Looking for an easy tool to automate your Docker setup? 

Check out STACK BUILDER (Web application stack builder)

Let’s see how it works with a simple example!

Case 1: Setting up a basic nginx web server on Digital Ocean cloud.

Just log in to your account, click on STACK BUILDER, and then hit "Build your stack".

Since we don’t have any project, we need to create a new one. Simply click on the "Create new project" button, and you'll see the screen as shown in the screenshot below. From there, you can fill in the details according to your needs.

Here, enter the project name and other necessary details based on your needs. In this example, we'll set up a web server using Nginx. Go to the "Services" option and click on "Add from template"

Here, you'll find various ready-to-use Docker service templates. In our case, select Nginx, as shown below:

Next, you can adjust different settings like App name, Domain, Ports, Environment, Volumes, Networking, Docker Restart Policy, and more. In our case, we'll configure it without a domain name and using default predefined settings.

Once you've set up all the parameters, click on the "Continue" button. Then, choose your preferred cloud provider. In our example, we've selected DigitalOcean.

After selecting Digital Ocean, you'll see a screen like the one below, where you'll need to provide your Personal Access Token.

To get your Personal Access Token, follow the steps outlined in this link: https://try.direct/clouds/deploy-to-digital-ocean

Once you've generated your Personal Access Token on Digital Ocean, paste it in the designated field, as shown in the screenshot below:

Here, you can choose the Datacenter, Hardware configuration, and Base image by simply clicking on them. You can also select the number of Instances you need.

Next, click on continue button, and you will see your Docker-compose file in the next screen:

Review the docker-compose content, then click on the "Deploy" button to start your deployment automatically. It will take approximately 15 minutes. You can also check the runtime logs.

Once, the process is completed, you will see the screenshot similar to the below:

You'll notice the droplet has been automatically created in your DigitalOcean account. To access the Nginx webpage, simply enter your domain name or server IP address.

We have successfully set up Nginx web-server on Docker using Stack Builder.


Looking for an easy tool to automate your Docker setup? 
Check out STACK BUILDER (Web application stack builder)

Let’s see how it works with a simple example!

Case 1: Setting up a basic nginx web server on Digital Ocean cloud.
Just log in to your account, click on STACK BUILDER, and then hit "Build your stack".


 


You will see the screen as shown below:


 


Since we don’t have any project, we need to create a new one. Simply click on the "Create new project" button, and you'll see the screen as shown in the screenshot below. From there, you can fill in the details according to your needs.



 


Here, enter the project name and other necessary details based on your needs. In this example, we'll set up a web server using Nginx. Go to the "Services" option and click on "Add from template"


 


Here, you'll find various ready-to-use Docker service templates. In our case, select Nginx, as shown below:



 


Next, you can adjust different settings like App name, Domain, Ports, Environment, Volumes, Networking, Docker Restart Policy, and more. In our case, we'll configure it without a domain name and using default predefined settings.
Once you've set up all the parameters, click on the "Continue" button. Then, choose your preferred cloud provider. In our example, we've selected DigitalOcean.


 


After selecting Digital Ocean, you'll see a screen like the one below, where you'll need to provide your Personal Access Token.
To get your Personal Access Token, follow the steps outlined in this link: https://try.direct/clouds/deploy-to-digital-ocean
Once you've generated your Personal Access Token on Digital Ocean, paste it in the designated field, as shown in the screenshot below:


 


Here, you can choose the Datacenter, Hardware configuration, and Base image by simply clicking on them. You can also select the number of Instances you need.


 


Next, click on continue button, and you will see your Docker-compose file in the next screen:


 


Review the docker-compose content, then click on the "Deploy" button to start your deployment automatically. It will take approximately 15 minutes. You can also check the runtime logs.


 


Once, the process is completed, you will see the screenshot similar to the below:


 


You'll notice the droplet has been automatically created in your DigitalOcean account. To access the Nginx webpage, simply enter your domain name or server IP address.


 


We have successfully set up Nginx web-server on Docker using Stack Builder.

Install Nginx on DigitalOcean using the ultimate simplifier for docker-compose builds and seamless deployment to the cloud | TryDirect

Install NGINX with application Stack Builder

Adding a public key to your server is an important step for enhancing security and enabling secure, password-free logins using SSH (Secure Shell).

Generate a Key Pair: Use ssh-keygen to create a new SSH key pair if you don't already have one. This includes both a public and a private key.

Locate the Public Key: Use cat ~/.ssh/id_rsa.pub to display your public key. This key needs to be copied to your server.

Copy the Public Key to Your Server: Use the ssh-copy-id command or manually append the public key to the ~/.ssh/authorized_keys file on your server.

Test Your Connection: Attempt to SSH into your server using ssh your_username@your_server_ip to confirm that you can log in without a password prompt, verifying that the setup was successful.

Here’s a step by step guide on how to do it, explained in simple terms:

If you do not already have an SSH key pair (which consists of a public and a private key), you will need to create one. On your local computer, open a terminal or command prompt and run the following command:

-t rsa specifies the type of key to create, in this case RSA.

-b 2048 specifies the key length, with 2048 bits being a good balance of security and performance.

Follow the prompts to specify where to save the key (by default, this is in the .ssh directory under your user directory) and whether to secure the key with a passphrase.

Once the key pair is generated, you need to find your public key. It’s usually named id_rsa.pub or similar, located in the .ssh directory. You can display the key with the command:

This command prints the contents of your public key file. It will look something like this:

Step 3: Copy the Public Key to Your Server

To enable authentication with your public key, you need to add it to a special file in the user account you are using on the server. This file is located at ~/.ssh/authorized_keys.

You can copy the public key to your server by using the ssh-copy-id command. Replace your_username@your_server_ip with your actual username and server IP address:

If ssh-copy-id is not available, you can manually add the key by appending it to the authorized_keys file. You can do this by running: 

This command connects to your server, creates the .ssh directory if it doesn’t exist, and appends the public key to the authorized_keys file.

Finally, test your SSH connection to ensure that the key has been added successfully and you can log in without a password (unless you set a passphrase, which you will need to enter):

If everything is set up correctly, you should be logged into your server without needing to enter your user password.

Permissions: Make sure that the .ssh directory and the authorized_keys file on the server have strict permissions set. This can be done using:

Security: Always keep your private key secure and never share it. Use a strong passphrase for an extra layer of security.

Security Enhancement: Adding your public key to the server's authorized_keys enables secure, password-less authentication, which is more secure against brute-force attacks than password-based login methods.

Permissions: Ensure that the .ssh directory and the authorized_keys file on the server have proper permissions set to prevent unauthorized access. This means setting the directory to 700 and the file to 600.

Private Key Safety: The private key should remain confidential and never be shared. Securing it with a passphrase provides an additional layer of security.

Convenience and Efficiency: Using SSH keys speeds up the login process and can facilitate automated processes by allowing scripts and programs to securely access the server without manual password entry.

Still have difficulties ?  Join our community discord channel, get help and free consultation! 

Need a quick help from the Linux expert ? 

Get help from tech expert

Adding a public key to your server is an important step for enhancing security and enabling secure, password-free logins using SSH (Secure Shell).

