# Faastic > Faastic is a Belgian cloud and hosting provider. From our own datacenter in Ghent we run cloud servers (VPS), load balancers, private networks, managed databases (PostgreSQL, MySQL and Valkey), S3-compatible object storage, web hosting and domain names, all in one portal and on one invoice. - **What we are:** A Belgian cloud and hosting provider - **Products:** Cloud servers (VPS), load balancers, private networks, managed PostgreSQL, MySQL and Valkey, S3-compatible object storage, web hosting and domain names - **Datacenter:** Ghent, Belgium, on hardware we own - **Founded by:** Louis Mylle and Stein Van Stichel - **Company:** Belgian company, VAT BE0805008443 - **Prices:** Cloud servers from €3.75 a month, web hosting from €0.99 a month, .be domains €6.20 a year. Excl. VAT, no setup fees, the same price at renewal - **Payment:** Bancontact, iDEAL or card, monthly or yearly. Cancel anytime - **Support:** In Dutch or English, by ticket or email - **Automation:** A REST API described in OpenAPI, and an MCP server with more than 120 tools for AI assistants - **Security:** Two-factor sign-in for every account, databases and storage closed by default, a GDPR data processing agreement Prices exclude 21% Belgian VAT. Live data: this file is generated on every request from the same price list as the website. --- ## Frequently asked questions about Faastic ### What is Faastic? Faastic is a Belgian cloud and hosting provider. From our own datacenter in Ghent we run cloud servers (VPS), load balancers, private networks, managed databases (PostgreSQL, MySQL and Valkey), S3-compatible object storage, web hosting and domain names, all in one portal and on one invoice. ### Where are Faastic's servers located? On hardware we own, in our datacenter in Ghent, Belgium, inside the EU. Faastic is a Belgian company, and our support answers in Dutch or English. ### How much does a cloud server cost at Faastic? Cloud servers start at €3.75 a month, web hosting at €0.99 a month and a .be domain at €6.20 a year. Prices are excl. VAT, there is no setup fee, and you renew at the price you signed up for. ### How does Faastic keep its prices low? We buy proven enterprise servers second-hand and upgrade them with NVMe storage and fresh memory, you run everything yourself from the portal, and we have no sales team. Those savings go into the price. ### Can I automate Faastic or let an AI assistant run it? Yes. Everything in the portal is a REST API call, described in an OpenAPI document. Our MCP server turns the same API into more than 120 tools for Claude, Cursor and other assistants, limited by the token you give them. ### How can I pay? With Bancontact, iDEAL or a card. Most plans can be paid monthly or yearly, and you can cancel anytime. --- ## VPS Hosting Belgium: Cloud Servers from €3.75/mo URL: https://www2.faastic.com/vps-hosting Fast KVM cloud servers in Ghent from €3.75/month: dedicated CPU and RAM, NVMe, IPv6, full root access and unlimited traffic. No setup fee. Run your app on a KVM cloud server in Ghent, with full root access, NVMe storage and IPv4 included. Choose the CPU and RAM your workload needs. ### Plans and prices | Plan | Includes | Price | |---|---|---| | C1M2D40v1 | 1 vCPU core, 2 GB RAM, 40 GB NVMe storage, 1 IPv4 address, Unlimited traffic, Self-service firewall, Reinstall the OS anytime | €3.99 per month or €44.99 per year | | C2M4D80v1 | 2 vCPU cores, 4 GB RAM, 80 GB NVMe storage, 1 IPv4 address, Unlimited traffic, Self-service firewall, Reinstall the OS anytime | €7.99 per month or €89.99 per year | | C4M8D160v1 | 4 vCPU cores, 8 GB RAM, 160 GB NVMe storage, 1 IPv4 address, Unlimited traffic, Self-service firewall, Reinstall the OS anytime | €15.99 per month or €179.99 per year | | C8M16D320v1 | 8 vCPU cores, 16 GB RAM, 320 GB NVMe storage, 1 IPv4 address, Unlimited traffic, Self-service firewall, Reinstall the OS anytime | €29.99 per month or €299.99 per year | Prices exclude 21% Belgian VAT. No setup fees; renewals at the same price. ### FAQ **What's the difference between a VPS and a cloud server?** For us, they're the same thing: a virtual server on KVM with its own CPU, RAM and NVMe storage, full root access and unlimited traffic. We call it a cloud server because it plugs into the rest of the platform, such as private networks, load balancers and managed databases. **Where are your servers located?** In our datacenter in Ghent, Belgium. We're a Belgian company, and our support answers in Dutch or English. **Can I upgrade my VPS later?** Yes. Move to a bigger plan when your project grows, and resize CPU, RAM and disk within your plan's limits from the dashboard or the API. **Is the traffic really unlimited?** Yes. Use all the bandwidth you like. The only limit is the speed of your server's uplink. **Do I get an IPv6 address?** Yes. Every server can get its own IPv6 /64 subnet next to its IPv4 address. **Which operating systems can I choose?** Current versions of popular Linux distributions, such as Ubuntu and Debian. The order form shows the full list, and if you need something else, ask us and we'll prepare it. --- ## Managed Load Balancer in Belgium, Free TLS (HAProxy) URL: https://www2.faastic.com/load-balancers A managed HAProxy load balancer in front of your servers: health checks, free Let's Encrypt certificates, live metrics and request logs. Run from Ghent. Share traffic across your servers with health checks, free certificates and live metrics. We manage HAProxy, so you can focus on your app. ### FAQ **What does a load balancer do?** It gives your website or app one public address and spreads incoming requests over several servers. If one server fails, the others take over, so your service stays online. **Are SSL certificates included?** Yes. Let's Encrypt certificates are requested and renewed for you at no extra cost. You can also upload your own certificates. **Does it only work for websites?** No. Next to HTTP and HTTPS, the load balancer handles TCP, so it works for other services that use TCP too. **Can I balance servers that aren't hosted at Faastic?