Quravity
Sovereign Linux Cloud Control Panel

The unified Linux web hosting control panel.

Quravity replaces cPanel, CloudLinux, LiteSpeed, Imunify360, JetBackup, and WHMCS with one self-hosted control panel. Unlimited hosting accounts for a flat $50/month per server.

Explore Interactive Panel UI
Flat Pricing
$50/mo
Unlimited accounts per node
Annual Savings
$2,567–$2,667/yr
Verified savings vs. $263.94/mo legacy stack as of Nov 2026
Hot Reload
0-Drop (<1ms)
SCM_RIGHTS FD passing • 0 dropped sockets
Core Capabilities
123+
Zero legacy plugin bloat
Sample Telemetry • Interactive UI Interactive Architecture Preview (Sample Telemetry)

Interactive Control Panel Architecture Preview

Inspect the actual management environment across administrator, tenant, WordPress, telemetry, and provisioning views.

Explore Interactive UI Preview →
https://host.quravity.pro:2087/qhm
v2.5.0-LTS
Navigation Views

Quravity Host Manager (QHM)

Node: host.quravity.pro · AlmaLinux 9.4 LTS (x86_64) · QTWS HTTP/3

248 Active Accounts
CPU Load (32 Cores)
0.42, 0.28, 0.25
Memory Allocation
14.2 GB / 64 GB
QBD Backup Status
Deduplicated (2h ago)
FastCDC: 88.4% Ratio
Domain Tenant Quota PHP Version QLVE CPU / RAM SSO
example-enterprise.com client_acme 14.2 GB / 50 GB PHP 8.3 (QSAPI) 12% / 1.1 GB Active
api.cloud-tenant.io tenant_cloud 8.5 GB / 25 GB Node.js 22 LTS 24% / 2.4 GB Active
store.merchant-app.net merchant_store 31.0 GB / 100 GB PHP 8.4 (QSAPI) 18% / 1.8 GB Active
Total Software Consolidation

Replace 6 Legacy Subscriptions With One Engine

Traditional hosting requires stacking costly, proprietary add-ons. Quravity integrates all six directly into the core operating system.

Web Server $46.00/mo

QTWS (HTTP/3 & Dynamic .htaccess)

Replaces LiteSpeed Enterprise. Pure C++20 non-blocking event loop with native SCM_RIGHTS file-descriptor passing and instant PCRE rewrite evaluation.

LiteSpeed Enterprise Included in Core
OS Resource Isolation $20.00/mo

QLVE (cgroups v2 & Namespace Jail)

Replaces CloudLinux OS. Strict per-tenant memory (PMEM), CPU share, and IOPS isolation backed by Linux kernel namespaces and QLVE Database Query Governor.

CloudLinux Shared Pro Included in Core
WAF & Threat Defense $45.00/mo

QShield (nftables & ModSec v3)

Replaces Imunify360. In-kernel packet filtering via nftables, real-time OWASP CRS virtual patching, and proactive behavioral malware quarantine.

Imunify360 Suite Included in Core
Backup & Recovery $7.95/mo

QBD (FastCDC Deduplication)

Replaces JetBackup 5. Content-defined chunking with AES-256-GCM encryption, single-file instant restore via FUSE, and native S3/B2 offload.

JetBackup 5 Enterprise Included in Core
Billing & Revenue $39.99+/mo

QBill + WHM API v1 Bridge

Replaces WHMCS subscriptions. Built-in turnkey storefront with Stripe, PayPal, Razorpay, and PayFast webhooks, or drop-in provisioning bridge for existing WHMCS installations.

WHMCS Billing SaaS Included in Core
Control Panel $105.00+/mo

QHM & cPortal (Unlimited Accounts)

Replaces cPanel Premier. Zero per-account tiered licensing fees. Host 10 or 1,000 accounts on your physical or cloud server for the exact same flat fee.

cPanel Premier 250 Flat $50/mo Total
Turnkey Server Provisioning

Deploy In 60 Seconds On Bare-Metal or Cloud

Supports clean installations on AlmaLinux 9, Rocky Linux 9, Ubuntu 22.04 / 24.04 LTS, and Debian 12 across x86_64 and ARM64.

curl -sSL https://quravity.com/install.sh | sudo bash
Streamlined 1-Command Installer Automatic Firewall Setup Zero-Downtime Migration Ready
Read Architecture & Benchmarks →
Systems Engineering Specifications

Core Subsystems & Performance Benchmarks

Quravity is engineered from the ground up in modern C++20, Go, and Linux kernel primitives, avoiding the legacy reverse-proxy overhead and IPC bottlenecks of older control panels.

