Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Oplink.net: Increased Data on all VPS/VDS Plans *up to 50TB*
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Oplink.net: Increased Data on all VPS/VDS Plans *up to 50TB*

oplinkoplink Member, Patron Provider
edited July 2024 in Offers

ABOUT US
If you don't know us by know you should! The Optimal Link Corporation, also known as Oplink.net, is a premium hosting company located north of Houston, Texas. We have been providing premium services for an affordable cost since 1999.

Our physical network resides in a Tier-4 (highest rated) premier data center and we currently offer dedicated servers, VPS, VDS, colocation, and fiber Internet services. Our network has over 100Gbps of bandwidth from Lumen & Cogent. All network traffic is protected by our Corero SmartWall and includes DDoS protection up to 100Gbps for all clients.

Oplink.net has been proudly servicing customers with fast account set up, quick email ticket responses and a premium reliable service for years.

VPS/VDS Addons:
Extra NVME Storage 250GB = +$5/month
Full Image VPS Backups start at = +$5/month for 300GB
Extra IPv4 = +$3/mo per IP
Extra Data = +$3/mo per 10TB

Included with All VPS/VDS Plans:
1 IPv4 + 1 IPv6
Always On DDoS Protection
10% Discount when you prepay Annually


AMD Ryzen 3900x Plan Specials

Plan: 2GB
1 AMD Ryzen 3900x vCore
Geekbench 6: 1675 Single Core
2 GB DDR4 Memory
100 GB NVMe Storage (Raid 10)
10Gbps port + 50TB data
★★ $4.95/month ★★
Order: https://my.oplink.net/store/amd-ryzen-3900x-vps/2gb

Plan: 4GB
2 AMD Ryzen 3900x vCores
Geekbench 6: 1720 Single Core & 3122 Multi Core
4 GB DDR4 Memory
250 GB NVMe Storage (Raid 10)
10Gbps port + 50TB data
★★ $9.95/month ★★
Order: https://my.oplink.net/store/amd-ryzen-3900x-vps/4gb


AMD Ryzen 7950x Plan Specials

**All higher end 7950x plans on the website now include 50TB data!

Basic Plus VPS
1 AMD Ryzen 7950x vCores
Geekbench 6: 2890 Single Core
2 GB DDR5 Memory
100 GB NVMe Storage (Raid 10)
10 Gbps Port & 10TB data
★★ $4.95/month ★★
Order: https://my.oplink.net/store/virtual-servers/basic-plus-vps

Standard Plus VPS
2 AMD Ryzen 7950x vCores
Geekbench 6: 2890 Single Core & 5122 Multi Core
4 GB DDR5 Memory
250 GB NVMe Storage (Raid 10)
10 Gbps Port & 20TB data
★★ $9.95/month ★★
Order: https://my.oplink.net/store/virtual-servers/standard-plus-vps


AMD Epyc VDS Plan Specials: (100% Dedicated CPU)

**All 8GB+ plans on the website now include 50TB data!

Plan: 2GB
1 AMD EPYC 7543 vCore
Geekbench 6: 1734 Single Core
2 GB DDR4 Memory
100 GB NVMe Storage (Raid 10)
10Gbps port + 32TB data
★★ $9.95/month ★★
Order: https://my.oplink.net/store/dedicated-vps-amd-epc-7543/2gb


To see all our AMD 3900x Plans visit:
https://my.oplink.net/store/amd-ryzen-3900x-vps

To see all our AMD 7950x Plans visit:
https://my.oplink.net/store/virtual-servers

To see all our AMD EPYC VDS Plans visit:
https://my.oplink.net/store/amd-epc-7543-vds

TERMS
*3 day money back guarantee for new clients only.
*Data is counted as a total of in+out traffic.

LOCATION
2626 Spring Cypress Road
Spring, TX 77388

NETWORK
Looking Glass: https://speedtest.oplink.net/
Raw Test File: https://speedtest.oplink.net/1000MB.test
Test IPs: 216.230.232.34 & 216.230.224.34
IPv6 Test IP: 2604:e880:3::1

CONTACT US
Email: [email protected]
Phone: 1-281-445-9800

«1

Comments

  • Highly recommended VPS
    @oplink

  • oplinkoplink Member, Patron Provider

    @dev_vps said:
    Highly recommended VPS
    @oplink

    We always appreciate your feedback and comments you share on LET in all posts. Thank you for your business.

