cPHulk Countries Management: Any Performance Penalty?

linux4me2

Well-Known Member
Aug 21, 2015
259
80
78
USA
cPanel Access Level
Root Administrator
I love the new Countries Management feature in v. 70 CPHulk!

Is there any performance penalty based on the number of countries blacklisted? It seems like ideally one would block all the countries except the one(s) where clients live.
 

cPanelNick

Administrator
Staff member
Mar 9, 2015
3,481
35
208
cPanel Access Level
DataCenter Provider
I love the new Countries Management feature in v. 70 CPHulk!

Is there any performance penalty based on the number of countries blacklisted? It seems like ideally one would block all the countries except the one(s) where clients live.
Quite a bit of work has gone into make sure it performs well. One of the big impediments to adding is sooner was resolving the performance concerns. In the released version, the matching is very fast and has a high-performance cache layer so it shouldn't cause any significant slowdowns.
 
  • Like
Reactions: linux4me2

linux4me2

Well-Known Member
Aug 21, 2015
259
80
78
USA
cPanel Access Level
Root Administrator
Thanks for the info. I have every country blocked but the one my clients are from, and so far, I haven't noticed any issues with degraded performance. There has been a huge reduction in blocked logins. I went from getting hundreds a day to none since I enabled the country blocks.
 
  • Like
Reactions: cPanelMichael

A Citizen

Registered
May 12, 2018
3
0
1
USA
cPanel Access Level
Root Administrator
I have a question related to this but not the same

In my use case all users on the back end are in one country but web site users (people who see website or email clients on this server) could be from anywhere in the world

So if i black list all but for example usa and undefined would Japan be able see my websites and email me or would they be blocked too?
 

linux4me2

Well-Known Member
Aug 21, 2015
259
80
78
USA
cPanel Access Level
Root Administrator
The cPHulk Brute Force Protection documentation states that cPHulk monitors the following web servers and services:
  • cPanel services (Port 2083).
  • WHM services (Port 2087).
  • Mail services (Dovecot and Exim).
  • The PureFTPd service.
  • Secure Shell (SSH) access.
The way I interpret that, if you block all countries but the USA, people in Japan would be able to browse your web sites and email you using their own mail servers, but they would not be able to log on to cPanel, WHM, PureFTPd, SSH, or use your mail server to send and receive email.
 
  • Like
Reactions: cPanelMichael

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,261
463
So if i black list all but for example usa and undefined would Japan be able see my websites and email me or would they be blocked too?
Hello @A Citizen,

The previous post is correct. The settings you configure for the cPHulk Brute Force Protection feature won't affect the ability for visitors to access websites hosted on your server or the ability for them to send emails to your server.

Thank you.