QTWS — Turbo Web Server

Clean-room C++20 event-driven engine utilizing epoll, native ngtcp2/nghttp3 HTTP/3 stack, and lock-free ring buffers.

  • • SCM_RIGHTS zero-drop file descriptor socket handoff (<1ms reload)
  • • Real-time in-kernel dynamic .htaccess PCRE evaluator (<50µs L1 AST cache)
  • • Triple-Tier Sentinel Failover: L1 qtws-core → L2 qtws-safe → L3 qtws-emergency
  • • Direct binary QSAPI IPC dynamic PHP fast-path
  • • Linux /proc/pressure stall information (PSI) load governor

QLVE — Kernel Resource Governance

Native Linux cgroups v2 controller coupled with unprivileged mount namespaces for lightweight, zero-overhead tenant containment.

  • • Real-time per-tenant CPU quota & PMEM hard enforcement
  • • NVMe IOPS throttling and peak burst-rate regulation
  • • QLVE Database Query & IOPS Governor to prevent query monopolization
  • • QLVE virtualized tenant mount namespace sandboxing (CageFS-compatible)

QMTA & TurboDNS — Communications Engine

Hardened mail delivery and authoritative DNS cluster designed for carrier-grade deliverability and instant record propagation.

  • • High-throughput Postfix/Dovecot LMTP delivery pipeline
  • • Automatic 2048-bit OpenDKIM, SPF, and DMARC alignment
  • • PowerDNS 4.8+ authoritative engine with automated DNSSEC
  • • Integrated Rspamd and ClamAV streaming milter filters

QBD — Deduplicated Backup Daemon

Block-level content-defined chunking (FastCDC) engine written in Go for minimal disk footprint and sub-minute restore operations.

  • • FastCDC rolling hash block deduplication (up to 85% savings)
  • • AES-256-GCM authenticated envelope encryption at rest
  • • Virtual FUSE mount for granular single-file tenant restore
  • • Direct streaming to AWS S3, Wasabi, Backblaze B2, and MinIO
Web Server Comparison

QTWS vs. LiteSpeed Enterprise vs. OpenLiteSpeed

Eight architectural dimensions comparing performance, architecture, and ownership economics.