  • dev_vpsdev_vps Member
    edited July 2024

    @oplink said:

    @dev_vps said:
    Highly recommended VPS
    @oplink

    We always appreciate your feedback and comments you share on LET in all posts. Thank you for your business.

    Can I get 3-day trial VPS for this one?
    Thank you.

    Basic Plus VPS
    1 AMD Ryzen 7950x vCores
    Geekbench 6: 2890 Single Core
    2 GB DDR5 Memory
    100 GB NVMe Storage (Raid 10)
    10 Gbps Port & 10TB data
    ★★ $4.95/month ★★
    
  • oplinkoplink Member, Patron Provider

    @dev_vps said:

    @oplink said:

    @dev_vps said:
    Highly recommended VPS
    @oplink

    We always appreciate your feedback and comments you share on LET in all posts. Thank you for your business.

    Can I get 3-day trial VPS for this one?
    Thank you.

    Basic Plus VPS
    1 AMD Ryzen 7950x vCores
    Geekbench 6: 2890 Single Core
    2 GB DDR5 Memory
    100 GB NVMe Storage (Raid 10)
    10 Gbps Port & 10TB data
    ★★ $4.95/month ★★
    

    The 3day refund policy is for new clients so they test us out, if they are unhappy they can request a refund. This helps people in test the network, as a lot of clients setup VPNs etc.

  • lirrrlirrr Member

    @oplink how much if I want to increase just ram

  • allthemtingsallthemtings Member, Megathread Squad

    @oplink

    Any YABs on the 7950?

  • oplinkoplink Member, Patron Provider

    @lirrr said:
    @oplink how much if I want to increase just ram

    Email, [email protected] this would require custom prices. Include what plan you want as your base plan in the email.

  • oplinkoplink Member, Patron Provider

    @allthemtings said:
    @oplink

    Any YABs on the 7950?

    Mon Apr  8 04:56:03 PM UTC 2024
    
    Basic System Information:
    ---------------------------------
    Processor  : AMD Ryzen 9 7950X 16-Core Processor
    CPU cores  : 2 @ 4499.808 MHz
    AES-NI     : ✔ Enabled
    VM-x/AMD-V : ✔ Enabled
    RAM        : 3.8 GiB
    Distro     : Debian GNU/Linux 12 (bookworm)
    Kernel     : 6.1.0-9-amd64
    VM Type    : KVM
    IPv4/IPv6  : ✔ Online / ✔ Online
    
    IPv6 Network Information:
    ---------------------------------
    ISP        : The Optimal Link Corporation
    ASN        : AS40156 The Optimal Link Corporation
    Host       : The Optimal Link Corporation
    Location   : Houston, Texas (TX)
    Country    : United States
    
    fio Disk Speed Tests (Mixed R/W 50/50) (Partition /dev/sda1):
    ---------------------------------
    Block Size | 4k            (IOPS) | 64k           (IOPS)
      ------   | ---            ----  | ----           ----
    Read       | 213.14 MB/s  (53.2k) | 2.69 GB/s    (42.1k)
    Write      | 213.71 MB/s  (53.4k) | 2.70 GB/s    (42.3k)
    Total      | 426.85 MB/s (106.7k) | 5.40 GB/s    (84.4k)
               |                      |
    Block Size | 512k          (IOPS) | 1m            (IOPS)
      ------   | ---            ----  | ----           ----
    Read       | 4.71 GB/s     (9.2k) | 5.56 GB/s     (5.4k)
    Write      | 4.96 GB/s     (9.7k) | 5.93 GB/s     (5.7k)
    Total      | 9.68 GB/s    (18.9k) | 11.49 GB/s   (11.2k)
    