Major Steps:
Generate a Key Pair: Use ssh-keygen to create a new SSH key pair if you don't already have one. This includes both a public and a private key.
Locate the Public Key: Use cat ~/.ssh/id_rsa.pub to display your public key. This key needs to be copied to your server.
Copy the Public Key to Your Server: Use the ssh-copy-id command or manually append the public key to the ~/.ssh/authorized_keys file on your server.
Test Your Connection: Attempt to SSH into your server using ssh your_username@your_server_ip to confirm that you can log in without a password prompt, verifying that the setup was successful.
Here’s a step by step guide on how to do it, explained in simple terms:

Step 1: Generate a Key Pair
If you do not already have an SSH key pair (which consists of a public and a private key), you will need to create one. On your local computer, open a terminal or command prompt and run the following command:

 

-t rsa specifies the type of key to create, in this case RSA.
-b 2048 specifies the key length, with 2048 bits being a good balance of security and performance.
Follow the prompts to specify where to save the key (by default, this is in the .ssh directory under your user directory) and whether to secure the key with a passphrase.

Step 2: Locate the Public Key
Once the key pair is generated, you need to find your public key. It’s usually named id_rsa.pub or similar, located in the .ssh directory. You can display the key with the command:

 

This command prints the contents of your public key file. It will look something like this:

 


Step 3: Copy the Public Key to Your Server

To enable authentication with your public key, you need to add it to a special file in the user account you are using on the server. This file is located at ~/.ssh/authorized_keys.
You can copy the public key to your server by using the ssh-copy-id command. Replace your_username@your_server_ip with your actual username and server IP address:

 

If ssh-copy-id is not available, you can manually add the key by appending it to the authorized_keys file. You can do this by running: 
This command connects to your server, creates the .ssh directory if it doesn’t exist, and appends the public key to the authorized_keys file.

Step 4: Test Your Connection
Finally, test your SSH connection to ensure that the key has been added successfully and you can log in without a password (unless you set a passphrase, which you will need to enter):

ssh your_username@yourserver_ip 

If everything is set up correctly, you should be logged into your server without needing to enter your user password.

Additional Tips
Permissions: Make sure that the .ssh directory and the authorized_keys file on the server have strict permissions set. This can be done using:

 

 

Security: Always keep your private key secure and never share it. Use a strong passphrase for an extra layer of security.

Important Conclusions:
Security Enhancement: Adding your public key to the server's authorized_keys enables secure, password-less authentication, which is more secure against brute-force attacks than password-based login methods.
Permissions: Ensure that the .ssh directory and the authorized_keys file on the server have proper permissions set to prevent unauthorized access. This means setting the directory to 700 and the file to 600.
Private Key Safety: The private key should remain confidential and never be shared. Securing it with a passphrase provides an additional layer of security.
Convenience and Efficiency: Using SSH keys speeds up the login process and can facilitate automated processes by allowing scripts and programs to securely access the server without manual password entry.

Still have difficulties ?  Join our community discord channel, get help and free consultation! 
Need a quick help from the Linux expert ? 
 
 


Learn how to securely add a public key to your server. Enhance your server's security and simplify authentication processes effortlessly

How to add public key to your server

We are happy to introduce Stack Builder (beta) – a tool to Seamless Cloud Deployments! 🌐✨

Stack Builder was developed in response to multiple customer requests, and our aim was to keep it as simple as possible. While it is currently in beta, you can still enjoy its features.

Cloud Freedom: Explore the clouds like never before! Whether it's Digital Ocean, Hetzner Cloud, Linode, or beyond – Stack Builder empowers you to experiment and find the perfect cloud match for your projects.

DevOps Simplicity: DevOps can be as easy as 1-2-3! With our user-friendly interface and step-by-step guides, even beginners can become cloud maestros in no time.

Time Savings for Developers: The tool is perfect for developers who want to showcase their applications in the cloud, especially when considering the time spent.

combine various solutions available as Docker images, including those from Docker Hub. 

integrate your own application or set of applications into a solution  that results in a single Docker Compose file. 

This comes with the  ability to select the cloud and instantly deploy the solution, complete  with automatic infrastructure setup, VPS server, networks, firewalls.

"Great tool if you understand the concept of docker compose" 

"I was drowning in cloud complexity until I found TryDirect. Now, deploying applications feels like a walk in the cloud!"

"I was using OroCommerce on Google Cloud but then I wanted to try some other clouds, TryDirect helped me to setup oro on Hetzner Cloud and did that easy"    

We are happy to introduce Stack Builder (beta) – a tool to Seamless Cloud Deployments! 🌐✨

Stack Builder was developed in response to multiple customer requests, and our aim was to keep it as simple as possible. While it is currently in beta, you can still enjoy its features.

🌟 Why Stack Builder:

Cloud Freedom: Explore the clouds like never before! Whether it's Digital Ocean, Hetzner Cloud, Linode, or beyond – Stack Builder empowers you to experiment and find the perfect cloud match for your projects.
DevOps Simplicity: DevOps can be as easy as 1-2-3! With our user-friendly interface and step-by-step guides, even beginners can become cloud maestros in no time.
Time Savings for Developers: The tool is perfect for developers who want to showcase their applications in the cloud, especially when considering the time spent.

✨ What you can do with Stack Builder:

With Stack Builder, you can: 
combine various solutions available as Docker images, including those from Docker Hub. 
integrate your own application or set of applications into a solution  that results in a single Docker Compose file. 
This comes with the  ability to select the cloud and instantly deploy the solution, complete  with automatic infrastructure setup, VPS server, networks, firewalls.

🌟 What DevOps Heroes Say:

"Great tool if you understand the concept of docker compose" 
"I was drowning in cloud complexity until I found TryDirect. Now, deploying applications feels like a walk in the cloud!"
"I was using OroCommerce on Google Cloud but then I wanted to try some other clouds, TryDirect helped me to setup oro on Hetzner Cloud and did that easy"    


👉 Try it today, its FREE !


Cloudily Yours, TryDirect Team

Stack Builder (beta) – a tool to Seamless Cloud Deployments! Compose your solution from docker images including your personal apps. 



🚀 Introducing Stack Builder (beta)

🚀 Introducing Bastillion to Our Platform!

Are you in search of a solution to simplify secure remote access to your servers and network devices while ensuring top-notch security practices and compliance? Look no further than Bastillion, the open-source, web-based SSH console, and file transfer tool.

Whether you are an IT administrator, a managed service provider, or a cloud service provider, Bastillion has got you covered. It is designed to streamline remote access management, enhance security through role-based access control, and meet compliance requirements.

Getting started with Bastillion is a breeze! Our deployment process sets up Bastillion as a Docker container, complete with all the necessary configuration files, including docker-compose.yml. This empowers you to independently manage your server and carry out your development tasks without the need for additional assistance—simply follow the provided steps.

For more details, visit https://try.direct/applications/bastillion

🚀 Introducing Bastillion to Our Platform!

🔒 What is Bastillion 
Are you in search of a solution to simplify secure remote access to your servers and network devices while ensuring top-notch security practices and compliance? Look no further than Bastillion, the open-source, web-based SSH console, and file transfer tool.