** Yes. A target can be one of your Faastic servers or any IPv4 or IPv6 address. --- ## Private Networks for Cloud Servers in Belgium URL: https://www2.faastic.com/private-networks Connect your cloud servers, load balancers and databases on a private network of their own, with automatic addresses. Nothing public unless you choose. Let your servers, load balancer and database talk to each other on a network that's only yours. Nothing reaches the internet unless you decide it should. ### FAQ **What is a private network?** A network that only carries traffic between your own servers, load balancers and databases. They talk to each other on private addresses, and nothing on it is reachable from the internet unless you decide it should be. **Which address ranges can I use?** Any private range from /16 to /28. Attach a server and it gets a network card and the next free address automatically. **Can I put a managed database on a private network?** Yes. Attach it to your network when you order it. Your app reaches it on a private address, and its public port stays closed. **Can I attach servers I already have?** Yes. Attach a server to a network or take it off again, from the portal or the API. --- ## Managed PostgreSQL, MySQL & Valkey in Belgium URL: https://www2.faastic.com/databases Managed PostgreSQL, MySQL and Valkey (the Redis fork) in Ghent: closed by default, daily backups, storage that grows online. Order in minutes. Choose PostgreSQL, MySQL or Valkey on its own virtual machine in Ghent. We handle updates and daily backups. You control users, connections and capacity. ### FAQ **Which databases can I run?** PostgreSQL 18, MySQL 8.4 LTS and Valkey 9.1, the open-source fork of Redis. Each instance runs on its own virtual machine. **Can I connect to my database from outside Faastic?** Yes, if you choose to. A database is closed to the internet by default. You can open it to a list of addresses you trust, or reach it privately from your servers over a private network. **Are backups included?** Yes. Every database is backed up daily, at the hour you choose, and you decide how many backups to keep. You can restore one in place or into a new instance. **What happens when my database grows?** Add storage and the disk grows online, without a restart. When you need more CPU or RAM, move to a bigger plan; that takes a clean restart. **Is Valkey the same as Redis?** Valkey is the open-source fork of Redis. It speaks the same protocol, so it works with the Redis clients you already use. **Is high availability available?** Not yet. Each database runs as a single node for now, with daily backups and restore. We'd rather tell you that up front, so you can plan for it. --- ## S3-Compatible Object Storage in Belgium URL: https://www2.faastic.com/object-storage S3-compatible object storage in Ghent for uploads, backups and static files. Works with the AWS CLI and rclone, a key per bucket, storage that grows online. Store uploads, static files and backups in Ghent using S3-compatible tools. Give each app access to the buckets it needs, and add capacity when you need it. ### FAQ **Does it work with the AWS CLI and rclone?** Yes. Use the endpoint, region and CA bundle from your dashboard with the AWS CLI, rclone or a common S3 SDK. Multipart uploads, presigned URLs, CORS and lifecycle expiry all work. **Is this the same as AWS S3?** No. It's S3-compatible storage built on Garage. Versioning, object lock, bucket policies and ACLs aren't available. **Can I add more storage later?** Yes. Add storage and the disk grows online, without a restart. **Where is my data stored?** In our datacenter in Ghent, Belgium. --- ## Web Hosting Belgium from €0.99/month, Free SSL URL: https://www2.faastic.com/shared-hosting Cheap web hosting in Belgium from €0.99/month: NVMe, free SSL, daily backups, mail on your own domain and WordPress in minutes. Same price at renewal. Host your website and email on NVMe servers in Ghent. Free SSL and daily backups are included. Choose your plan, or ask us to help you compare. ### Plans and prices | Plan | Includes | Price | |---|---|---| | Simple | 10 GB NVMe storage, 1 domain + 5 aliases, 5 mailboxes, 1 database, 5 DNS zones, 1 backup copy, Free Let's Encrypt certificate, Fair use bandwidth, PHP 5.6–8.2, One-click WordPress installer, Easy-to-use dashboard | €11.89 per year | | Advanced | 50 GB NVMe storage, 3 domains + 5 aliases, 15 mailboxes per domain, 3 databases, 3 DNS zones, 3 backup copies, Free Let's Encrypt certificate, Fair use bandwidth, PHP 5.6–8.2, One-click WordPress installer, Easy-to-use dashboard | €23.99 per year | | Pro | 200 GB NVMe storage, 25 domains + 125 aliases, 100 mailboxes per domain, 25 databases, 25 DNS zones, 25 backup copies, Free Let's Encrypt certificate, Fair use bandwidth, PHP 5.6–8.2, One-click WordPress installer, Easy-to-use dashboard | €10.69 per month or €109.99 per year | Prices exclude 21% Belgian VAT. No setup fees; renewals at the same price. ### FAQ **What is web hosting?** Web hosting is space on a server where your website and its files live, so visitors can reach it at any time. With shared hosting, several websites share one well-managed server, which keeps the price low. Our packages also include mail on your own domain, a free SSL certificate and daily backups. **What if my website grows a lot?** Then you move to a bigger plan, or to a cloud server when you want full control. Tell us what you're planning and we'll help you choose. **Can I upgrade my hosting plan later?** Yes. You can move to a bigger plan whenever your site needs more room. **Is this good hosting for WordPress?** Yes. WordPress runs well on our NVMe servers, and the one-click installer gets a new site online in minutes. For a busy shop or many sites, a bigger plan or a cloud server gives you more room. **Can I move my website from another host?