    iperf3 Network Speed Tests (IPv4):
    ---------------------------------
    Provider        | Location (Link)           | Send Speed      | Recv Speed      | Ping
    -----           | -----                     | ----            | ----            | ----
    Clouvider       | London, UK (10G)          | 1.22 Gbits/sec  | 1.80 Gbits/sec  | 104   ms
    Eranium         | Amsterdam, NL (10G)       |  916 Mbits/sec  | 1.63 Gbits/sec  | 113   ms
    Telia           | Helsinki, FI (10G)        | 1.27 Gbits/sec  | 909 Mbits/sec   | 148   ms
    Uztelecom       | Tashkent, UZ (10G)        |  380 Mbits/sec  | 836 Mbits/sec   | 208   ms
    Leaseweb        | Singapore, SG (10G)       |  792 Mbits/sec  | 820 Mbits/sec   | 204   ms
    Clouvider       | Los Angeles, CA, US (10G) | 3.75 Gbits/sec  | 4.90 Gbits/sec  |  36.0 ms
    Enzu.com        | Chicago, IL, US (10G)     | 5.91 Gbits/sec  | 3.09 Gbits/sec  |  27.4 ms
    Hivelocity      | Dallas, TX, US (10G)      | 4.86 Gbits/sec  | 7.54 Gbits/sec  |   6.2 ms
    Leaseweb        | NYC, NY, US (10G)         | 3.79 Gbits/sec  | 4.59 Gbits/sec  |  32.3 ms
    Edgoo           | Sao Paulo, BR (1G)        | 1.43 Gbits/sec  | 1.27 Gbits/sec  | 141   ms
    
    Geekbench 6 Benchmark Test:
    ---------------------------------
    Test            | Value
                    |
    Single Core     | 2788
    Multi Core      | 4950
    Full Test       | https://browser.geekbench.com/v6/cpu/5645911
    
  • dev_vpsdev_vps Member
    edited July 2024

    @allthemtings said:
    @oplink

    Any YABs on the 7950?

    .
    will be posting updated YABS shortly

    Thanked by 2allthemtings oplink
  • oplinkoplink Member, Patron Provider

    @dev_vps said:
    will be posting updated YABS shortly

    Its always nice to compare your older April 8th I pasted above to a new one!

  • The 7950x ones' price seems higher than before. I should grab more.

  • oplinkoplink Member, Patron Provider

    @hiphiphip0 said:
    The 7950x ones' price seems higher than before. I should grab more.

    The old May/June specials did get tweaked https://oplink.net/vps-specials/

    We now offer 10% off annual prepays too on all plans.

  • davidedavide Member

    :'(

  • oplinkoplink Member, Patron Provider

    @davide said:

    Do you have JS enabled? We dont have anything super aggressive setup w/ cloudflare. Try using default browser settings. You appear to be failing the JS Challenge. You could try another browser as well.

  • davidedavide Member

    @oplink: it's the Falkon browser that doesn't tolerate any kind of CloudFlare. Alas I also don't tolerate any kind browser but Falkon.

    However, if you could move the CF protection down to the cart page or to the payment module itself and leave the product pages free from CF, I'd be able to PonyHost your services. (the PonyHost bot is blocked by CloudFlare)

  • dev_vpsdev_vps Member
    edited July 2024

    image
    .
    image

  • oplinkoplink Member, Patron Provider

    @davide said:
    @oplink: it's the Falkon browser that doesn't tolerate any kind of CloudFlare. Alas I also don't tolerate any kind browser but Falkon.

    However, if you could move the CF protection down to the cart page or to the payment module itself and leave the product pages free from CF, I'd be able to PonyHost your services. (the PonyHost bot is blocked by CloudFlare)

    Please Use another browser to order. Too many bots order when we have viral sales. It helps block some bad actors.

  • debiaodebiao Member

    Nice offer

  • @oplink said:

    @dev_vps said:
    will be posting updated YABS shortly

    Its always nice to compare your older April 8th I pasted above to a new one!

    GB6 score comparison -- April 2024 vs July 2024

    Geekbench 6 Benchmark Test:
     ----------------------------------------------------------------
     Test            | April 2024   |  July 2024
                     |              | 
     Single Core     | 2788         |  2432
     Multi Core      | 4950         |  4298
    
     Full Test 
            April    | https://browser.geekbench.com/v6/cpu/5645911
            July     | https://browser.geekbench.com/v6/cpu/6927588
    