🌐 Who Can Benefit? 
Whether you are an IT administrator, a managed service provider, or a cloud service provider, Bastillion has got you covered. It is designed to streamline remote access management, enhance security through role-based access control, and meet compliance requirements.

📚 How to Begin? 
Getting started with Bastillion is a breeze! Our deployment process sets up Bastillion as a Docker container, complete with all the necessary configuration files, including docker-compose.yml. This empowers you to independently manage your server and carry out your development tasks without the need for additional assistance—simply follow the provided steps.
For more details, visit https://try.direct/applications/bastillion

Simplify Bastillion deployment on your own cloud-based VPS effortlessly | TryDirect

Meet Bastillion at TryDirect 

Introducing HashiCorp Vault to our platform!

Whether you're a software developer or a system administrator, the HashiCorp Vault stack has got your interests covered. Tailor-made for contemporary DevOps and cloud-native configurations, it streamlines secrets administration and ensures top-tier security measures.

After successfully deploying HashiCorp Vault, an email notification will gracefully walk you through accessing both the server and the Vault Web UI. Just follow the provided steps to wrap up the setup hassle-free.

Introducing HashiCorp Vault to our platform!

🌐 Who's in for Gains? 
Whether you're a software developer or a system administrator, the HashiCorp Vault stack has got your interests covered. Tailor-made for contemporary DevOps and cloud-native configurations, it streamlines secrets administration and ensures top-tier security measures.

📚 How to Start? 
After successfully deploying HashiCorp Vault, an email notification will gracefully walk you through accessing both the server and the Vault Web UI. Just follow the provided steps to wrap up the setup hassle-free.


TRY NOW !

HashiCorp Vault painless deployment to your cloud account

HashiCorp Vault has arrived!

We are happy to announce that Nginx Proxy Manager,  is now available as a companion app to almost any stack on our platform!

Nginx Proxy Manager – your ultimate solution, ready for installation from our platform!

🔐 Why Opt for Nginx Proxy Manager: Bid farewell to the intricacies of traffic routing. 

Nginx Proxy Manager effortlessly directs traffic to your websites, whether they're hosted at home or elsewhere. What's more, it comes with complimentary SSL capabilities, eliminating the necessity for Nginx or Letsencrypt expertise. Simplify SSL generation and seamlessly proxy your Docker containers with unparalleled ease.

👨‍💻 Navigating Nginx Proxy Manager: Nginx Proxy Manager stands out as a highly recommended companion app for efficient web app management. Designed to handle numerous web applications at the backend, it's your secret recipe for streamlined operations. For added convenience, we also recommend integrating Portainer CE.

Don't forget, configuring the proxy host in Nginx Proxy Manager post-deployment is your gateway to seamless web traffic management.

Elevate your web traffic strategy with Nginx Proxy Manager – now at your fingertips!

We are happy to announce that Nginx Proxy Manager,  is now available as a companion app to almost any stack on our platform!
Nginx Proxy Manager – your ultimate solution, ready for installation from our platform!

🔐 Why Opt for Nginx Proxy Manager: Bid farewell to the intricacies of traffic routing. 
Nginx Proxy Manager effortlessly directs traffic to your websites, whether they're hosted at home or elsewhere. What's more, it comes with complimentary SSL capabilities, eliminating the necessity for Nginx or Letsencrypt expertise. Simplify SSL generation and seamlessly proxy your Docker containers with unparalleled ease.

👨‍💻 Navigating Nginx Proxy Manager: Nginx Proxy Manager stands out as a highly recommended companion app for efficient web app management. Designed to handle numerous web applications at the backend, it's your secret recipe for streamlined operations. For added convenience, we also recommend integrating Portainer CE.

Don't forget, configuring the proxy host in Nginx Proxy Manager post-deployment is your gateway to seamless web traffic management.
Elevate your web traffic strategy with Nginx Proxy Manager – now at your fingertips!

Optimize web traffic management with Nginx Proxy Manager! Simplify traffic routing, secure websites with free SSL, and streamline Docker container proxying.

Nginx Proxy Manager is now available for install

🚀 Exciting News Update from TryDirect!


We're excited to share the news that FastAPI is now accessible for deployment on the TryDirect platform.

Simplifying the journey, TryDirect orchestrates a comprehensive VPS server setup, complete with all essential software. 

This empowers developers to seamlessly initiate their FastAPI projects in their favored cloud environment.

FastAPI, a globally acclaimed Python web framework, has ushered in a transformative paradigm shift for Python software development. Its exceptional speed and user-friendly design have revolutionized the process of API creation. Witness the remarkable transformation first-hand today! 🌐

Additionally, we recommend incorporating Portainer CE and Nginx Proxy Manager into your FastAPI deployment strategy. This integration empowers developers to proficiently manage Docker containers while effortlessly configuring domain and SSL settings. By embracing these tools, you'll optimize your management workflow and elevate your deployment experience. 🛠️🌐🔒

🚀 Exciting News Update from TryDirect!

We're excited to share the news that FastAPI is now accessible for deployment on the TryDirect platform.
Simplifying the journey, TryDirect orchestrates a comprehensive VPS server setup, complete with all essential software. 
This empowers developers to seamlessly initiate their FastAPI projects in their favored cloud environment.

FastAPI, a globally acclaimed Python web framework, has ushered in a transformative paradigm shift for Python software development. Its exceptional speed and user-friendly design have revolutionized the process of API creation. Witness the remarkable transformation first-hand today! 🌐

Additionally, we recommend incorporating Portainer CE and Nginx Proxy Manager into your FastAPI deployment strategy. This integration empowers developers to proficiently manage Docker containers while effortlessly configuring domain and SSL settings. By embracing these tools, you'll optimize your management workflow and elevate your deployment experience. 🛠️🌐🔒

Deploy FastAPI on your own VPS in few clicks, test, play

FastAPI has arrived!

Exciting tidings await as we unveil remarkable news! We're thrilled to announce the availability of OpenResty, the dynamic web platform integrating Nginx and LuaJIT, for seamless deployment on your preferred cloud infrastructure, courtesy of TryDirect.

Are you a developer or a pioneering startup in pursuit of a rapid, adaptable, and user-friendly platform that simplifies the creation of web applications and services? Look no further, for OpenResty is your unparalleled answer.

This is your golden opportunity to propel your projects to new heights. Venture to our website to discover the wealth of captivating details on harnessing the enchantment of OpenResty. Let's embark on a shared journey of crafting web development into a truly delightful and seamless experience! 🌐🌟

🚀 Greetings, our vibrant community!

Exciting tidings await as we unveil remarkable news! We're thrilled to announce the availability of OpenResty, the dynamic web platform integrating Nginx and LuaJIT, for seamless deployment on your preferred cloud infrastructure, courtesy of TryDirect.

Are you a developer or a pioneering startup in pursuit of a rapid, adaptable, and user-friendly platform that simplifies the creation of web applications and services? Look no further, for OpenResty is your unparalleled answer.