** Yes, and you don't have to do it alone. Our team guides you through moving your site to us. --- ## Register a .be Domain for €6.20/yr, Same at Renewal URL: https://www2.faastic.com/domain-names .be domain names for €6.20/year, .eu €5.53 and .com €11.20, at the same price when you renew. Free DNS management from a Belgian registrar. Register a domain with DNS management included. Keep it alongside your website and email in one dashboard, with the same price at renewal. ### Domain prices per year | Extension | Register | Renew | Transfer | |---|---|---|---| | .ai | €195.50 | €195.50 | €195.50 | | .app | €15.28 | €15.28 | €15.28 | | .be | €6.20 | €6.20 | €6.20 | | .blue | €23.47 | €23.47 | €23.47 | | .co | €25.21 | €28.50 | €28.50 | | .co.uk | €5.43 | €5.43 | €0.00 | | .com | €11.20 | €11.20 | €11.20 | | .de | €4.78 | €3.48 | €3.48 | | .dev | €12.00 | €12.00 | €12.00 | | .dk | €9.25 | €9.25 | €0.00 | | .es | €4.70 | €4.70 | €0.00 | | .eu | €5.53 | €5.20 | €5.53 | | .fr | €5.32 | €5.34 | €5.34 | | .info | €19.80 | €19.80 | €19.80 | | .io | €46.05 | €46.05 | €46.05 | | .lu | €18.20 | €18.20 | €18.20 | | .me | €15.60 | €15.60 | €15.60 | | .net | €13.02 | €13.02 | €13.02 | | .nl | €5.15 | €5.15 | €0.00 | | .org | €11.58 | €11.59 | €11.59 | | .site | €31.16 | €31.16 | €31.16 | | .tech | €50.04 | €50.04 | €50.04 | | .vlaanderen | €26.25 | €26.25 | €26.25 | | .world | €3.07 | €33.85 | €33.85 | Prices exclude 21% Belgian VAT. ### FAQ **What is a domain name?** A domain name is the address where people find you online, like yourcompany.be. Your own domain looks professional, strengthens your brand and makes you easy to find and remember. **What's the difference between a domain and a hosting package?** The domain is your site's address on the internet (for example www.example.com), the thing people type in their browser. Hosting is the server space where your site's files and data are stored and served. The domain is the name, the hosting is where your site actually lives. A working website needs both. **Is domain privacy protection worth it?** Privacy protection keeps your personal contact details out of the public WHOIS database, which means less spam and fewer unwanted offers. For most EU domains, like .be and .eu, the registry already hides the details of private registrants. --- ## Transfer Your Domain to Faastic, .be from €6.20 URL: https://www2.faastic.com/domain-transfer Transfer your domain name to Faastic in three steps: enter the domain, add the EPP code, confirm the email. Your website and email keep working. Bring your domain to the same place as your hosting. We'll walk you through the steps, and you can ask our team if you need a hand. ### FAQ **How long does a domain transfer take?** Most transfers complete within 5 days. Many European extensions (.be, .nl, .eu) move within minutes once the authorisation code is accepted. **Will my website or email go down during the transfer?** No. A transfer only changes the registrar on record. Your DNS records stay as they are, so your website and email keep working. You can move your DNS to Faastic afterwards if you want to. **Do I keep the remaining time on my registration?** Yes. For most extensions you keep the remaining period, and a year is added on top when the transfer completes. --- ## Managed Servers & Managed Hosting in Belgium URL: https://www2.faastic.com/managed-services Let a Belgian team install, monitor and maintain your servers and websites, so you can focus on your business. Managed hosting, priced on quote. We configure, monitor and maintain your servers, with security and backups included in the agreed scope. Tell us what you need managed and we will put together a quote. ### FAQ **What do managed services include?** We install, configure, monitor and maintain your servers and websites, respond to alerts, secure your services and make backups on a fixed schedule. **How much do managed services cost?** Websites and servers are looked after for a fixed monthly fee. For larger or custom environments, we send you a quote. **Do you also manage infrastructure outside Faastic?** Yes. We also look after serverless setups on AWS Lambda or another hyperscaler, build CI/CD pipelines and run load tests. **Can I start self-service and switch to managed later?** Yes. Self-service means you pay only for the infrastructure. When you want more help, add our managed tier. --- ## Pricing: Cloud Servers, Web Hosting & Domains URL: https://www2.faastic.com/pricing All Faastic prices on one page: cloud servers from €3.75/month, web hosting from €0.99/month, .be domains at €6.20/year, and the same price at renewal. Compare CPU, RAM, storage and included services. Each plan shows its billing period and VAT details, with no setup fees and the same price at renewal. ### FAQ **Are your prices including VAT?** Prices are shown excluding 21% VAT. You see the VAT at checkout, before you pay. **Will my price go up when I renew?** No. You renew at the price you signed up for. We don't use introductory prices that jump after the first period. **Can I pay monthly?** Most plans can be paid monthly or yearly, and yearly is cheaper. A few plans are yearly only, and the price list shows which. **How can I pay?** With Bancontact, iDEAL or a card. **Are there setup fees?** No. There are no setup fees and no hidden costs. **Can I cancel?** Yes, you can cancel anytime. --- ## Faastic API: a REST API for Your Cloud and Hosting URL: https://www2.faastic.com/developers Automate your servers, load balancers, databases, DNS and domains with the Faastic REST API. Scoped API tokens, a quickstart and the full reference. Automate servers, networks, load balancers, databases and DNS with a REST API. Start with the examples below, and use scoped tokens to give each script the access it needs. ### FAQ **Does Faastic have a public API?** Yes. A REST API covers servers, load balancers, networks, databases, object storage, DNS, domains and billing: everything you can do in the portal. **Is there an OpenAPI specification?** Yes, generated from the live API at https://api.faastic.com/v1/openapi.json. **What are the rate limits?** 300 requests per minute per token. **Can I order services through the API?