire organization strictly adheres to the requirements of the GDPR (General Data Protection Regulation), the European regulation that establishes the guidelines for the collection and processing of personal information of EU citizens. This commitment is reflected not only in our daily operations, but also in the contractual phases, where we provide detailed information on the rights and responsibilities of the subjects involved. Furthermore, to ensure continuous and flawless compliance, we have appointed a European DPO (Data Protection Officer), who oversees and ensures that all our activities are in line with European privacy and confidentiality regulations.

All data is hosted and processed by qualified technical personnel on the European territory.

Wanting to evaluate the hardware and software solutions proposed and the actual benefits in terms of performance of our above all managed solutions, we can boast not only a better service but also an excellent price on the European and international market, guaranteeing you an excellent service at an absolutely advantageous cost.

We undertake in a constant and cadenced manner to carry out the disclosure of competitors' and suppliers' prices every 3 months, taking care to adjust our prices in order to be the most convenient on the Italian and European market.