This is your golden opportunity to propel your projects to new heights. Venture to our website to discover the wealth of captivating details on harnessing the enchantment of OpenResty. Let's embark on a shared journey of crafting web development into a truly delightful and seamless experience! 🌐🌟


Deploy OpenResty to your own VPS in one click, play, test and learn it.

OpenResty is ready for deployment

Enhancing Website Security and Performance

In today's digital landscape, website security, and performance are of utmost importance. That's where Cloudflare comes in. Cloudflare is a leading web infrastructure company that offers a comprehensive suite of services designed to protect and optimize websites. By leveraging Cloudflare, businesses can benefit from enhanced website security, protection against DDoS attacks, increased stability for high-traffic websites, and streamlined SSL certificate generation.

The Ease of Generating SSL Certificates with Cloudflare

SSL certificate generation is a crucial aspect of securing websites. Cloudflare simplifies this process by offering a user-friendly solution. By generating SSL certificates on Cloudflare, users can enjoy a hassle-free experience. This approach eliminates the need for manual configuration on the user's side, such as with WordPress. Cloudflare takes care of the certificate generation, making it easier for users to manage their SSL certificates effectively. Additionally, by generating certificates on Cloudflare, users can reduce dependencies and rely on a centralized platform for all their security needs.

Website Security and Stability with Cloudflare

When it comes to website security, Cloudflare is a powerful ally. Cloudflare's robust security features provide a layer of protection against various threats, including DDoS attacks and other malicious activities. With Cloudflare, businesses can ensure the stability of their websites, mitigate security risks, and maintain a seamless user experience. Real-world examples and case studies demonstrate how Cloudflare has successfully safeguarded websites, protecting them from potential vulnerabilities.

Unleashing Flexibility with User-Generated SSL Certificates

While Cloudflare offers a convenient solution for SSL certificate generation, there are instances where user-generated certificates may be preferred. By generating SSL certificates on the user's side, users gain more control and flexibility over their certificate management. This flexibility allows businesses to adapt their security measures to specific requirements and preferences. Depending on the scenario, user-generated SSL certificates can provide a tailored solution that aligns precisely with their needs.

How to Generate an SSL Certificate Using Cloudflare

Step-by-Step Guide: Generating an SSL Certificate on Cloudflare

Generating an SSL certificate using Cloudflare is a straightforward process. Here is a step-by-step guide to help you through the certificate generation process:

Access your Cloudflare account and navigate to the SSL/TLS settings.

Choose the desired SSL certificate option that aligns with your website's needs.

Follow the prompts and provide the necessary information for the certificate generation.

Verify the successful generation of your SSL certificate.

Validating a Let's Encrypt Certificate on a Site Already Active on Cloudflare

Validating a Let's Encrypt certificate on a site that is already active on Cloudflare is an important step in ensuring secure connections. Here's the process to validate your Let's Encrypt certificate:

Enable the Let's Encrypt certificate option in your Cloudflare SSL/TLS settings.

Follow the validation process outlined by Let's Encrypt to authenticate your domain ownership.

Once validated, Cloudflare will automatically manage and renew the Let's Encrypt certificate for your site.

Using Let's Encrypt certificates in conjunction with Cloudflare offers numerous benefits, including enhanced security and encryption for your website. By combining the power of Let's Encrypt and Cloudflare, you can ensure the highest level of security and trustworthiness for your online presence.

At TryDirect, we provide you with the flexibility to choose between Cloudflare certificates and the pre-installed Certbot when deploying your application. However, it is important to note that using both options simultaneously may result in connection issues. Therefore, it is essential to select one approach based on your specific needs.

If you decide not to use Cloudflare SSL, you demonstrate courage and choose the harder path. However, this decision grants you greater control over your website's security, as you are not reliant on Cloudflare for SSL management. By opting for this route, you can implement security measures tailored to your unique requirements and maintain full ownership of your SSL certificates.

Our team is here to support you in making the best choice for your website's security. Whether you choose Cloudflare certificates or prefer to handle SSL management independently, we will provide the necessary guidance and expertise to ensure a secure and reliable environment for your online presence.

Feel free to reach out to us if you have any questions or require further assistance in determining the best SSL approach for your website.

All that you need is just connect your instance via SSH and install certbot using following command

For any help regarding your website  performance and security enhancement contact us at or explore our services

Enhancing Website Security and Performance
In today's digital landscape, website security, and performance are of utmost importance. That's where Cloudflare comes in. Cloudflare is a leading web infrastructure company that offers a comprehensive suite of services designed to protect and optimize websites. By leveraging Cloudflare, businesses can benefit from enhanced website security, protection against DDoS attacks, increased stability for high-traffic websites, and streamlined SSL certificate generation.

The Ease of Generating SSL Certificates with Cloudflare
SSL certificate generation is a crucial aspect of securing websites. Cloudflare simplifies this process by offering a user-friendly solution. By generating SSL certificates on Cloudflare, users can enjoy a hassle-free experience. This approach eliminates the need for manual configuration on the user's side, such as with WordPress. Cloudflare takes care of the certificate generation, making it easier for users to manage their SSL certificates effectively. Additionally, by generating certificates on Cloudflare, users can reduce dependencies and rely on a centralized platform for all their security needs.

Website Security and Stability with Cloudflare
When it comes to website security, Cloudflare is a powerful ally. Cloudflare's robust security features provide a layer of protection against various threats, including DDoS attacks and other malicious activities. With Cloudflare, businesses can ensure the stability of their websites, mitigate security risks, and maintain a seamless user experience. Real-world examples and case studies demonstrate how Cloudflare has successfully safeguarded websites, protecting them from potential vulnerabilities.

Unleashing Flexibility with User-Generated SSL Certificates
While Cloudflare offers a convenient solution for SSL certificate generation, there are instances where user-generated certificates may be preferred. By generating SSL certificates on the user's side, users gain more control and flexibility over their certificate management. This flexibility allows businesses to adapt their security measures to specific requirements and preferences. Depending on the scenario, user-generated SSL certificates can provide a tailored solution that aligns precisely with their needs.

How to Generate an SSL Certificate Using Cloudflare
Step-by-Step Guide: Generating an SSL Certificate on Cloudflare
Generating an SSL certificate using Cloudflare is a straightforward process. Here is a step-by-step guide to help you through the certificate generation process:
Access your Cloudflare account and navigate to the SSL/TLS settings.
Choose the desired SSL certificate option that aligns with your website's needs.
Follow the prompts and provide the necessary information for the certificate generation.
Verify the successful generation of your SSL certificate.

Validating a Let's Encrypt Certificate on a Site Already Active on Cloudflare
Validating a Let's Encrypt certificate on a site that is already active on Cloudflare is an important step in ensuring secure connections. Here's the process to validate your Let's Encrypt certificate:
Enable the Let's Encrypt certificate option in your Cloudflare SSL/TLS settings.
Follow the validation process outlined by Let's Encrypt to authenticate your domain ownership.
Once validated, Cloudflare will automatically manage and renew the Let's Encrypt certificate for your site.
Using Let's Encrypt certificates in conjunction with Cloudflare offers numerous benefits, including enhanced security and encryption for your website. By combining the power of Let's Encrypt and Cloudflare, you can ensure the highest level of security and trustworthiness for your online presence.