     ----------------------------------------------------------------
    
    Thanked by 1oplink
  • dev_vpsdev_vps Member
    edited July 2024
    ---------------------------------------------------------------------------
     Basic System Info
    ---------------------------------------------------------------------------
     CPU Model          : AMD Ryzen 9 7950X 16-Core Processor
     CPU Cores          : 2 @ 4499.984 MHz
     CPU Cache          : 512 KB
     AES-NI             : ✔ Enabled
     VM-x/AMD-V         : ✔ Enabled
     Total Disk         : 1000.0 GB (9.6 GB Used)
     Total RAM          : 3.8 GB (117.7 MB Used)
     System uptime      : 0 days, 0 hour 39 min
     Load average       : 0.08, 0.31, 0.17
     OS                 : Debian GNU/Linux 11
     Arch               : x86_64 (64 Bit)
     Kernel             : 5.10.0-21-amd64
     Virtualization     : KVM
    ---------------------------------------------------------------------------
     Basic Network Info
    ---------------------------------------------------------------------------
     Primary Network    : IPv6
     IPv6 Access        : ✔ Online
     IPv4 Access        : ✔ Online
     ISP                : The Optimal Link Corporation
     ASN                : AS40156 The Optimal Link Corporation
     Host               : The Optimal Link Corporation
     Location           : Houston, Texas-TX, United States
    
     fio Disk Speed Tests (Mixed R/W 50/50) (Partition /dev/sda1):
     ---------------------------------
     Block Size | 4k            (IOPS) | 64k           (IOPS)
       ------   | ---            ----  | ----           ----
     Read       | 256.10 MB/s  (64.0k) | 2.95 GB/s    (46.2k)
     Write      | 256.77 MB/s  (64.1k) | 2.97 GB/s    (46.4k)
     Total      | 512.87 MB/s (128.2k) | 5.93 GB/s    (92.6k)
                |                      |
     Block Size | 512k          (IOPS) | 1m            (IOPS)
       ------   | ---            ----  | ----           ----
     Read       | 5.59 GB/s    (10.9k) | 5.88 GB/s     (5.7k)
     Write      | 5.89 GB/s    (11.5k) | 6.27 GB/s     (6.1k)
     Total      | 11.49 GB/s   (22.4k) | 12.15 GB/s   (11.8k)
    
     iperf3 Network Speed Tests (IPv4):
     ---------------------------------
     Provider        | Location (Link)           | Send Speed      | Recv Speed      | Ping
     -----           | -----                     | ----            | ----            | ----
     Clouvider       | London, UK (10G)          | 1.58 Gbits/sec  | 994 Mbits/sec   | 104 ms
     Eranium         | Amsterdam, NL (100G)      | 1.63 Gbits/sec  | 1.60 Gbits/sec  | --
     Uztelecom       | Tashkent, UZ (10G)        | 842 Mbits/sec   | 704 Mbits/sec   | 207 ms
     Leaseweb        | Singapore, SG (10G)       | 695 Mbits/sec   | 787 Mbits/sec   | 226 ms
     Clouvider       | Los Angeles, CA, US (10G) | busy            | busy            | 36.2 ms
     Leaseweb        | NYC, NY, US (10G)         | 3.79 Gbits/sec  | 4.75 Gbits/sec  | 36.1 ms
     Edgoo           | Sao Paulo, BR (1G)        | 1.28 Gbits/sec  | 1.35 Gbits/sec  | 135 ms
    
     iperf3 Network Speed Tests (IPv6):
     ---------------------------------
     Provider        | Location (Link)           | Send Speed      | Recv Speed      | Ping
     -----           | -----                     | ----            | ----            | ----
     Clouvider       | London, UK (10G)          | 1.34 Gbits/sec  | 1.72 Gbits/sec  | 104 ms
     Eranium         | Amsterdam, NL (100G)      | busy            | busy            | --
     Uztelecom       | Tashkent, UZ (10G)        | 711 Mbits/sec   | 606 Mbits/sec   | 207 ms
     Leaseweb        | Singapore, SG (10G)       | 695 Mbits/sec   | 760 Mbits/sec   | 225 ms
     Clouvider       | Los Angeles, CA, US (10G) | busy            | busy            | 36.2 ms
     Leaseweb        | NYC, NY, US (10G)         | 4.37 Gbits/sec  | 4.51 Gbits/sec  | 35.8 ms
     Edgoo           | Sao Paulo, BR (1G)        | 1.17 Gbits/sec  | 1.35 Gbits/sec  | 135 ms
    