** Yes, with a read & write token that has billing rights. The order returns a payment link, and nothing is built until the invoice is paid. --- ## MCP Server for AI Assistants (Claude, Cursor) URL: https://www2.faastic.com/mcp Let Claude, Cursor and other AI assistants run your Faastic servers, networks, load balancers, databases and DNS over MCP, within the limits of your token. Give Claude, Cursor or another MCP-compatible assistant tools for servers, networks, databases and DNS. Its access is limited by the permissions of your token. ### FAQ **What is an MCP server?** MCP (Model Context Protocol) is an open standard that lets AI assistants use tools. The Faastic MCP server at https://api.faastic.com/mcp turns our REST API into more than 120 tools for servers, networks, firewalls, load balancers, databases, DNS, domains and orders. **Which AI assistants work with it?** Claude, Cursor and any other assistant or agent that speaks MCP. You add the server with an API token as a bearer header. **Can an AI assistant buy or delete things on my account?** Only what its token allows. Orders need a token with billing rights, nothing is built until the invoice is paid, and tools that delete or overwrite data are marked so the assistant's client can check with you first. **Can I see what my assistant changed?** Yes. Every change appears in your organization's activity log, next to the token that made it. --- ## API Tokens for CI/CD and Automation URL: https://www2.faastic.com/automation Scoped API tokens for your pipelines: back up a database before every deploy, open a firewall port, reboot a server. Least privilege, every change logged. Use API tokens to automate server, network and database tasks in your pipelines. Limit each token to the services and permissions the job needs, and set an expiry date. ### FAQ **Can I use Faastic API tokens in GitHub Actions or another CI/CD tool?** Yes. Create a token for the job, store it in your pipeline's secrets and call the API, for example to back up a database before every deploy. **How narrowly can I limit a token?** Read-only or read & write, limited to areas (servers, firewalls, databases and so on), to projects or to single services, with an expiry date. No token can manage team members or other tokens. **What if a token leaks?** It can only do what its scope allows, it stops working on its expiry date, and you can revoke it in the client area at any moment. Every change it made is in your activity log. **How do I create a token?** In the client area under Team → API tokens. Creating one asks for your password or authenticator code, and the token is shown once. --- ## Secure Hosting in Belgium: Closed by Default, 2FA URL: https://www2.faastic.com/security How Faastic protects your services and data: closed by default, encrypted connections, mandatory two-factor and passkeys, scoped tokens and a GDPR DPA. Control who can sign in, which services can connect and what your API tokens may change. Here are the protections and access settings available in Faastic. ### FAQ **Is two-factor authentication required?** Yes, for every account. Sign in with an authenticator app or a passkey, and with a passkey you can drop the password altogether. **Are managed databases reachable from the internet?** Not by default. Databases and object storage stay closed until you open them, and then only to the addresses you list. You can also keep them on a private network. **Do you offer a data processing agreement (DPA) for the GDPR?** Yes. Our data processing agreement is published with our legal documents and covers your GDPR paperwork. **Are you ISO 27001 certified?** We don't publish certifications or audit results until we hold the reports. This page describes how the platform actually behaves instead. **Where is my data stored?** In our datacenter in Ghent, Belgium, on hardware we own. --- ## About Faastic: a Belgian Cloud and Hosting Company URL: https://www2.faastic.com/about-us Faastic is a Belgian cloud and hosting company founded by Louis Mylle and Stein Van Stichel. Fair prices, servers in Ghent and people you can reach. We are a small Belgian team running our own infrastructure in Ghent. We build the dashboard and automation around it, and help customers set up and manage their services. ### FAQ **Who founded Faastic?** Louis Mylle and Stein Van Stichel. They still run the company and the platform themselves. **Where is Faastic based?** In Belgium. Our servers run in our datacenter in Ghent, close to the people who answer your questions. **Is Faastic an alternative to AWS, Azure or Google Cloud?** For servers, load balancers, private networks, managed databases and S3-compatible storage, yes: without vendor lock-in and at prices that stay the same at renewal. Use us as your main home, your backup or your open source playground. **Does Faastic support open source?** Yes. We put 10% of our revenue back into the open source projects we build on. --- ## Contact Faastic: Hosting Support in Dutch & English URL: https://www2.faastic.com/contact-us Help with choosing hosting, setting up services or solving a problem. Email the Faastic team or open a support ticket. We answer in Dutch or English. Tell us what you want to host or where you are stuck. Our team helps you choose a plan or find a solution, in Dutch or English. ### FAQ **How do I reach Faastic support?** Already a customer? Open a ticket in the client area: we see your services straight away and can act on them. Not a customer yet? Email us using the button on this page. **In which languages do you answer?** Dutch or English. **Where can I check whether there's an outage?** On our status page, which shows anything that affects all customers. --- ## Knowledge Base: Hosting, VPS & Domain Guides URL: https://www2.faastic.com/knowledge Help with hosting, cloud servers and domains. Search the knowledge base or ask the Faastic team in Dutch or English. --- ## Knowledge base ### Error TLS Negotiation failed: FAILED_PRECONDITION: starttls error (71) when sending mails from gmail to my mailbox URL: https://www2.faastic.com/knowledge/tls-negotiation-failed-gmail ### Resolving TLS Negotiation Error for Emails To resolve the TLS Negotiation error when sending emails, especially when using an external DNS service that rewrites DNS records and proxies SSL to the mail server, follow these steps: 1. Identify the Correct Mail Server Hostname Locate the hostname of your mail server in the welcome email from your shared hosting package. It will look similar to `shared1.gnt.faastic.com`. 