We're excited to announce that RunCloud Monitoring is now in beta. 

Today's release includes some incredibly exciting new observability and health monitoring functionality. This new suite of monitoring tools replaces the old Server Health tab and is designed to give teams on RunCloud the ability to quickly identify & resolve web application performance issues. 

Additional resources and documentation on using RunCloud Monitoring and the new Top Process and Slow Query reports will be available soon. 

If you have absolutely any questions or feedback for us, please reach out to support@runcloud.io. 

You can now pay for your RunCloud subscription using credit/debit cards, PayPal, and Google Pay. 

This has been made possible by partnering with Paddle (the complete payments, tax, and subscription solution for SaaS) to both process payments as well as act as our Merchant of Record – allowing us to deliver the best subscription and payment experience for our users across the world.

Note: This change currently does not affect existing subscriptions.

Cloudflare is currently experiencing issues with its dashboard and API (view status page).

We've deployed a hotfix to prevent our panel from throwing 500 errors due to the downtime with Cloudflare's API. However, the domains and DNS integration via Cloudflare will appear empty in your RunCloud dashboard as they rely on receiving responses from the Cloudflare API, which is currently unavailable.

Cloudflare is well aware of the issue and is working on getting to the bottom of it as soon as possible. They have a good reputation for handling infrastructure-related issues diligently, including proper post-mortems. 

On behalf of Cloudflare, thank you for your patience & we understand dealing with downtime is never easy. If any websites you host for others are affected, this would be a good time to send over an email to let them know if their sites are down proactively.

We want to assure you that your data security is our top priority. An important security concern has emerged regarding CVE-2023-44487, also known as the HTTP/2 Rapid Reset Attack.

However, we are pleased to inform you that our infrastructure is not affected by this vulnerability.

If you have any questions or concerns, our customer support team is available to assist you. Reach out to us for any inquiries you may have.

PHP Version Releases

• PHP 8.2.10
• PHP 8.1.23
• PHP 8.0.30

PHP Extension Updates (PHP 8.x)

• swoole 5.0.3 (4.8.13 for Xenial)
• memcache 8.2
• mongodb 1.16.2
• msgpack 2.2.0
• igbinary 3.2.14

Note: If your server runs on OpenLiteSpeed, RunCloud does not handle PHP version updates. However, once a PHP version update becomes available for OpenLiteSpeed, it should also be automatically available on your server(s).

NGINX Version Release

• NGINX 1.21.4 iteration 18, includes 7G Firewall v1.6.1 to fix some false positive actions

The updates will be automatically applied to your server(s) running on NGINX within 72 hours and Containerized server(s) within 3 hours. If you don’t receive the update in the expected timeframe, please contact our support team.

Containerized Core is officially out of beta and in early access.

What this means: It’s safe to use in production (while there may still be rare edge-case scenarios as it rolls out across the board)

Here’s why it matters: We currently believe that containerization will play a big role in the future of RunCloud. Using Docker, we’re able to isolate application dependencies such as Redis, MariaDB, NGINX, PHP (and so on) from the operating system level. Under the hood this is a big improvement that stands to allow us to continue leveling up what RunCloud makes possible for everyone.

Learn more about our Containerized Core update here.

OpenLiteSpeed released a security update for issues CVE-2022-0072, CVE-2022-0073 and CVE-2022-0074.

This update has already been patched in OpenLiteSpeed version 1.7.16. Your server should be automatically upgraded. Feel free to reach out to support if you have any questions.

OpenSSL just announced a security update for issues CVE-2022-3602 and CVE-2022-3786.

This issue only affects Ubuntu 22.04 (Jammy Jellyfish) when using OpenSSL Version 3.X (other Ubuntu versions are not affected).

The update has already been patched by Ubuntu on OpenSSL version 3.0.2. Your server should automatically be updated. For more info regarding the CVE, please refer to the following resources:

https://ubuntu.com/security/CVE-2022-3602
https://ubuntu.com/security/CVE-2022-3786

Our test domain system has just been updated.

As a result of this change, the runcloud.link test domain previously available for testing will now no longer resolve to your web applications.

To ensure continued access to web applications that previously used this test domain, you’ll simply need to go through the process of adding a new domain to your web application (during which you’ll be able to select our new test domain).

Here’s how to update your test domain.

• improved: properly notify the user on deleting web app with linked database
• fixed: rebuild web app config doesn't work
• fixed: password generator copy button doesn't work
• fixed: editing cronjob sometimes trigger time format invalid error
• fixed: file manager breadcrumb for child folder sometimes doesn't show properly
• fixed: link & symlink PHP functions are still disabled after being removed on disabled_functions
• fixed: recently viewed server can't be clicked
• fixed: fail2ban issue