     Geekbench 5 Benchmark Test:
     ---------------------------------
     Test            | Value
                     |
     Single Core     | 1789
     Multi Core      | 3341
     Full Test       | https://browser.geekbench.com/v5/cpu/22687130
    
     Geekbench 6 Benchmark Test:
     ---------------------------------
     Test            | Value
                     |
     Single Core     | 2432
     Multi Core      | 4298
     Full Test       | https://browser.geekbench.com/v6/cpu/6927588
    
     Speedtest by Ookla
    
     Server: ReliableSite Hosting - Los Angeles, CA, USA
     ISP: The Optimal Link Corporation
     Idle Latency:    38.09 ms   (jitter: 2.17ms, low: 38.03ms, high: 42.37ms)
         Download:  5250.04 Mbps (data used: 7.3 GB)
                      44.17 ms   (jitter: 0.45ms, low: 43.99ms, high: 75.77ms)
           Upload:  2307.40 Mbps (data used: 3.0 GB)
                      38.01 ms   (jitter: 0.39ms, low: 37.85ms, high: 41.31ms)
      Packet Loss:     0.0%
       Result URL: https://www.speedtest.net/result/c/b94a3fff-31c3-4483-a271-8bffe8bc2745
    
     Server: RETN - London, England, UK
     ISP: The Optimal Link Corporation
     Idle Latency:   102.22 ms   (jitter: 1.73ms, low: 100.50ms, high: 104.56ms)
         Download:  1425.40 Mbps (data used: 1.9 GB)
                     202.37 ms   (jitter: 64.38ms, low: 102.87ms, high: 664.11ms)
           Upload:   931.78 Mbps (data used: 1.6 GB)
                     185.05 ms   (jitter: 59.02ms, low: 101.86ms, high: 605.11ms)
      Packet Loss:     0.0%
       Result URL: https://www.speedtest.net/result/c/27106a4f-cfee-4af6-a125-13c82ebaf998
    
    ---------------------------------------------------------------------------
     Speedtest.net (Region: GLOBAL)
    ---------------------------------------------------------------------------
     Location         Latency     Loss    DL Speed       UP Speed       Server
    
     ISP: The Optimal Link Corporation
     Nearest            1.32 ms   0.0%    3964.75 Mbps   4952.45 Mbps   Dish Wireless - Houston, TX
    
     Dallas, US         5.10 ms   0.0%    5350.91 Mbps   7216.34 Mbps   i3D.net - Dallas, TX
     Houston, TX        2.60 ms   0.0%    5327.35 Mbps   3475.78 Mbps   Ezee Fiber - Houston, TX
     Chicago, IL       27.07 ms   0.0%    5554.02 Mbps   3141.50 Mbps   Enzu.com - Chicago, IL
     Miami, US         26.29 ms   N/A     4535.74 Mbps   2011.76 Mbps   Dish Wireless - Miami, FL
     New York, NY      31.89 ms   0.0%    5590.90 Mbps   2648.01 Mbps   Surfshark Ltd - New York, NY
     Miami, FL         30.33 ms   0.0%    5154.11 Mbps   2851.40 Mbps   ReliableSite Hosting - Miami, FL
     Spokane, WA       67.05 ms   0.0%    5117.87 Mbps   1310.43 Mbps   Crunchbits - Spokane, WA
     Seattle, WA       54.80 ms   0.0%    4825.76 Mbps   1657.99 Mbps   Misaka Network, Inc. - Seattle, WA
     Los Angeles, CA   37.95 ms   0.0%    4880.75 Mbps   2248.41 Mbps   ReliableSite Hosting - Los Angeles, CA
     San Jose, CA      45.25 ms   0.0%    5302.96 Mbps   2219.03 Mbps   Misaka Network, Inc. - San Jose, CA
    
