Checklist: What to Do After Activating a New VPS or Dedicated Server
Leaving a machine exposed with its factory settings means leaving it vulnerable. We at Servereasy always recommend not rushing into installing websites right away. First, you need to secure the foundations. Based on our experience, we have prepared a checklist to review as soon as you purchase a new server or a VPS.
What is a Dedicated Server and What is a VPS? The Differences:
- A dedicated server is a physical machine assigned to a single client. CPU, RAM, and storage remain entirely available to that system, with no other VPS utilizing the same resources. It is a recommended solution for applications that require consistent performance or a greater availability of resources.
- A VPS works differently: it runs as a virtual machine inside a physical server that also hosts other instances. The provider allocates a specific amount of CPU, RAM, and storage to the VPS as defined by the chosen plan. For this reason, it can be a more cost-effective solution when an entire physical machine is not required.
Windows and Linux Server Characteristics
Linux and Windows Server differ mainly in the available tools and the way you administer the server.
| Characteristic | Linux (Ubuntu, Debian, RHEL) | Windows Server |
|---|---|---|
| Native Environment | PHP, Python, Ruby, Node.js | ASP.NET, C#, MSSQL |
| Main Management | Command Line Interface (CLI) via SSH protocol | Graphical User Interface via Remote Desktop (RDP) |
| Control Panels | cPanel, Plesk, Webmin | Plesk (IIS acts as the native web server) |
| License Costs | Open Source (Completely Free) | Paid (OS license + possible CALs) |
The Operational Checklist: VPS and Dedicated Server
- Update the system
- Synchronize the clock
- Create an administrative user
- Configure SSH
- Disable root access and passwords
- Enable the firewall
- Slow down scanners with Fail2ban
- Install essential services: Only now, with the machine updated, synchronized, and secured, can you proceed to install your web stack (Apache, Nginx, MySQL, or Docker).
How to Manage Migration Without Downtime?
To manage a migration without incurring downtime, proactively lower the TTL (Time To Live) of your DNS records to 300 seconds to speed up propagation before changing the DNS. Before the switch, copy the files to the new server using “rsync”. Then, import the database and verify the site by temporarily using the hosts file so you can perform checks on the new IP without altering the public DNS just yet.
Servereasy answers:
Can I migrate from a VPS to a Dedicated Server without changing my IP?
This depends entirely on your provider’s network infrastructure. This transition without an IP change is only possible if the infrastructure supports the assignment of Failover IPs (or Floating IPs) that can be detached from the VPS and reassigned to the bare-metal server. Otherwise, changing the IP is mandatory.
Is it really necessary to disable root access? Isn't a strong password enough?
Yes. Even with an extremely long password, keeping the root user active provides automated attackers with half of the necessary credentials (the username). Disabling it and using SSH keys for a different user drastically reduces the risk of compromise at its root.
How long does a complete migration take?
The actual file transfer time depends on the volume of data and available bandwidth. However, the “downtime” perceived by your end users, if the migration (via rsync) and DNS updates are handled correctly, is minimized.
Which ports should remain open on a newly configured firewall?
By default, absolutely none. The standard configuration of a security firewall relies on the concept of “Default Deny” (block all inbound traffic). Starting from this closed baseline, you will selectively open only what your application requires—typically port 22 for SSH connections and ports 80/443 for web traffic.
Our mission is to provide scalable, secure, and consistently reliable hosting and IT infrastructure solutions tailored to both individuals and businesses.
We believe hosting should be simple and transparent; that is why we invest in cutting-edge technologies and proprietary protection systems, ensuring performance and continuity in any situation.
With over 15 years of experience, we support our clients’ digital growth through expert assistance and constant innovation.
www.servereasy.it