Evaluation Dimension Quravity QTWS LiteSpeed Enterprise OpenLiteSpeed
Core Architecture & Process Model
Process Topology & Scalability
Clean-Room C++20 Triple-Tier Sentinel Topology
Engineered in modern C++20 using an asynchronous event loop with lock-free ring buffers. Implements a Triple-Tier Topology: non-root worker threads in chroot sandboxes; a Sentinel supervisor monitoring heartbeats; and an emergency safe-mode fallback server.
Proprietary Monolithic C++ Event-Driven Architecture
Closed-source C++ event-driven server. Highly performant, but monolithic, proprietary, and dependent on external systemd watchdogs.
Open-Source Variant with Stripped Enterprise Modules
Open-source variant sharing the core event loop, but stripped of enterprise features including dynamic .htaccess parsing and commercial cache modules.
Native HTTP/3 & QUIC Protocol Stack
Transport Protocol Implementation
RFC 9000/9114 Standards-Compliant ngtcp2 Stack
Full standards-compliant implementation of QUIC v1 (RFC 9000) and HTTP/3 (RFC 9114) using battle-tested ngtcp2 + nghttp3 backed by OpenSSL 3.5.5 over UDP 443. Features connection ID rotation, 0-RTT replay defense, and PMTU discovery.
Custom lsquic Library
Uses LiteSpeed's custom lsquic library with IETF QUIC / HTTP/3 compliant transport.
Stripped lsquic Implementation
Uses lsquic with limited connection concurrency limits and restricted transport configuration options.
Dynamic Apache .htaccess Compatibility
Web Hosting Compatibility & Rewrites
Real-Time Per-Request Evaluation (<50µs L1 AST Cache, No Server Reload)
In-memory recursive .htaccess parser evaluating rules dynamically on every single incoming HTTP request. Supports full PCRE regex, RewriteCond, rewrite flags ([L], [R], [QSA], [NC], [NE], [END]), and directory indexes.
Dynamic .htaccess Evaluation (Commercial License Only)
Fully compatible with dynamic .htaccess evaluation on the fly. Requires commercial license tier.
Supports .htaccess rewrite rules (requires graceful process reload when adding new directory rules)
Supports .htaccess rewrite rules (requires graceful process reload when adding new directory rules). Does not parse new rules dynamically on a per-request basis.
Cache Policy, Tag Invalidation & ESI Assembly
High-Speed Dynamic Caching
Q-Mage Distributed Cache + LSCache Drop-in Compatibility
Surrogate key tagging (X-Cache-Tags) with O(1) in-memory tag invalidation. Native recursive Edge Side Includes (<esi:include>) assembling private user fragments (cart, CSRF tokens) into public cached pages. Real-time Redis cluster coordination.
Proprietary LSCache Engine
Industry-standard cache engine with broad CMS plugin ecosystem (WordPress, Magento, PrestaShop). Supports tag-based purging and ESI fragment processing.
Restricted LSCache Module
Supports basic LSCache for WordPress, but lacks multi-node Redis coordination and has restricted ESI capabilities on dynamic pages.
Backend Dynamic PHP Execution (QSAPI vs LSAPI)
Application Runtime Performance
QSAPI Asynchronous Binary IPC Protocol
Clean-room, high-throughput asynchronous binary IPC protocol operating over private Linux Unix domain sockets (AF_UNIX). Features framed binary headers, persistent hot worker sessions, zero-copy buffer passing, and SO_PEERCRED UID/GID security validation.
Proprietary LiteSpeed SAPI (LSAPI)
Proprietary binary SAPI protocol developed by LiteSpeed Technologies. Significantly faster than standard FastCGI/PHP-FPM due to persistent worker pooling and framed IPC.
Standard LSAPI Implementation
Uses LSAPI, but process supervisor lacks fine-grained tenant resource isolation and dynamic process autoscale pools.
Kernel Load Shedding & Pressure Stall Information (PSI)
Hardware Starvation Defense
Native Linux Kernel PSI Governor (/proc/pressure)
Continuously monitors Linux Kernel Pressure Stall Information (/proc/pressure/{cpu,memory,io}). When hardware enters starvation stall (> 60% PSI), QTWS automatically throttles aggressive crawler bots and prioritizes checkout transactions.
Static Connection Concurrency Limits Only
Relies exclusively on static worker and connection concurrency limits. Cannot sense kernel-level CPU, memory, or NVMe I/O starvation dynamically.
Basic Connection Throttling
Basic connection limits; lacks kernel pressure telemetry or intelligent dynamic request shedding.
Licensing Model & Total Cost of Ownership
Commercial Economics & Sovereign Ownership
Included Native ($0 Add-On Fee — Bundled in $50/mo Quravity License)
Included Native ($0 Add-On Fee — Unlimited CPU cores, domains, and RAM bundled in the $50/mo Quravity license).
Tiered Per-Worker / Per-Account Licensing
Aggressive monthly pricing tiered by CPU core count and memory: Starter ($10/mo), Essential ($26/mo), Professional ($38/mo), Enterprise ($46/mo), Elite ($65/mo), Ultra ($92+/mo).
Free Core, Commercial Addons
Free software, but missing vital commercial features (dynamic .htaccess, enterprise support) designed to force upgrades to paid LSWS Enterprise.
Process Hot-Reload Downtime & Socket Persistence
Zero-Downtime High Availability
<1ms Zero-Drop Reload (SCM_RIGHTS Socket Handoff, 0 Dropped Connections)
Passes listening socket file descriptors across process generations using SCM_RIGHTS over a private Unix domain socket. Upgrades binary and reloads configurations in <1ms with 0 dropped TCP/UDP sockets.
Graceful Restart (< 100ms)
Performs graceful process restarts with parent process coordination. Typically requires 50ms to 200ms during heavy load.
Full Restart / Reload Required (Up to 5,000ms)
Requires frequent server reloads for configuration and .htaccess updates. Takes 1 to 5 seconds under heavy multi-domain configurations.
Market Benchmark

5-Way Control Panel Capability Matrix

Direct technical comparison across 22 operational capabilities.

