Admin Console (Port 2087)
Configuration Modal
Tabs 11-14: Security
Website Configuration Studio • Tab 11: Security & WAF • Native 1920x1080 View
📌 Purpose & Quick Summary
Use the Security, Maintenance & Transfer tabs to harden your website against malicious attacks, cap traffic during heavy traffic surges, toggle Under Attack Mode, or transfer domain ownership to another account.
🛠️ Key Security Controls Walkthrough
1. Web Application Firewall (ModSecurity - Tab 11)
- Toggle the Enable WAF switch to ON.
- Protects your site from SQL Injection (SQLi), Cross-Site Scripting (XSS), remote file inclusion, and rogue bots automatically using OWASP Core Rule Sets.
2. 1-Click Under Attack Mode (Tab 13)
- Under Maintenance & Attack Mode, toggle Under Attack Mode to ON.
- Instantly presents suspicious visitors with a lightweight cryptographic challenge before passing requests to your backend, deflecting Layer-7 HTTP flood DDoS attacks instantly.
3. Per-Domain Unique Visitor Limits (Tab 12)
- Set Max Monthly Visitors (e.g.,
50,000). - Prevents resource exhaustion by returning a graceful polite waiting screen when traffic quotas are exceeded.
4. Transfer Domain Ownership (Tab 14)
- Select the new account owner from the dropdown.
- Click Transfer Domain. BoostonCP reassigns Linux file ownership (
chown -R newuser:newuser) and updates virtual host definitions in under 2 seconds.