Letsencrypt Certbot 
At TryDirect, we provide you with the flexibility to choose between Cloudflare certificates and the pre-installed Certbot when deploying your application. However, it is important to note that using both options simultaneously may result in connection issues. Therefore, it is essential to select one approach based on your specific needs.
If you decide not to use Cloudflare SSL, you demonstrate courage and choose the harder path. However, this decision grants you greater control over your website's security, as you are not reliant on Cloudflare for SSL management. By opting for this route, you can implement security measures tailored to your unique requirements and maintain full ownership of your SSL certificates.

Our team is here to support you in making the best choice for your website's security. Whether you choose Cloudflare certificates or prefer to handle SSL management independently, we will provide the necessary guidance and expertise to ensure a secure and reliable environment for your online presence.
Feel free to reach out to us if you have any questions or require further assistance in determining the best SSL approach for your website.

All that you need is just connect your instance via SSH and install certbot using following command

Ubuntu Linux command line:

 

Execute to generate certificates:

 

Follow instructions provided by certbot
For any help regarding your website  performance and security enhancement contact us at or explore our services

Which approach is better to setup SSL on your website for better security, Cloudflare or self-deployed Certbot?

CloudFlare or self-deployed Certbot for your web-site SSL?

SSL certificates have become a modern necessity. Organizations operating online need to add them to their websites for secure transactions and user information protection. They are also effective at mitigating cyberattacks.

However, not many people are familiar with the ways to obtain an SSL certificate. Those who are aware often do not know how to check their SSL certificate’s validity. These small problems can lead to major inconveniences.

This article aims to explain Let’s Encrypt and Certbot, as well as the most efficient methods for checking SSL certificate installation and validity.

Let’s Encrypt is a free and automated certificate authority that provides TLS/SSL certificates to compatible clients. You can use them to encrypt data and communications for your website users.

Let’s Encrypt is developed by the Internet Security Research Group (ISRG). The main purpose of these digital certificates is to enable HTTPS for websites at no cost. The paid certificates market is quite vast, but Let’s Encrypt offers a free alternative.

Let’s Encrypt offers two types of certificates:

Both types of certificates are issued for 90 days and are automatically renewed after installation.

These certificates are domain-validated and do not require a dedicated IP address.

Let’s Encrypt provides a straightforward way to obtain certificates. The process is free, does not require email verification, and is fully automated.

Certbot is a command-line client application that fetches certificates from Let’s Encrypt, an open certificate authority. It deploys the certificates to a web server after obtaining them. It is an easy-to-use client that works in five simple steps:

Install Certbot, which is available in most Linux distro repositories or as a snap package.

Post-configure your web server if needed.

These SSL/TLS certificates are deployed to your web server automatically. You can also use certbot-auto to always fetch the latest version.

Another related term is the Webroot plugin for Certbot. It works by placing a file in a web-accessible directory and using the HTTP-01 challenge to prove domain ownership. You must specify the web server's root directory during the process.

All issued certificates can be found in: /etc/letsencrypt/live/$domain

It provides a command-line interface, compatible with HTTP websites with port 80 open.

You can choose from various server types, including virtual private servers, dedicated servers, and cloud-hosted servers, accessible via SSH.

All Certbot certificates are auto-renewable every 90 days, with renewal recommended every 60 days for continuous coverage.

The Best Ways to Check if an SSL Certificate is Installed and Valid

1. Open a terminal and use the following command to check the SSL certificate installation and validity:

2. This command will display details about the SSL certificate. Look for the verification status code. A status code of "0" indicates successful verification. If the status is "20," the certificate is not configured correctly, and you will see an error: "unable to get local issuer certificate."

4. Verify the hostname. A status code of "0" means the verification was successful. If there's an error, you will see a return code "62" and the error "Hostname Mismatch."

5. To verify a certificate issued to an IP address instead of a hostname, use the -verify_ip switch:

In the Certificates - Local Computer console, navigate through the certificates to see which ones are installed.

Download Sigcheck from the official Microsoft website.

After downloading, extract and install the application.

Open a command prompt and enter the following command:

4. This command downloads the trusted Microsoft root certificate list and displays the valid certificates.

These methods are widely trusted. However, the most preferred way is to use the Linux command line for quick and accurate results.

Did not find the solution? Join our discord channel and consult with our developers
Still don't know how to check? Get system administration help from our partners

https://www.sslshopper.com/ssl-checker.html

https://serverfault.com/questions/589590/understanding-the-output-of-openssl-s-client

https://stackoverflow.com/questions/24992976/openssl-telling-certificate-has-expired-when-it-has-not

https://community.letsencrypt.org/t/problem-with-certificate-has-expired/161013/2

SSL certificates have become a modern necessity. Organizations operating online need to add them to their websites for secure transactions and user information protection. They are also effective at mitigating cyberattacks.
However, not many people are familiar with the ways to obtain an SSL certificate. Those who are aware often do not know how to check their SSL certificate’s validity. These small problems can lead to major inconveniences.
This article aims to explain Let’s Encrypt and Certbot, as well as the most efficient methods for checking SSL certificate installation and validity.

Let’s Encrypt
Let’s Encrypt is a free and automated certificate authority that provides TLS/SSL certificates to compatible clients. You can use them to encrypt data and communications for your website users.
Let’s Encrypt is developed by the Internet Security Research Group (ISRG). The main purpose of these digital certificates is to enable HTTPS for websites at no cost. The paid certificates market is quite vast, but Let’s Encrypt offers a free alternative.

Let’s Encrypt offers two types of certificates:
Standard Single Domain SSL
Wildcard SSL
Both types of certificates are issued for 90 days and are automatically renewed after installation.

Benefits of Let’s Encrypt Certificates
These certificates are domain-validated and do not require a dedicated IP address.
Let’s Encrypt provides a straightforward way to obtain certificates. The process is free, does not require email verification, and is fully automated.
Enrollment is easy to start and manage.

Certbot
Certbot is a command-line client application that fetches certificates from Let’s Encrypt, an open certificate authority. It deploys the certificates to a web server after obtaining them. It is an easy-to-use client that works in five simple steps:
Install Certbot, which is available in most Linux distro repositories or as a snap package.
Run Certbot.
Post-configure your web server if needed.
Enable automatic certificate renewal.
Restart the web server after renewal.
These SSL/TLS certificates are deployed to your web server automatically. You can also use certbot-auto to always fetch the latest version.
Another related term is the Webroot plugin for Certbot. It works by placing a file in a web-accessible directory and using the HTTP-01 challenge to prove domain ownership. You must specify the web server's root directory during the process.
All issued certificates can be found in: /etc/letsencrypt/live/$domain

Benefits of Certbot
It is free.
It provides a command-line interface, compatible with HTTP websites with port 80 open.
You can choose from various server types, including virtual private servers, dedicated servers, and cloud-hosted servers, accessible via SSH.
All Certbot certificates are auto-renewable every 90 days, with renewal recommended every 60 days for continuous coverage.