Capability Quravity v2.5 cPanel / WHM Plesk Obsidian DirectAdmin CyberPanel
Default Web Server
Web Engine & Protocols
 QTWS (Native HTTP/3 QUIC, C++20) Apache (prefork/event) + EA-Nginx proxy Apache + Nginx Reverse Proxy Apache / Nginx / OLS (CustomBuild) OpenLiteSpeed (OLS)
Web Server Cost
Licensing & Economics
 Included Native ($0 Add-On) Included (Apache); LSWS costs $38-$65/mo extra Included (Apache/Nginx); LSWS extra Included (Apache); LSWS extra Free (OLS); LSWS Enterprise extra
Dynamic .htaccess Reload
Web Engine & Protocols
 Yes (Real-time in-kernel execution) Yes (Apache) Yes (Apache) Yes (Apache) Requires graceful process reload
Built-in ESI & Tag Caching
Web Engine & Protocols
 Yes (Native Q-Mage Engine) No (Requires third-party LSWS/Varnish) No (Requires third-party Nginx/Varnish) No (Requires third-party setup) Yes (LSCache for OLS)
Kernel Tenant Isolation
Security & Multi-Tenancy
 Yes (Native QLVE Namespace Jail + cgroups v2, CageFS-compatible) Paid Add-On (Requires CloudLinux $16–$20/mo extra) Paid Add-On (Requires CloudLinux $16–$20/mo extra) Paid Add-On (Requires CloudLinux $16–$20/mo extra) No (Basic Linux user permissions only)
Per-User CPU/RAM/IO Limits
Resource Governance
 Yes (Dynamic Per-Tenant CPU, RAM, I/O & Process Limits) Paid Add-On (Requires CloudLinux $16–$20/mo extra) Paid Add-On (Requires CloudLinux $16–$20/mo extra) Paid Add-On (Requires CloudLinux $16–$20/mo extra) No
MySQL Query Governor
Database Administration
 Yes (QLVE Database Query Governor) Paid Add-On (Requires CloudLinux OS) Paid Add-On (Requires CloudLinux OS) Paid Add-On (Requires CloudLinux OS) No
PHP Performance Profiler
APM & Diagnostics
 Yes (Native PHP X-Ray APM) No (Requires CloudLinux OS) No No No
Enterprise Mail Suite
Email & Communication
 QMTA + QMail (LMTP, Maildir, 1-Click DKIM) Exim + Dovecot + Roundcube Postfix + Dovecot + Roundcube Exim + Dovecot + Roundcube Postfix + Dovecot + SnappyMail
Authoritative DNSSEC
DNS Infrastructure
 Yes (PowerDNS 4.8+ 1-Click DNSSEC) Yes (PowerDNS / BIND) Yes (BIND / PowerDNS) Yes (BIND / Named) Yes (PowerDNS)
Backup Engine Architecture
Disaster Recovery
 Go-based FastCDC Deduplication (QBD) Legacy tar/gzip (JetBackup costs extra) Plesk Backup (Resource intensive) DirectAdmin Backup (Basic rsync/tar) Basic Built-In Backup (Standard tar archive without FastCDC deduplication)
Granular Single-File Restore
Disaster Recovery
 Yes (Instant FastCDC extraction) No (Requires JetBackup $5.95-$7.95/mo) Partial No (Full account restore only) No
Integrated Security / WAF
Security & Firewall
 QShield (nftables + ModSecurity v3) Basic cPHulk (Imunify360 costs extra) Basic Fail2ban + ModSecurity Basic CSF / LFD Basic ModSecurity
CVE Virtual Patching
Security & Firewall
 Yes (Quravity Guardian Threat Feeds) No (Requires Imunify360 $15-$45/mo) No No No
Live Kernel Patching
Kernel & OS Maintenance
 Yes (Integrated QLPE / KernelCare Core) No (Requires KernelCare license $3.50/mo) No (Requires KernelCare license) No (Requires KernelCare license) No
Quravity WP Manager Deluxe (Zero-Copy Staging)
Applications & CMS
 Full (Cloning, Staging, Sync, Hardening) WordPress Toolkit Lite (Deluxe features require $15/mo extra) WordPress Toolkit Lite (Deluxe features require $15/mo extra) Basic WP Management plugin Basic WordPress manager
Integrated AI DevOps Assistant
DevOps & Automation
 Yes (Live Log Analysis & Remediation) No No No No
Interactive Web Terminal
Developer Tools
 Yes (WebSocket PTY with Jailed Shell) Yes (cPanel Terminal) Yes (Plesk SSH Terminal) Yes No
cPanel Migration Importer
Migration & Onboarding
 Yes (1-Click cpmove-*.tar.gz Unpacker) Native Yes (Plesk Migrator) Yes (DirectAdmin cPanel importer) Basic Built-In Backup (Standard tar archive without FastCDC deduplication)
Licensing Pricing Model
Licensing & Economics
 Flat $50/mo per Server (Unlimited Accounts • 15-Day Trial) Tiered Per-Account ($105/mo for 250 accounts) Tiered Per-Domain ($45/mo for 30 domains) Per-Server ($29/mo) Free Core / Commercial Addons
Process Hot-Reload Downtime
High Availability
 <1ms Zero-Drop Reload (SCM_RIGHTS FD Passing, 0 Dropped Sockets) Graceful reload (~1-3s, dropped connections) Graceful restart (~1-2s) Graceful reload (~1-2s) Full restart required on config change (up to 5s)
Hosting Billing & Client Invoicing
Licensing & Economics
 Native QBill (Included Free) + 1-Click WHMCS/Blesta Bridge Requires WHMCS ($39.99 to $199.99+/mo per-account tiered licensing fees) Requires Plesk Billing (separate monthly subscription) None (Requires external WHMCS / Blesta license) Basic plugin / unstable third-party scripts
Complete Documentation Directory

123 Core Hosting Capabilities

Structured documentation catalog of all native engines and modules. Filter instantly by functional category or search keyword.