     London, UK       101.35 ms   0.0%    5294.08 Mbps    819.10 Mbps   VeloxServ Communications - London
     Amsterdam, NL    115.78 ms   0.0%    5355.08 Mbps    541.92 Mbps   31173 Services AB - Amsterdam
     Paris, FR        109.14 ms   N/A     5603.56 Mbps    468.30 Mbps   Axione - Paris
     Frankfurt, DE    116.39 ms   0.0%    4090.51 Mbps    622.55 Mbps   Clouvider Ltd - Frankfurt am Main
     Warsaw, PL       137.49 ms   0.0%    4972.18 Mbps    707.92 Mbps   Play - Warszawa
     Kyiv, UA         144.42 ms   0.0%    3580.48 Mbps    351.17 Mbps   O3 - Kyiv
     Bucharest, RO    136.54 ms   0.0%    4300.80 Mbps    656.20 Mbps   Vodafone Romania Fixed – Bucharest - Bucharest
    
     Bangalore, IN    252.04 ms   0.0%    3010.86 Mbps    276.35 Mbps   Bharti Airtel Ltd - Bangalore
     Chennai, IN      253.23 ms   N/A     2802.31 Mbps    343.15 Mbps   Jio - Chennai
     Mumbai, IN       245.48 ms   0.0%    2877.67 Mbps    284.38 Mbps   i3D.net - Mumbai
     Mumbai, MH       250.60 ms   N/A     2857.14 Mbps    401.58 Mbps   Jio - Mumbai
     Delhi, IN        278.57 ms   0.0%    2694.21 Mbps    210.42 Mbps   Tata Play Fiber - New Delhi
    
     Jeddah, SA       161.57 ms   0.0%    4964.40 Mbps   612.08 Mbps    Saudi Telecom Company
     Dubai, AE        212.88 ms   0.0%    3721.04 Mbps   445.00 Mbps    du - Dubai
    
     Hong Kong        FAILED - IP has been rate limited. Try again after 1 hour.                                            
     Sydney           FAILED - IP has been rate limited. Try again after 1 hour.                                            
     Perth            FAILED - IP has been rate limited. Try again after 1 hour.                                            
    
    ---------------------------------------------------------------------------
     Avg DL Speed       : 4469.16 Mbps
     Avg UL Speed       : 1618.93 Mbps
    ---------------------------------------------------------------------------
    
    ==================[ Media Unblock Checker ]=====================
     Dazn:                                  Yes (Region: US)
     Disney+:                               No 
     Netflix:                               Originals Only
     YouTube Premium:                       Yes (Region: US)
     Amazon Prime Video:                    Yes (Region: US)
     TVBAnywhere+:                          Yes
     OneTrust Region:                       US [Texas]
     iQyi Oversea Region:                   US
     Bing Region:                           US
     ChatGPT:                               Yes
     Wikipedia Editability:                 Yes
     Google Search CAPTCHA Free:            Yes
     Steam Currency:                        USD
     ---Forum---
     Reddit:                                No
    ======================================================
    

    Running Windows 11 Enterprise

    Thanked by 1oplink
  • It is important to keep Windows RDP secured.
    1. Use a custom id as account with admin privileges
    2. Make default Administrator account as disabled
    3. Use non standard port for connecting with Windows RDP

  • plumbergplumberg Veteran, Megathread Squad

    @dev_vps said:
    It is important to keep Windows RDP secured.
    1. Use a custom id as account with admin privileges
    2. Make default Administrator account as disabled
    3. Use non standard port for connecting with Windows RDP

    Any other tips to hardening apart from disabling administrator account?

    Changing rdp port for me is security via obscurity.

  • @plumberg said:

    @dev_vps said:
    It is important to keep Windows RDP secured.
    1. Use a custom id as account with admin privileges
    2. Make default Administrator account as disabled
    3. Use non standard port for connecting with Windows RDP

    Any other tips to hardening apart from disabling administrator account?

    Changing rdp port for me is security via obscurity.

    Refer to list of cost-effective RDP security best practices

    https://www.techtarget.com/searchsecurity/tip/10-RDP-security-best-practices-to-prevent-cyberattacks

    Special Mentions

    • Make strong passwords and two-factor authentication mandatory when using RDP.
    • Implement account lockout policies to defend against brute-force attacks.
    • Change the default port used by RDP from 3389 to another.
    • create a user account with administrator privileges and Disable Administrator account
    • Keeping a filtered ip address list and keeping rdp access limited to these ip addresses
    • Log all invalid login attempts
    Thanked by 1plumberg
  • plumbergplumberg Veteran, Megathread Squad

    @dev_vps said:

    @plumberg said:

    @dev_vps said:
    It is important to keep Windows RDP secured.
    1. Use a custom id as account with admin privileges
    2. Make default Administrator account as disabled
    3. Use non standard port for connecting with Windows RDP

    Any other tips to hardening apart from disabling administrator account?