The Best Ways to Check if an SSL Certificate is Installed and Valid

Unix/Linux Users

Method 1:

1. Open a terminal and use the following command to check the SSL certificate installation and validity:

 

2. This command will display details about the SSL certificate. Look for the verification status code. A status code of "0" indicates successful verification. If the status is "20," the certificate is not configured correctly, and you will see an error: "unable to get local issuer certificate."

3. Check your certificate’s path:

 


If you have a single file, use:

 

4. Verify the hostname. A status code of "0" means the verification was successful. If there's an error, you will see a return code "62" and the error "Hostname Mismatch."

5. To verify a certificate issued to an IP address instead of a hostname, use the -verify_ip switch:

 

Windows Users

Method 2: Using Certificates MMC Snap-in
Press Win + R to open the Run dialog.
Type certlm.msc and press Enter.
In the Certificates - Local Computer console, navigate through the certificates to see which ones are installed.

Method 3: Using Sigcheck
Download Sigcheck from the official Microsoft website.
After downloading, extract and install the application.
Open a command prompt and enter the following command:

 

4. This command downloads the trusted Microsoft root certificate list and displays the valid certificates.
These methods are widely trusted. However, the most preferred way is to use the Linux command line for quick and accurate results.

Did not find the solution? Join our discord channel and consult with our developers
Still don't know how to check? Get system administration help from our partners


Check SSL certificates online

https://www.sslshopper.com/ssl-checker.html
https://www.digicert.com/help/

More info

https://serverfault.com/questions/589590/understanding-the-output-of-openssl-s-client
https://stackoverflow.com/questions/24992976/openssl-telling-certificate-has-expired-when-it-has-not
https://community.letsencrypt.org/t/problem-with-certificate-has-expired/161013/2

How to manage letsencrypt and certbot on your own server. Basic steps to install free SSL on your server.

Let’s Encrypt and Certbot | How to check SSL

OpenVPN is an open-source protocol that creates a secure tunnel between your device and the VPN server. OpenVPN sends encrypted data over the internet. It is one of the most reliable and widely used protocols for VPN connection.

OpenVPN uses SSL/TLS for key exchange. OpenSSL library’s encryption, authentication, and SSL certificate make VPN connection more secure.

OpenVPN supports industry-standard 256-bit AES encryption.

Any new vulnerabilities are quickly fixed due to the sizeable

Let’s create our first OpenVPN server at Digital Ocean.

Let's assume that you already have an account.

Sign in and click the “Generate New Token” button, as shown below.

Next, enter the Token name and select the token expiry term you’d like to set from the drop-down menu. It’s very important to check the Write permission. This allows TryDirect to create a Droplet in your account.

Now, click the “Generate Token” button to create an API token.

Copy and save the Token. You will need to provide this token later.

Next, log in to the TryDirect dashboard using https://try.direct/sign-in. If you don't have a TryDirect account, SIGN UP for a new account using https://try.direct/sign-up

After login, click the 'STACKS' option from the top menu, search for OpenVPN, and click it.

You will see the OpenVPN page with a description. Find the 'DEPLOY TO' button on this page, click it and select 'DIGITAL OCEAN' as shown in the below screenshot.

Next, you will be redirected to “OpenVPN—New Deployment.” Enter your domain name and your Digital Ocean API Token, which you had created earlier. Here the "BASE DOMAIN NAME" and "ADD PERSONAL ACCESS TOKEN" are mandatory. Fill in all the details required on this page.

Then select the data center region where you want to deploy the OpenVPN server.

Next, choose the server from a list and select features per your requirements.

Your OpenVPN server deployment started. It will take around 15 minutes.

At the same time, you will see a new droplet created on your Digital Ocean account.

Once the OpenVPN setup process is completed, a detailed information menu will pop up.

You will receive a notification email from TryDirect that contains a deployment-configs PDF file, the key PEM file of your server and OpenVPN configuration file with ovpn extension.

Download your “ovpn” file and save the file somewhere on your system. You will need this “ovpn” file later for the OpenVPN connection.

Now, you need to install the OpenVPN client for your OS

Go to https://openvpn.net/community-downloads/ and Download OpenVPN client.

Next, install the OpenVPN client on your system.

OpenVPN is an open-source protocol that creates a secure tunnel between your device and the VPN server. OpenVPN sends encrypted data over the internet. It is one of the most reliable and widely used protocols for VPN connection.

Why OpenVPN?

OpenVPN is available for all platforms.
OpenVPN uses SSL/TLS for key exchange. OpenSSL library’s encryption, authentication, and SSL certificate make VPN connection more secure.
OpenVPN supports industry-standard 256-bit AES encryption.
Any new vulnerabilities are quickly fixed due to the sizeable
open-source OpenVPN community.

Let’s create our first OpenVPN server at Digital Ocean.
Let's assume that you already have an account.
Sign in and click the “Generate New Token” button, as shown below.


 


Next, enter the Token name and select the token expiry term you’d like to set from the drop-down menu. It’s very important to check the Write permission. This allows TryDirect to create a Droplet in your account.


 


Now, click the “Generate Token” button to create an API token.
Copy and save the Token. You will need to provide this token later.


 


Next, log in to the TryDirect dashboard using https://try.direct/sign-in. If you don't have a TryDirect account, SIGN UP for a new account using https://try.direct/sign-up
After login, click the 'STACKS' option from the top menu, search for OpenVPN, and click it.


 


You will see the OpenVPN page with a description. Find the 'DEPLOY TO' button on this page, click it and select 'DIGITAL OCEAN' as shown in the below screenshot.


 


Next, you will be redirected to “OpenVPN—New Deployment.” Enter your domain name and your Digital Ocean API Token, which you had created earlier. Here the "BASE DOMAIN NAME" and "ADD PERSONAL ACCESS TOKEN" are mandatory. Fill in all the details required on this page.


 


Then select the data center region where you want to deploy the OpenVPN server.
Next, choose the server from a list and select features per your requirements.
At last, click the “DEPLOY” button.


 


Your OpenVPN server deployment started. It will take around 15 minutes.


 


At the same time, you will see a new droplet created on your Digital Ocean account.


 


Once the OpenVPN setup process is completed, a detailed information menu will pop up.


 



You will receive a notification email from TryDirect that contains a deployment-configs PDF file, the key PEM file of your server and OpenVPN configuration file with ovpn extension.

How to connect to OpenVPN

Download your “ovpn” file and save the file somewhere on your system. You will need this “ovpn” file later for the OpenVPN connection.

Install the OpenVPN client

Now, you need to install the OpenVPN client for your OS

Windows users

Go to https://openvpn.net/community-downloads/ and Download OpenVPN client.


 


Next, install the OpenVPN client on your system.


 


Once the OpenVPN client is installed you may get a ‘no readable profile’ warning alert as shown in the below screenshot.


 


Click the “OK” button, then right-click the OpenVPN GUI icon from the system tray.


 


It will open pop-up windows, go to your “.ovpn” file location on your system and select OpenVPN “.ovpn” file.


 


It will display “File imported successfully” message.
Now, again, right-click on the OpenVPN GUI icon and click on Connect Option.


 


You are now connected with your OpenVPN server using your OpenVPN client from your Windows system.


 


To verify your OpenVPN connection, go to the web browser and type “what is my ip” or "show my ip address". You will see the IP address on your OpenVPN data center.