Modules (9)
Feature Name Underlying Engine / Protocol Capabilities & Scope
File Manager Native Web PTY / Node.js API Full visual file management: interactive tree navigation, file upload/download, batch zip extraction/compression, integrated code editor with syntax highlighting, search, breadcrumbs, chmod/chown permission manipulation, and trash management.
FTP Account Manager Pure-FTPd / vsftpd Integration Create, update, and terminate FTP accounts with dedicated home directory sandboxing, custom disk quotas, and virtual tenant mapping.
FTP Settings Pure-FTPd Service Configuration Global FTP daemon parameters: passive port ranges, TLS/SSL encryption enforcement, max connections per IP, and anonymous login restrictions.
Directory Privacy Apache `.htaccess` / `htpasswd` Password-protect specific web directories using standard HTTP Basic Authentication with bcrypt/MD5 password hashing.
Disk Usage Viewer Linux Kernel XFS Project Quotas Interactive visual breakdown of disk space consumed by web files, MySQL databases, mailboxes, and temporary directories.
Backup Manager Quravity Backup Engine (`qbd-cli`) Generate, download, and manage full cPanel-compatible backups, home directory snapshots, MySQL dumps, and email forwarder archives.
QBD Cloud Storage Bridge (S3 / Wasabi / Backblaze) QBD Cloud Bridge Automated snapshot synchronization to offsite cloud providers with automated retention policies.
File & Directory Restoration FastCDC Item-Level Extractor Restore single files, deleted folders, or specific directory trees from past incremental snapshots without full account rollbacks.
Leech Protect QShield Access Limiter Detects abnormal URL access frequencies to protected directories and temporarily bans compromised credentials.
Web Disk WebDAV Protocol (`davfs`) Mount user account storage directly as a native network drive on Windows Explorer, macOS Finder, or Linux desktop.
MySQL / MariaDB Manager MariaDB 10.11+ / MySQL 8.0+ Create, modify, and delete relational databases; provision database users; assign granular SQL privileges (`SELECT`, `INSERT`, `UPDATE`, `DELETE`, `DROP`, `INDEX`, etc.); and manage remote host whitelisting (`%` or CIDR subnets).
phpMyAdmin SSO Secure SSO Arbiter + phpMyAdmin 5.2+ Single-click seamless single sign-on (SSO) authentication into phpMyAdmin directly from the dashboard without entering raw database credentials.
PostgreSQL Administration PostgreSQL 16+ Engine Enterprise relational database management: create PostgreSQL databases, manage roles, grant table grants, and integrate with PgAdmin.
Addon Domains QTWS VirtualHost Router Host completely independent domain names under a single tenant account with isolated document roots, private SSL certificates, and custom PHP versions.
Subdomains QTWS VirtualHost Engine Provision subdomains (`sub.domain.com`) with automated document root assignment (`public_html/sub`) and independent SSL cert generation.
Alias Domains (Parked) QTWS Alias Mapping Point secondary domain names to the document root of an existing primary domain without redirecting the browser URL.
Advanced Zone Editor PowerDNS 4.8+ Engine Full authoritative DNS management supporting `A`, `AAAA`, `CNAME`, `MX`, `TXT`, `SRV`, `CAA`, `NS`, `PTR`, and `SOA` records with configurable TTLs.
Simple Zone Editor PowerDNS REST API Simplified interface for non-technical users to quickly add basic `A` and `CNAME` records.
Manage DNSSEC PowerDNS Cryptographic Keystore 1-Click DNS Security Extensions (DNSSEC): automated KSK and ZSK key pair generation, key rollover, and DS record generation for parent registrar delegation.
URL Redirects QTWS Native Rewrite Engine Configure temporary (`302 Moved Temporarily`) or permanent (`301 Moved Permanently`) redirects with path wildcard matching and www-preference options.
Dynamic DNS (DDNS) PowerDNS REST Webhook Update DNS records programmatically via authenticated API webhooks for remote machines with dynamic WAN IP addresses.
Primary Domain Rename Quravity Core Tenant Lifecycle Atomically rename an account's primary domain name, updating VirtualHosts, Apache rewrite configs, mailboxes, and database references simultaneously.
Subdomain Statistics GoAccess / Awstats Engine Granular traffic and HTTP response analytics broken down per subdomain.
Email Accounts Dovecot 2.3+ & Postfix 3.8+ Provision enterprise mailboxes with SHA512-CRYPT password hashing, disk storage quotas, IMAP/POP3/LMTP access, and Maildir storage.