2. Access Cloudflare DNS Settings Log in to your Cloudflare or DNS provider account and navigate to the DNS settings section. 3. Update the MX Record Find the MX record for your domain and update it to the correct mail server hostname identified in step 1. 4. Disable Cloudflare Proxy (Optional) If any mail-related DNS records are proxied through Cloudflare, change their status to DNS only by clicking the cloud icon next to the record. 5. Save Changes Save your DNS settings. Changes may take up to 24 hours to propagate. 6. Verify Configuration After propagation, test sending emails to ensure the TLS Negotiation error is resolved. By updating the MX record to point directly to your mail server's hostname and ensuring DNS records related to email services are correctly configured, you can resolve email sending issues caused by TLS Negotiation errors. The above is a solution for following full error TLS Negotiation failed: FAILED_PRECONDITION: starttls error (71): 8442728243200:error:10000417:SSL routines:OPENSSL_internal:SSLV3_ALERT_ILLEGAL_PARAMETER:third_party/openssl/boringssl/src/ssl/tls_record.cc:592:SSL alert number 47 Some technical background:  The occurrence of TLS negotiation errors, such as the "FAILED_PRECONDITION: starttls error (71)" when sending emails from Gmail to a mailbox, especially in the context of using Cloudflare instead of a direct DNS server, can be attributed to several key factors associated with how Cloudflare interacts with email traffic and DNS configurations. Understanding these factors requires an appreciation of the technical distinctions between Cloudflare's services and traditional DNS server functionalities. Cloudflare is primarily designed to enhance website security and performance through a broad spectrum of services, including DDoS protection, web application firewalls, and content delivery network (CDN) capabilities. One of Cloudflare's hallmark features is its ability to act as a reverse proxy, sitting between a website's visitors and the hosting server. This setup allows Cloudflare to filter and manage incoming traffic for web requests, providing security and performance enhancements. However, this proxy service is tailored towards HTTP/HTTPS traffic and does not natively support SMTP, IMAP, or POP3 protocols used for sending and receiving emails. When Cloudflare is used to manage DNS settings for a domain, DNS records such as A, AAAA, and CNAME can be proxied to leverage Cloudflare's security and CDN services. However, MX (Mail Exchange) records, which direct email traffic, cannot be proxied through Cloudflare in the same way. MX records must point directly to a mail server's IP address or a hostname that resolves to an IP address not proxied by Cloudflare. This is where the distinction becomes crucial: if Cloudflare is set to proxy all traffic, including that intended for the mail server by misconfiguration, it can disrupt email delivery because Cloudflare will not handle email protocol traffic as expected. Furthermore, Cloudflare's SSL/TLS encryption services, which are part of its security offerings, can complicate email delivery if not correctly configured. Cloudflare provides SSL/TLS encryption for web traffic, but email services rely on their encryption protocols like STARTTLS. If there's a misconfiguration in how SSL/TLS certificates are applied, or if there's an attempt to proxy email traffic through Cloudflare, it can lead to errors in TLS negotiation. This happens because the encryption expectations between the sending and receiving servers do not match, causing the email server to reject the connection due to perceived security risks, such as the wrong type of encryption being applied or improper certificate validation. In contrast, using a dedicated DNS server for email configurations avoids these complications. A DNS server that directly manages the domain's DNS records without acting as a proxy for traffic allows for precise control over MX records and direct, unaltered routing of email traffic. This direct management eliminates the risk of misconfiguration related to proxying and encryption services that are not suited for email protocols, ensuring that emails are sent and received without interference from intermediary security and performance layers not designed for email traffic. In summary, while Cloudflare offers significant advantages for managing web traffic, its architecture and service offerings can inadvertently introduce complexities and challenges for email delivery. Understanding and correctly configuring DNS and MX records, while ensuring email traffic is appropriately routed outside of Cloudflare's proxying and encryption services, is essential to prevent TLS negotiation errors and ensure reliable email communication. More information on cloudflare DNS and MX records can be found on: [https://developers.cloudflare.com/dns/troubleshooting/email-issues/](https://developers.cloudflare.com/dns/troubleshooting/email-issues/) . ### Steps to Access Your VPS via SSH URL: https://www2.faastic.com/knowledge/steps-to-access-your-vps-via-ssh - Initial Setup: Once you have set up your server with your chosen OS image, you should be ready to log in. - Power Check: Ensure that the server is switched on. - Username Details: Your username is provided in your welcome email. It is derived from the first 8 characters of your server's hostname. - Password Information: The password is the one you created during the signup process. - Example for Understanding: If your hostname is "host.mycoolapp.com", your username will be "hostmyco". The username is generated using the first 8 characters of your domain name, omitting the '.' . - Security Protocol: Logging in as 'root' is disabled for enhanced security. Your primary login is through your username, which has the capability to execute commands as the root user using 'sudo'. This measure helps to thwart automated brute force attacks. - Password Recovery: If you forget your password, you can reset it