 



Linux users

If you are using Linux distributions, then you need to install the OpenVPN client from repository:
Ubuntu/Debian users, execute the following commands in your terminal:

 

CentOS users:

 

After running the above command, you will see an output like:

Output:

Mon Apr 18 11:05:39 2022 /sbin/ip addr add dev tun0 local 192.168.255.6 peer 192.168.255.5
Mon Apr 18 11:05:39 2022 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Apr 18 11:05:39 2022 Initialization Sequence Completed

Note: If you are using an older version of Ubuntu and getting errors like  write to TUN/TAP: Invalid argument (code=22) , make sure to update OpenVPN to version 3.

If you want to run the OpenVPN client in the background, execute the following command:

 

For example:

 

How to add new VPN users

First, change the downloaded PEM file permission to 400. Run the following command in terminal:

 

Replace ‘example.com.pem’ with the PEM file name you got in the e-mail.
Now, run the command along with your server IP address as shown below:

ssh -i example.com.pem root@159.223.234.35

(Replace with your OpenVPN server IP)
Next, go to the directory containing docker-compose.yml file on your server.

 

Now, execute the commands below.

 

For example:

 

The above command will generate an admin user without a passphrase.
Generate user’s ovpn file.

Syntax:

 

Example:

 

Now, download New user's ovpn file on your system.

 

Now you can connect with OpenVPN server, as shown before:

 

Replace admin.ovpn with your ovpn key.
Alternatively, you can easily connect to the OpenVPN server by using network-manager.
Run the below command to add OpenVPN support to the network-manager.

 

Then, click the network-manager and VPN ‘+’ symbol as shown in the below screenshot.

 

Next, select the ‘import from file’ option from the selection box opened.

 

Now, select your ovpn file from your system.

 

Next, enable the VPN. Now you are connected with the OpenVPN server using your network manager.

 

Congratulations! You got an understanding of OpenVPN. Now you are informed on the ways to set up the OpenVPN server using the TryDIrect platform and configure the OpenVPN client on your system.


What is OpenVPN? OpenVPN sends encrypted data over the internet, It is one of the most reliable and widely used protocols for VPN connection

What is OpenVPN

Linux has some mighty commands which can come in handy to system administrators or power users, and lsof is one of them. This command stands for ‘List of Open Files.’ In Linux, everything is a file, including network connection, devices, directories, network sockets, etc. Here, lsof helps you identify which files are being used by which processes. You can also track user activity by checking files and processes used by that specific user using the lsof command. Moreover, thanks to lsof you can quickly find additional information such as the port used by services/files, sockets in use, etc. Hence, you can say that the lsof command is capable of replacing commands like netstat and PS.

Linux has some mighty commands which can come in handy to system administrators or power users, and lsof is one of them. This command stands for ‘List of Open Files.’ In Linux, everything is a file, including network connection, devices, directories, network sockets, etc. Here, lsof helps you identify which files are being used by which processes. You can also track user activity by checking files and processes used by that specific user using the lsof command. Moreover, thanks to lsof you can quickly find additional information such as the port used by services/files, sockets in use, etc. Hence, you can say that the lsof command is capable of replacing commands like netstat and PS.
This guide will provide you with a basic understanding of lsof command with practical examples.

1. List of All Open Files

By running just the 'lsof' command, you will get a list of all system's open files.

root@beta:~# lsof
COMMAND  PID   TID          USER   FD   TYPE          DEVICE SIZE/OFF    NODE NAME
systemd    1                root  cwd    DIR           252,1  4096       2 /
systemd    1                root  rtd    DIR           252,1  4096       2 /
systemd    1                root  txt    REG           252,1  1616248   42953 /lib/systemd/systemd
systemd    1                root  mem    REG           252,1  1700792   31573 /lib/x86_64-linux-gnu/libm-2.27.so
----

Note: Here, the output of the lsof command is very long. Hence, the output for most of the commands in this post has been truncated. The ellipsis (…) at the end will show the outputs that have been omitted.
The lsof command output is very long and extensive and can be difficult to handle. Therefore, it is better to combine it with the less command in the following way:

lsof | less

Here, let's understand the following columns from the lsof command output:
COMMAND - the command associated with the process that opened the file
PID - process ID which belongs to the process that opened the file
TID - Task Identification number. If it is blank, it indicates that it is a process and not a task.
USER -  User or Owner
FD - shows the file descriptor of the file
TYPE - type of node associated with the file
DEVICE - contains the device numbers with commas
SIZE - file size in bytes
NODE - node number
NAME - full path of the file name

2. List of All Files by Filenames

Run the below-given command to list all the processes that have opened a specific file:

 

Output

root@beta:~# lsof /var/log/nginx/access.log
COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
nginx 1009  root   14w   REG  252,1 53471 1052574 /var/log/nginx/access.log
nginx   20013 www-data   14w   REG  252,1 53471 1052574 /var/log/nginx/access.log

3. View All Open Files from a Directory

Another benefit of the lsof command is that it allows you to check the open files from a specific directory. To do this, just add the +D option followed by the directory you want to analyze.

 

Output

root@beta:~# lsof +D /var/log/nginx/
COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
nginx 1009  root 2w   REG  252,1     0 1054320 /var/log/nginx/error.log
nginx 1009  root 4w   REG  252,1     0 1054324 /var/log/nginx/access.log
---

The above command will be helpful when you aren’t able to unmount a directory or when the system shows a “Device or Resource Busy” error.

4. List of Files Opened by a Process

You can also check the files opened by a specific system process using the -c option. For example:

 

Output

root@beta:~# lsof -c node
COMMAND  PID USER   FD   TYPE          DEVICE SIZE/OFF NODE NAME
node\x20/  4066 root  cwd    DIR           252,1  4096  783350 /var/www/html/demo_server
node\x20/  4066 root  rtd    DIR           252,1  4096    2 /
node\x20/  4066 root  txt    REG           252,1 41226208   14617 /usr/bin/node
---

5. List only the PID of the specific process

You can easily find out all the PIDs associated with a specific process. By executing the below command, you can list the PIDs of the node process. The -t option will give you the list of PIDs.

 

root@beta:~# lsof -t -i -c node
748
1009
---

6. Search Open Files by PID

The lsof command allows you to list files based on their PIDs. The below-given command shows all files associated with the process ID 4066.

 

Output:

COMMAND PID USER   FD   TYPE          DEVICE SIZE/OFF NODE NAME
node\x20/  4066 root  cwd    DIR           252,1  4096  783350 /var/www/html/demo_server
node\x20/ 4066 root  rtd    DIR           252,1  4096    2 /
---

7. List of All Files Opened by a Specific User

You can list all the files opened by a specific user as shown in the following command:

 

Output:

COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF    NODE NAME
bash 18348 user1  cwd DIR 8,1    57  537314138 /home/user1
bash 18348 user1  rtd DIR 8,1   325     128 /
bash 18348 user1  txt REG 8,1  1183448 1074696841 /usr/bin/bash
------

Similarly, you can give multiple usernames as follows:

 

You can also find out what files and commands were checked and who was looking at them by executing commands like below:

 

Output:

bash   19075        user1  cwd DIR 8,1    78  537314138 /home/user1
ping   19127        user1  cwd DIR 8,1    78  537314138 /home/user1
bash   19154        user1  cwd DIR 8,1    78  537314138 /home/user1
vim    19181        user1  cwd DIR 8,1    78  537314138 /home/user1

You will notice that user1 is using the ping command and vim editor that he opened.