QMail Webmail Client Native React Webmail Client Full browser webmail suite featuring physical Maildir flag synchronization (`:2,S` Seen, `:2,F` Flagged), sandboxed HTML rendering, multi-account switching, contacts/address book, calendar scheduling, identity management, and attachment handling.
Forwarder Manager Postfix Virtual Aliases Forward incoming messages sent to a specific address to single or multiple destination mailboxes or external email providers.
Email Domain Forwarding Postfix Transport Maps Forward all incoming email directed at an entire domain name to a corresponding secondary domain.
Autoresponders QMTA Autoresponder Hook Automated vacation/out-of-office autoreplies with configurable character encoding, time-window activation, and reply-frequency rate limiters.
Default Address (Catch-All) Postfix Virtual Catch-All Route misdirected or unassigned email addresses to a designated mailbox, discard silently, or reject with a custom bounce failure notice.
Email Deliverability (Auth) OpenDKIM & DNS Automation Automated domain deliverability suite: generates 2048-bit RSA DKIM keys, publishes DNS TXT records, generates SPF (`v=spf1`) policies, and enforces DMARC alignment.
Spam Filtering Engine SpamAssassin & Rspamd Engine Real-time spam score evaluation, custom spam header tagging (`X-Spam-Status`), and configurable auto-discard score thresholds.
Spam Box Dovecot Sieve / LMTP Routing Automatically diverts incoming messages identified as spam into a separate `.Junk` Maildir folder.
Email Filtering Manager Sieve Mail Filtering Define custom server-side routing rules matching message headers (`From`, `Subject`, `Size`, `Spam-Score`) with actions (discard, divert, forward).
Email Archiving Dovecot Archival Daemon Automated retention and storage of inbound and outbound messages across compliance periods.
Email Disk Usage Viewer Maildir Disk Analyzer Inspect disk space consumed per mailbox and execute automated bulk purge policies (delete read messages older than 30/60/90 days).
Email Route Tracer QMTA Routing Debugger Simulate and diagnose email delivery paths, verifying MX records, DNS resolveability, and SMTP connection states.
Awstats Perl / Awstats 7.9+ Advanced graphical visitor log analyzer displaying monthly, daily, and hourly traffic, search keywords, robots/crawlers, and browser user agents.
Q-Edge Cloud Accelerator (310+ Global PoPs) Anycast Edge POP Acceleration Global edge routing, DNS Anycast latency optimization, and distributed CDN caching across 310+ worldwide PoPs.
Multi-Core WebP & AVIF Image Compression Engine libvips / AVIF Multithreaded Engine Autonomous on-the-fly and scheduled WebP and AVIF image compression reducing bandwidth consumption by up to 80%.
Bandwidth Usage Viewer Kernel IP Accounting & QTWS Logs Real-time and historical bandwidth meters segmented across HTTP/HTTPS, FTP, IMAP, and SMTP protocols.
Raw Access Logs QTWS Log Streamer View, stream, or download uncompressed or gzip-compressed raw NCSA/W3C access log files.
Error Log Inspector QTWS & PHP Error Engine Real-time inspection of the last 300 HTTP 4xx/5xx errors, PHP warnings, fatal errors, and fastcgi connection failures.
Metrics Editor QHM Analytics Dispatcher Enable or disable specific statistical processing software (Awstats, Webalizer) on a per-domain basis.
SSH Access & Web Terminal OpenSSH & Web Socket PTY Provision SSH keys, configure authorized keys, toggle shell rights (`Disabled`, `Jailed Shell`, `Full Shell`), and connect via web-based interactive terminal.
IP Blocker (Deny Manager) Linux Kernel `nftables` / `qshield` Block individual malicious IP addresses, CIDR network ranges (`192.168.1.0/24`), or entire country IP sets directly at the kernel firewall level.
SSL/TLS Manager OpenSSL 3.5.5 Keystore Complete certificate lifecycle: generate Private Keys (RSA 2048/4096-bit, ECC ECDSA), generate CSRs, install purchased SSL/TLS certificates, and view expiry.
AutoSSL Daemon ACME Client Engine (HTTP-01 / DNS-01) Fully automated background daemon that orders, validates, installs, and renews free DV SSL certificates (Let's Encrypt / ZeroSSL) for all active domains and subdomains.
SSL Host Installer QTWS VirtualHost SNI Engine Attach specific certificates to designated IP addresses and VirtualHosts with Server Name Indication (SNI) support.