using this link in the control panel ![](/kb/2_Screenshot-2023-12-02-at-21.58.44.png) **SSH Key login** - Accessing the Information Panel: Click on the 'edit' icon next to the 'Information' section title. This will bring up the panel where you can manage your ssh key. - Entering Your Public Key: In the information panel, locate the field to enter your public SSH key. Paste your public key here. - Saving and Rebooting: After entering your public key, save the changes. This will initiate a reboot of the server to integrate your SSH key. - Password-less Login: Once the server has rebooted with your SSH key configured, you can log in without needing a password.Note: if the server hasn't come online after 15 minutes, you can manually klik the start button. ![](/kb/1_Screenshot-2023-12-02-at-21.59.23.png) ### SFTP Connection Instructions URL: https://www2.faastic.com/knowledge/sftp-connection-instructions SFTP access is not enabled by default. To activate it, please email service@faastic.com or reach out via the ticketing in the platform. Once enabled, you will be able to connect securely via SFTP to manage your files. ## Important Note About the Directory Structure: Due to the way secure SFTP access is configured, you will not have write access in the root of your SFTP connection. Instead, all files must be placed in the `files` subdirectory. ### Example: - Your SFTP root will be: `/` - Writable directory: `/files` ### Uploading Files: - After connecting via SFTP, navigate into the `files` folder. - Upload all documents and folders inside `/files`. - Do not attempt to write directly to the root, this will fail due to security restrictions. ## Other Protocols Access via other protocols (such as FTP or SMB/CIFS) will continue to work, but just like with SFTP, **only the `files` subdirectory will be writable**. ## Existing Clients If you are an existing customer and already have files in your root folder, we can migrate them for you. Simply email service@faastic.com or submit a ticket via the platform, and we will move your files into the `files` directory to ensure uninterrupted access. ## Why This Setup? For enhanced security, SFTP users are placed in a **chroot** environment. This means: - The root directory of your SFTP session is locked to a specific folder on the server. - This root folder must be owned by `root` and cannot be writable by your user. - To allow you to upload files, a writable `files` subdirectory is created specifically for your user. This configuration ensures your access is securely isolated while maintaining full functionality within your own environment. ### Resolve IPv6 issues on Faastic VM URL: https://www2.faastic.com/knowledge/resolve-ipv6-issues-on-faastic-vm This guide helps resolve issues where IPv6 is not working correctly on your Faastic virtual machine (VM). These instructions apply to VMs purchased **before November 22, 2024**, as network configurations for newer VMs have changed. ## Step 1: Assign the Provided IPv6 Address Before making any other changes, ensure that the IPv6 address provided in your server dashboard has been assigned to your VM, if this has not happened automatically. This address is specific to your server and ensures proper network functionality. To assign the address manually: ``` sudo ip -6 addr add [PROVIDED_IPV6]/[PREFIX_LENGTH] dev [INTERFACE] ``` Replace the placeholders with: - [PROVIDED_IPV6]: The IPv6 address from your dashboard (e.g., `2a13:aa40::be24:11ff:fec9:8585`). - [PREFIX_LENGTH]: The subnet prefix length (e.g., `64`). - [INTERFACE]: The name of your network interface (e.g., `eth0`). ## Step 2: Remove Auto-Assigned IPv6 Addresses If there are automatically assigned IPv6 addresses next to your own IPv6 address, remove them using the following command: ``` sudo ip -6 addr del [AUTO_IPV6]/[PREFIX_LENGTH] dev [INTERFACE] ``` Replace placeholders with the specific details of the problematic IPv6 address and your interface name. ## Step 3: Disable Automatic IPv6 Address Assignment Prevent future automatic assignments by disabling IPv6 auto-configuration and router advertisements: ``` # Disable IPv6 auto-configuration sudo sysctl -w net.ipv6.conf.[INTERFACE].autoconf=0 # Disable accepting router advertisements sudo sysctl -w net.ipv6.conf.[INTERFACE].accept_ra=0 ``` Replace **[INTERFACE]** with your network interface name (e.g., `eth0`). ## Step 4: Make the Changes Persistent To ensure your changes persist after a reboot: - Edit the `/etc/sysctl.conf` file: ``` sudo nano /etc/sysctl.conf ``` - Add the following lines at the end of the file: ``` net.ipv6.conf.[INTERFACE].autoconf = 0 net.ipv6.conf.[INTERFACE].accept_ra = 0 ``` - Replace [INTERFACE] with your network interface name (e.g., `eth0`). - Save the file and reload the settings: ``` sudo sysctl -p ``` ## Notes - This guide is for resolving IPv6 issues on VMs purchased before November 22, 2024. - Ensure you assign the IPv6 address provided in your server dashboard to your VM as described in Step 1. - If you encounter issues or need further assistance, please contact Faastic Support. ### Payment methods URL: https://www2.faastic.com/knowledge/payment-methods At Faastic, we aim to make your payment experience as smooth and flexible as possible. We currently accept the following payment methods: - Bancontact - iDEAL - Wero - Bank Transfer (Please note: bank transfers may take a few days to be confirmed) - Credit Card (including Visa, American Express, Apple Pay, and Google Pay) We are always looking to improve and expand our payment options to suit your needs. If you have a preferred payment method that is not listed, we’d love to hear from you! Please feel free to email us at **service@faastic.com**, and our team will explore adding it for you. Thank you for choosing Faastic! ### I am unable to mount the SMB share — what to do? URL: https://www2.faastic.com/knowledge/i-am-unable-to-mount-the-smb-share-what ## Debugging Connection Issues While Mounting an SMB Share Using Nmap First, make sure you are using the correct server, username, login and password. These details can be found under your service details.  