    Changing rdp port for me is security via obscurity.

    Refer to list of cost-effective RDP security best practices

    https://www.techtarget.com/searchsecurity/tip/10-RDP-security-best-practices-to-prevent-cyberattacks

    Special Mentions

    • Make strong passwords and two-factor authentication mandatory when using RDP.
    • Implement account lockout policies to defend against brute-force attacks.
    • Change the default port used by RDP from 3389 to another.
    • create a user account with administrator privileges and Disable Administrator account
    • Keeping a filtered ip address list and keeping rdp access limited to these ip addresses
    • Log all invalid login attempts

    Any thoughts on 2FA or MFA for RDP?

  • @plumberg said:

    @dev_vps said:

    @plumberg said:

    @dev_vps said:
    It is important to keep Windows RDP secured.
    1. Use a custom id as account with admin privileges
    2. Make default Administrator account as disabled
    3. Use non standard port for connecting with Windows RDP

    Any other tips to hardening apart from disabling administrator account?

    Changing rdp port for me is security via obscurity.

    Refer to list of cost-effective RDP security best practices

    https://www.techtarget.com/searchsecurity/tip/10-RDP-security-best-practices-to-prevent-cyberattacks

    Special Mentions

    • Make strong passwords and two-factor authentication mandatory when using RDP.
    • Implement account lockout policies to defend against brute-force attacks.
    • Change the default port used by RDP from 3389 to another.
    • create a user account with administrator privileges and Disable Administrator account
    • Keeping a filtered ip address list and keeping rdp access limited to these ip addresses
    • Log all invalid login attempts

    Any thoughts on 2FA or MFA for RDP?

    Thanked by 1plumberg
  • @oplink said:

    Standard Plus VPS
    2 AMD Ryzen 7950x vCores
    Geekbench 6: 2890 Single Core & 5122 Multi Core
    4 GB DDR5 Memory
    250 GB NVMe Storage (Raid 10)
    10 Gbps Port & 20TB data
    ★★ $9.95/month ★★
    Order: https://my.oplink.net/store/virtual-servers/standard-plus-vps

    This is the VPS plan I recommend for Windows RDP.

  • oplinkoplink Member, Patron Provider

    @dev_vps said:

    @plumberg said:

    @dev_vps said:
    It is important to keep Windows RDP secured.
    1. Use a custom id as account with admin privileges
    2. Make default Administrator account as disabled
    3. Use non standard port for connecting with Windows RDP

    Any other tips to hardening apart from disabling administrator account?

    Changing rdp port for me is security via obscurity.

    Some of our VPS clients use this for windows rdp firewall: https://rdpguard.com, its not free, but they do offer a free trial. I played with a little, it works well. I personally recommend you restrict RDP by IP.

    Thanked by 2dev_vps plumberg
  • DataIdeas-JoshDataIdeas-Josh Member, Patron Provider

    There is ways to do certificate/ IP locks /port changes all within windows to help secure RDP some more.

    Thanked by 2dev_vps plumberg
  • Certificate-Based Authentication

    1. Generate a Certificate:

      • Use tools like OpenSSL to generate a self-signed certificate or acquire one from a trusted Certificate Authority (CA).
    2. Install the Certificate:

      • Install the certificate on the RDP server through the Remote Desktop Session Host Configuration tool or using Group Policy.
      • Go to Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security and set Server Authentication Certificate Template.
    3. Configure RDP to Use the Certificate:

      • Open Remote Desktop Session Host Configuration.
      • Under Connections, right-click RDP-Tcp and select Properties.
      • In the General tab, set the Security layer to SSL (TLS 1.0) and select the installed certificate.
    Thanked by 1plumberg
  • plumbergplumberg Veteran, Megathread Squad

    @DataIdeas-Josh said:
    There is ways to do certificate/ IP locks /port changes all within windows to help secure RDP some more.

    Ohbl I wish there was an automatic way to setup letsEncrypt cret and renew it constantly and deploy on rdp server

Sign In or Register to comment.