8. List All the Open Files Except a Specific User

You can also exclude a list of files open by a specific user by running the below command:

 

The above command lists all the open files on the system except the root user.

9. Kill All Processes of a Specific User

In some cases, you might need to kill all the processes opened by a specific user. The below command can be used to kill all the processes of the developer1 user.

 

10. Network Information

The lsof command has much more power than you think, as it can work as a netstat command replacement. You can use lsof with -i to see all the connections.
Run the below-given command to check all network connections of your system.

 

Output 

root@beta:~# lsof -i
COMMAND  PID         USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
systemd-r   748 systemd-resolve   12u  IPv4   15733   0t0  UDP localhost:domain
systemd-r   748 systemd-resolve   13u  IPv4   15734   0t0  TCP localhost:domain (LISTEN)
sshd     989         root 3u  IPv4   18300   0t0  TCP *:ssh (LISTEN)
sshd     989         root 4u  IPv6   18319   0t0  TCP *:ssh (LISTEN)
nginx   1009         root   16u  IPv6   18334   0t0  TCP *:https (LISTEN)

You can filter it using -i 4 or -i 6 to list either IPv4 or IPv6 files.

For IPV4

 

For IPV6

 

11. List All TCP or UDP Files

Next, by executing the below command, you will be able to list all the TCP processes:

 

Output

root@beta:~# lsof -i TCP
COMMAND  PID         USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
systemd-r   748 systemd-resolve   13u  IPv4   15734   0t0  TCP localhost:domain (LISTEN)
sshd     989         root 3u  IPv4   18300   0t0  TCP *:ssh (LISTEN)
nginx   1009         root   16u  IPv6   18334   0t0  TCP *:https (LISTEN)
-----

You can use the following command to list all UDP processes through lsof:

 

Output

root@beta:~# lsof -i UDP
COMMAND   PID         USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
systemd-r 748 systemd-resolve   12u  IPv4  15733   0t0  UDP localhost:domain

12. List All Processes Listening to TCP ports

Use the lsof command as shown in the below-given example to find all the processes listening to the TCP port:

 

root@beta:~# sudo lsof -i -sTCP:LISTEN
COMMAND  PID         USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
systemd-r   748 systemd-resolve   13u  IPv4   15734   0t0  TCP localhost:domain (LISTEN)
nginx   1009         root   16u  IPv6   18334   0t0  TCP *:https (LISTEN)
nginx   1009         root   17u  IPv4   18335   0t0  TCP *:https (LISTEN)
----

13. List of Established Connections

To find the currently established connections, simply run the below command:

 

Output:

COMMAND PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
sshd   27785         root 3u  IPv4 9951161   0t0  TCP beta:ssh->192.168.1.21:5653 (ESTABLISHED)
----

14. Searching for Active Connections from a Specific Source

Occasionally, you will want to find out all the active connections from your server's specific IP address/source. To do this, use the below-given command:

 

Output

COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
ssh  13997 soham 5u  IPv4 268962   0t0  TCP rockylinux-8:45598->192.168.1.74:ssh (ESTABLISHED)
ssh  15608 soham 4u  IPv4 333266   0t0  TCP rockylinux-8:46366->192.168.1.74:ssh (ESTABLISHED)

15. Looking for the Process Listening Specific Port

Execute the below command to list any process listening to the port 8081:

lsof -i:8081

Additionally, you can kill any process listening to the port 8081 by running the following command:

kill -9 $(lsof -t -i:8081)

You can also specify protocol as shown in the following command:

 

root@beta:~# lsof -i TCP:443
COMMAND   PID  USER   FD   TYPE   DEVICE SIZE/OFF NODE NAME
nginx 1009  root   16u  IPv6 18334   0t0  TCP *:https (LISTEN)
nginx 1009  root   17u  IPv4 18335   0t0  TCP *:https (LISTEN)
---

16. List of Open Connections with a Port Range

Next, list all the running processes of open files from port 3000-4000:

 

root@beta:~# lsof -i TCP:3000-4000
COMMAND  PID USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
PM2\x20v5 24403 root   22u  IPv6 9735497   0t0  TCP *:3001 (LISTEN)
PM2\x20v5 24403 root   24u  IPv6 9709625   0t0  TCP *:3000 (LISTEN)
PM2\x20v5 24403 root   25u  IPv6 5114098   0t0  TCP *:3002 (LISTEN)

17. Disable Port Conversion

Using -P option, you can disable port number conversion, which saves a considerable amount of time when there are too many files of this kind.

 

For better understanding, use the 'time' command with -P option to compare the execution time.

time lsof -i -Tqs

Output:

COMMAND  PID    USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
ssh  5684 root 3u  IPv4  55557   0t0  TCP beta:36600->192.168.1.52:ssh (ESTABLISHED QR=0 QS=36)

real 0m4.855s
user 0m0.012s
sys 0m0.021s

time lsof -i -Tqs -P

Output:

COMMAND  PID    USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
ssh  5684 root 3u  IPv4  55557   0t0  TCP beta:36600->192.168.1.52:ssh (ESTABLISHED QR=0 QS=36)

real 0m2.003s
user 0m0.012s
sys 0m0.007s

18. Disable Host Conversion

You can also disable hostname conversion to improve the performance and save time. Just like with the port name conversion.

time lsof -i -n | head -3

Output:

COMMAND  PID         USER   FD   TYPE   DEVICE SIZE/OFF NODE NAME
systemd-r   748 systemd-resolve   12u  IPv4 15733   0t0  UDP 127.0.0.53:domain
systemd-r   748 systemd-resolve   13u  IPv4 15734   0t0  TCP 127.0.0.53:domain (LISTEN)

real 0m0.051s
user 0m0.009s
sys 0m0.025s

19. List of Deleted Files

You will often notice that the df and the du command show different disk usage of the same file system. In this case, the Isof command comes handy, as it allows us to find files that were removed from the system. Furthermore, it will enable one to check which files were opened by which processes. Hence, it gives a clear idea of the activities happening.

 

Output:

root@beta:~# lsof / | grep -i "deleted"
networkd-   927          root  txt REG  252,1  4526456 1841 /usr/bin/python3.6 (deleted)
unattende   983          root  txt REG  252,1  4526456 1841 /usr/bin/python3.6 (deleted)
---

20. Help and Manual Pages

The lsof command comes with many options and switches. You can check lsof quick help and manual pages to learn the lsof command more deeply.

lsof --help

man lsof

Now you know the fundamentals of the lsof command: how it comes to aid in the usual tasks like debugging, troubleshooting, finding deleted files, etc., and how it gives a clear idea regarding the whereabouts of the files.

How to use the Isof command in Linux. Detailed guide with examples.

Dashboard

TryDirect blog