When attempting to mount a Server Message Block (SMB) share, encountering connection issues can be a common but frustrating problem. One effective method to diagnose these issues involves using Nmap, a powerful network scanning tool that can provide insights into the network state, including potential filtering of SMB ports by Internet Service Providers (ISP) or routers. This article outlines steps to debug connection problems while trying to mount an SMB share using Nmap. ### Prerequisites Before proceeding, ensure you have the following: - **Nmap Installed**: Ensure Nmap is installed on your system. It's available for various operating systems, including Windows, macOS, and Linux. - **SMB Share Details**: Know the IP address or hostname of the SMB server you're trying to access. ### Step 1: Verify the SMB Share is Accessible 1. **Ping the SMB Server**: Start by pinging the SMB server to ensure it's reachable from your network. In a terminal or command prompt, type `ping [server IP or hostname]` and press Enter. If the server responds, it's reachable. If not, there may be a network issue or the server IP/hostname might be incorrect. 2. **Check SMB Share Accessibility**: Attempt to manually access the SMB share from a file explorer using the server's IP or hostname. If unsuccessful, it could indicate a network or server-side issue. ### Step 2: Use Nmap to Scan for SMB Ports 1. **Open a Terminal or Command Prompt**: Launch your command-line interface. 2. **Run Nmap Scan**: Type `nmap -p 445 [server IP]` to scan the SMB port (445 is the default port for SMB). Replace `[server IP]` with the actual server IP address or hostname. 3. **Analyze Scan Results**: Look for the port state in the Nmap output. If the port state is `open`, the SMB service is reachable. If the state is `filtered`, it may indicate that the ISP or router is blocking access to the port. ### Step 3: Troubleshooting Filtered Ports If Nmap shows the SMB port as `filtered`, it suggests a network device (like a firewall) or your ISP is blocking the connection. Here's how to troubleshoot this issue: 1. **Check Local Firewall Settings**: Ensure your local firewall allows outbound connections to port 445. Adjust the settings if necessary. 2. **Router Configuration**: Access your router's administration interface and check if any settings or firewall rules might be blocking SMB traffic. Look for settings related to port forwarding or filtering. In an ADSL Fritzbox modem you can do so by disabling the NetBIOS filter under Internet -> Filters -> Lists. 3. **Contact ISP**: If the problem persists, your ISP might be filtering SMB ports (which is common to prevent specific types of attacks). Contact your ISP to inquire about their network policies regarding port filtering. 4. **Alternative Solutions**: If ISP or router-level filtering cannot be resolved, consider using a VPN to bypass the filtering or changing the SMB port on the server side, if possible, to a port allowed through the filter. ### How to upgrade a cloud VPS URL: https://www2.faastic.com/knowledge/how-to-upgrade-a-cloud-vps After upgrading your Cloud VPS with the Upgrade Button, Faastic will automatically increase your disk space and update any relevant limits. To ensure that the new RAM and CPU limits take effect, a reboot of your system is necessary. You can easily reboot your system by using the reboot button located in the control panel. After the reboot is complete, all new settings and limits will be fully applied and operational. ### How to enable mail for your domain URL: https://www2.faastic.com/knowledge/how-to-enable-mail-for-your-domain Enabling mail for your domain is straightforward in our Shared Hosting management panel. Whether you're setting up your first email account or managing multiple domains with our Advanced or Pro packages, follow these steps to get started: #### 1. Access the Mail Management Panel Navigate to your Shared Hosting Management Panel. Log in to access the shared hosting management options. #### 2. Open the Mail Tab Locate and click on the "Mail" tab. This section provides an overview of your mail domains, allowing for the management of one or multiple domains. ![](/kb/7_blobid2.png) #### 3. Select Your Domain Click on the domain for which you want to enable mail services. You'll see a page listing all existing mail accounts associated with that domain. #### 4. Create a New Mail Account Select "Add Mail Account" to create a new email address for your domain. ![](/kb/9_blobid4.png) #### 5. Configure Your New Email Account Enter the desired account name and choose a secure password. The account name is the part before the "@" in your email address. You can also opt to have a copy of your account credentials sent to your private email address for safekeeping. ![](/kb/17_10_blobid5.png) #### 6. Advanced Options (Optional) These settings are optional but can be useful for customizing your email account: - Quota: Limit the maximum memory usage of a mailbox. - Aliases: Set up multiple addresses that deliver to the same mailbox, e.g., direct hello@yourdomain.com to info@yourdomain.com. - Forward to: Automatically forward incoming emails to another address. Note that some email services may mark forwarded emails as spam. - Discard All Mail: Use this option for addresses like no-reply@yourdomain.com, where incoming mail is not saved. - Do Not Store Forwarded Mail: Enable this to delete all forwarded emails. - Rate Limit: Control how many emails an account can send within an hour. #### 7. Review Your Account Details On the right side of the screen, you will find an overview of your mailbox credentials, including connection parameters and login details. This information is crucial for setting up email clients and ensuring secure access to your email. ![](/kb/16_11_blobid6.png) ### How to add your new domain to Shared Hosting Advanced or Pro URL: https://www2.faastic.com/knowledge/how-to-add-your-new-domain-to-shared-hos Managing DNS records and integrating a new domain with Shared Hosting at Faastic is a straightforward process. Whether you are transferring an existing domain or setting up a new one, follow these