SSL/TLS Wizard Guided SSL Provisioner Step-by-step assistant for domain verification, certificate installation, and automatic HTTP-to-HTTPS redirect enforcement.
ModSecurity™ Manager Native ModSecurity v3 Engine Web Application Firewall (WAF) control: enable/disable ModSecurity rules globally or per-domain; inspect triggering rule IDs; configure audit log paths.
Two-Factor Auth (2FA) RFC 6238 TOTP Engine Secure account login using Google Authenticator, Authy, or 1Password with QR code setup and emergency recovery backup keys.
Hotlink Protection QTWS Regex Filter Prevent third-party websites from stealing bandwidth by embedding images (`.jpg`, `.png`, `.webp`, `.gif`) hosted on your account.
MultiPHP Manager QLVE Multi-Runtime Switcher Switch PHP execution versions (PHP 7.4, 8.0, 8.1, 8.2, 8.3, 8.4) dynamically per VirtualHost or subdomain.
MultiPHP INI Editor PHP Directive Supervisor Modify essential runtime directives (`memory_limit`, `upload_max_filesize`, `post_max_size`, `max_execution_time`, `display_errors`) via visual UI or raw editor.
API Tokens SHA-256 Bearer Token Keystore Create, inspect, restrict permissions, and revoke personal access tokens for programmatic REST API interactions.
API Shell REST API Playground Interactive developer console for testing API endpoints directly within the control panel interface.
Quravity WP Manager (Q-WPM) Native Go/TypeScript Q-WPM Engine Comprehensive WordPress lifecycle orchestration: automated core and plugin staging, cloning, security auditing, and zero-downtime updates.
Q-WPM Deluxe Automation Automated Smart Updates Intelligent autonomic WordPress updates with pre-update rollback snapshots, visual regression testing, and automated vulnerability patching.
Q-WPM Site Import Remote Migration Engine 1-click remote WordPress website migration over SSH/FTP, automatically synchronizing database prefixes, URLs, and file assets.
WordPress Manager by Q1Click Q1Click WordPress Manager Simplified WordPress deployment manager handling quick installs, database creation, and admin credentials.
Q1Click App Installer Q1Click Engine (400+ Apps) 1-Click automated deployment of popular CMS and web applications: WordPress, Joomla, Drupal, PrestaShop, Laravel, phpBB, MediaWiki, Nextcloud.
Select PHP Version QLVE Alternative PHP Matrix Select alternative PHP versions per account with isolated module sets.
PHP Extension Manager MultiPHP Module Arbiters Toggle individual PHP binary extensions: OPcache, Redis, Memcached, Imagick, GD, Intl, BCMath, Sodium, Zip, PDO MySQL, XML, Curl, Mbstring.
Setup Node.js App Phusion Passenger / PM2 Integration Deploy and run Node.js applications (Express, Nest, Next.js) with custom Node runtime selection (v18, v20, v22), startup files, and env variables.
Setup Python App WSGI / Passenger Integration Deploy Python web apps (Django, Flask, FastAPI) with virtualenv creation, Python version selection (3.9, 3.10, 3.11, 3.12), and WSGI entry points.
Setup Ruby App Rack / Passenger Integration Deploy Ruby on Rails and Sinatra applications with Bundler execution and gemset management.
Application Manager Phusion Passenger Supervisor Master management console for monitoring and restarting active Python, Node.js, and Ruby application processes.
Smart Advice CMS Optimizer QTWS + Redis Accelerated Cache Autonomic CMS optimization daemon detecting database index bottlenecks, object-caching deficits, and configuring dedicated per-tenant Redis sockets.
PhpPgAdmin Web-based PostgreSQL GUI Visual database administration interface for managing PostgreSQL tables, views, and SQL queries.
PHP Pear Packages PEAR / PECL CLI Install, audit, and remove PEAR extensions and PECL binary packages.
Perl Modules CPAN Integration Search and install CPAN modules directly into user account environments.
CGI Center suEXEC CGI Engine Manage standard CGI scripts, guestbooks, form-to-email handlers, and counters.
Simple CGI Wrapper suEXEC Execution Sandbox Wraps CGI scripts to execute securely under the tenant's dedicated UID/GID.
Web Apps Manager Q1Click Web Applications High-level overview of installed web applications, active versions, and pending security updates.
BoxTrapper Challenge-Response Anti-Spam Requires unknown email senders to respond to a verification challenge before emails are delivered to the inbox.
