Product Tour: Secure Hosting and Per-Site Access

Give someone access to one website, not the whole server. This tour creates sites as a member, grants site-only SSH, and tries to reach another member's resources — which must be refused.

Version: release 81fce3de6 (2026-11-03)Plan: Free (all steps); user groups and roles need ProTest date: 2026-11-03Environment: test lab: one master + five managed Linux nodes (VMs)Material: recording and screenshots pending

Walkthrough

A member account creates a static website and a PHP-FPM website (PHP 8.3) in the member panel, plus an FTP account for one site.
Add a database and a certificate for the site (shown in the recording; not part of the 2026-11-03 test run).
An administrator grants time-limited SSH/SFTP access to that one site. The member logs in with a key and lands inside that site only.
A second member tries to open the first member's sites, files, site tasks, SSH grants, FTP accounts, PHP pools and their logs, backups, domains, website and WAF logs, reverse-proxy and forwarding rules.
Every attempt is refused — with exactly the same answer as for an ID that does not exist, so the refusal does not reveal what exists.
The administrator revokes the SSH grant; the open session is dropped.

Screenshot pending — D1-a Member panel: two sites, FTP account, site SSH grant with expiry A real, irreversibly redacted capture from a test environment will be placed here

Recording pending — D1-b Second member: cross-site request refused (bilingual message) A real, irreversibly redacted capture from a test environment will be placed here

Test record

Test record
Product version	build 81fce3de6 (Business bundle; every step above uses features that are in Free)
Date	2026-11-03, 21:07–21:50 UTC
Environment	test lab: a master and five managed nodes (KVM and Proxmox VE test hosts); no production systems or customer data
How it was driven	as a user — member panel, WHMCS client area and SFTP. SSH and SQL were used only to check results.
Isolation check script	72 checks passed, 0 failed
Cross-member access	refused in both directions for sites, files, site tasks, SSH grants, FTP, PHP pools and logs, backups, domains, website/WAF logs, reverse proxy and forwarding
Site SSH	a 24-hour grant could log in and stayed confined to its site; out-of-range durations were refused; after revoking, the live session was dropped in under 7 seconds
FTP password	shown once on create / regenerate; never returned again by lists or the API
Manual intervention	none in the steps above; steps that need an administrator’s step-up 2FA code (for example a member’s personal file manager) were not run in this pass
Known issue found	after regenerating an FTP password, the running FTP service keeps accepting the old one until it is restarted (tracked for the next release)

Limits and prerequisites

Isolation separates sites from each other; it is not a promise about what happens if the server’s root account itself is compromised.
A site that is moved to a shared Apache (mod_php) instance gives up its per-site separation; per-site instances are the default.
Site SSH is key-only and time-limited; permanent access is a separate administrator permission. One active grant per site; the key password is shown once.
Restart the site’s FTP service after regenerating its password.

← All tour topics Next: Scheduled backup and restore Request sandbox access

The sandbox is invite-only and not open yet; there is no public live demo. Please do not send passwords, keys or customer data with a request.

N Nodekeeper

All-in-one Linux server management agent.

Product

Features Pricing Docs

Company

About Contact 中文

Support

[email protected] WhatsApp: +817093066006