structured steps to ensure a smooth integration with your Shared Hosting Advanced or Pro package. #### Part 1: Configuring Domain Nameservers To begin, modify your domain's nameservers to point to our Shared Hosting services: - Access your Faastic Client-area: Log in to view your domain settings. - Modify Nameservers: Navigate to "Nameservers" and select "Use custom nameservers". Enter the following: ns1.faastic.com in the Nameserver 1 field - ns2.faastic.com in the Nameserver 2 field ![](/kb/14_blobid1.png) - Apply Changes: Click on "Change Nameservers" to update your settings. Upon completing these steps, your domain will redirect to the Shared Hosting nameservers. #### Part 2: Linking Domain to Shared Hosting Next, add your domain to your Shared Hosting to start hosting applications and email services: - Access Shared Hosting Admin Panel: Navigate to your hosting dashboard. - Add Web Domain: Click on "Add web domain" and provide the necessary details for your domain. Ensure both 'DNS Support' and 'Mail Support' are checked. ![](/kb/15_blobid3.png) - Save Configuration: After filling in your domain information, click on "Save" to finalize the setup. Congratulations! Your domain is now linked to your Shared Hosting. You are all set to host your applications and manage your email. ### FTP and SMB/CIFS Connection Instructions URL: https://www2.faastic.com/knowledge/ftp-and-smborcifs-connection-instruction ## FTP and SMB/CIFS Connection Instructions FTP and SMB/CIFS access are now activated by default. Manage these settings at [this link](https://faastic.com/clientarea.php).  Server IP, share and password can be found in the control panel.  ## How to Connect to the Share: ### Make sure the IP you connect from is allowed access: This can be done under service management / IP control.  Enter the IP you want to connect from OR ALL if you want to connect from anywhere.  ![](/kb/3_Screenshot-2023-12-03-at-23.01.56.png) ![](/kb/4_Screenshot-2023-12-03-at-23.02.06.png) ### Mounting on Linux: - Ensure your Linux system has the necessary CIFS packages. - Create a mount point using: sudo mkdir /mnt/smb_share - Mount the volume with: sudo mount -t cifs -o username=your_username //server_ip/your_share_name /mnt/smb_share - For shares requiring user credentials, include: -o username=your_username after `cifs` and before the share address. ### Mounting on Windows: - Choose a drive letter and mount the SMB share permanently. - Use this command in the command line, replacing with the appropriate drive letter, IP, and share name: net use Z: \\server_ip\your_share_name /PERSISTENT:YES ### Mounting on Apple (macOS): - Have your username and password ready (or guest credentials if the share allows guest access). - Open Finder, navigate to 'Go' > 'Connect To Server'. - Enter the SMB address: smb://server_ip - Provide the necessary username and password, or guest credentials. ### Connect to your mail from your devices or webmail URL: https://www2.faastic.com/knowledge/connect-to-your-mail-from-your-devices-o Connecting to your email with Shared Hosting is a straightforward process. Follow this guide to quickly set up and access your mailbox. #### Step 1: Locate Your Email Details Find your specific email details in your hosting panel: - Log in to your Shared Hosting Panel: Navigate to Mail → your_domain.com → and select your mailbox. - Example: mailbox@your_domain.com This guide uses **example.com** as a placeholder. Replace it with your actual domain name. #### Option 1: Access Webmail Access your email via your browser: [**https://webmail.example.com**](https://webmail.example.com) #### #### Option 2: Email Connection Settings Use the following settings to connect your email on any device or application. #### IMAP Settings - Authentication: Normal password - SSL/TLS: Port 993 - STARTTLS: Port 143 - No Encryption: Port 143 - Server: mail.example.com #### POP3 Settings - Authentication: Normal password - SSL/TLS: Port 995 - STARTTLS: Port 110 - No Encryption: Port 110 - Server: mail.example.com #### SMTP Settings - Authentication: Normal password - SSL/TLS: Port 465 - STARTTLS: Port 587 - No Encryption: Port 25 - Server: mail.example.com By following these steps, you can easily connect your mailbox to any device or email client. Happy emailing! ### Activating DNSSEC on your domain URL: https://www2.faastic.com/knowledge/activating-dnssec-on-your-domain If you're experiencing issues while attempting to activate DNSSEC for your domain, please follow these steps to submit a support ticket for assistance: #### 1. Access the Client Area Login to your account and access the client area to begin the process. #### 2. Click on Support In the left menu of the client area, click on the "Support" tab to navigate to the support section. #### 3. Navigate to Help Tickets Within the support section, click on "Help Tickets" to view existing tickets or to create a new one. #### 4. Create a New Ticket Click on "Create New Ticket" to open a form where you can describe the issue you are encountering. #### 5. Provide DNSSEC Details When asking us to manually enable DNSSEC, please include your domain name and the following DNSSEC details to help us assist you more efficiently: - Keytype: Choose between 265 (zsk) or 257 (ksk) - Algorithm: Select from the list below: DSA-NSEC3-SHA1 (6) - RSA/SHA-256 (8) - RSA/SHA-512 (10) - GOST R 34.10-2001 (12) - ECDSA Curve P-256 (13) - ECDSA Curve P-384 (14) - Ed25519 (15) - Ed448 (16) - Public Key: Include the public key associated with your DNSSEC configuration. #### 6. Submit the Ticket After filling out the ticket form with the necessary details, submit it to our support team. We will review your submission and get back to you as quickly as possible with your DNSSEC enabled. --- ## Legal - [Terms of Service](https://www2.faastic.com/legal/terms) - [Privacy Policy](https://www2.faastic.com/legal/privacy) - [Data Processing Agreement (GDPR)](https://www2.faastic.com/legal/data-processing-agreement) - [Domain Registration Agreement](https://www2.faastic.com/legal/domain-registration-agreement) - [Report Abuse](https://www2.faastic.com/legal/abuse)