Ed25519 Zero-Password Admin-to-Client SSO Cryptographic Kernel SSO Instant cryptographic single sign-on from Port 2087 Host Master into tenant cPortal workspaces via Ed25519 cryptographic signature verification.
Authoritative DNSSEC & GeoIP Traffic Routing named / PowerDNS Cryptographic EDNS client-subnet geo-routing, automatic DNSSEC key rollover (KSK/ZSK), and sub-millisecond response resolution across multi-datacenter clusters.
Automated S3, Wasabi & Backblaze B2 Offsite Snapshot Rotation qbd-sync Scheduled multi-destination offsite snapshot replication with configurable grandfather-father-son (GFS) retention tiers and end-to-end AES-256-GCM encryption.
MultiPHP 8.2 Runtime Manager (EA4 Profile Compatible) Native PHP 8.2 Runtime Provides hardened PHP 8.2 runtime execution. Default stacks feature PHP 8.2, 8.3, 8.4; legacy runtimes (PHP 7.4, 8.0, 8.1) available via isolated QLVE opt-in.
MultiPHP 8.3 & 8.4 Runtime Manager (EA4 Profile Compatible) Native PHP 8.3 Runtime Active default PHP 8.3 and 8.4 runtimes with JIT compilation. Full support for modern frameworks (Laravel 11, Symfony 7, WordPress 6.6+).
Cron Jobs Vixie Cron / Systemd Timers Schedule automated background commands, maintenance scripts, and curl webhooks across standard 5-part cron syntax with email output logging.
QBD FastCDC Incremental Backup Suite (Replaces JetBackup) Quravity Backup Daemon (`qbd-daemon`) Enterprise disaster recovery dashboard: view automated backup snapshots, run on-demand backups, and restore databases, mailboxes, or cron jobs.
AI DevOps Assistant Quravity Neural Ops Engine Integrated LLM-powered server assistant: analyzes server logs in real time, diagnoses configuration failures, explains error codes, and proposes automated fixes. Protected by Human-in-the-Loop Confirmation Gates, Scoped Action Allow-Lists, Read-Only Log Inspection Mode, and Immutable Audit Logging (Zero Unsupervised Root Shell Execution).
AI Assistant Actions Root Agent Action Bridge Supervised execution broker executing approved remediation recipes with strict boundary checks. Protected by Human-in-the-Loop Confirmation Gates, Scoped Action Allow-Lists, Read-Only Log Inspection Mode, and Immutable Audit Logging (Zero Unsupervised Root Shell Execution).
Resource Usage (QLVE Telemetry Viewer) QLVE / cgroups v2 Statistics Real-time telemetry and 30-day historical charting of CPU usage, physical memory allocation, I/O bandwidth, and process limits.
PHP X-Ray Profiler Dynamic APM Function Tracer Performance diagnostic tool that tracks slow WordPress plugins, runaway SQL queries, external HTTP API latency, and functions consuming excessive CPU.
QMage L1 RAM Cache Manager (LSCache Compatible) Q-Mage Compatibility Layer Manages LSCache-compatible rules and invalidations for WordPress, Magento, and custom applications running on QTWS.
QMage Redis Object Cache Manager Q-Mage Redis Coordinator Configures local or remote Redis object cache instances with automated socket creation per tenant.
QShield AI Security Console (Replaces Imunify360) QShield Security Engine Real-time security overview displaying blocked attacks, quarantined malicious files, IP whitelist/blacklist, and Webshield status.
Quravity SiteBuilder Studio (Drag & Drop) Drag-and-Drop Visual Builder Visual website builder featuring responsive design templates, form builders, dynamic CMS collections, and instant 1-click publishing.
Git™ Version Control Git Engine + Deployment Hooks Create and manage Git repositories, register remote origins, pull code updates, and execute automated build scripts (`post-receive` hooks).
Error Pages QTWS Error Routing Customize standard HTTP error response pages (`400 Bad Request`, `401 Unauthorized`, `403 Forbidden`, `404 Not Found`, `500 Internal Error`).
Apache Handlers QTWS Handler Dispatcher Map custom file extensions (`.php83`, `.cgi`, `.py`) to specific backend processors and execution engines.
MIME Types QTWS MIME Registry Define system and user-level MIME type associations, mapping file extensions to HTTP `Content-Type` response headers.
Index Manager QTWS Directory Lister Configure directory browsing behavior per folder: standard index files, formatted directory listing, or complete directory index blocking.
User Manager Quravity Multi-Tier Identity Manage sub-accounts, delegate specific service rights (Email, FTP, Web Disk), and enforce password resets.
Optimize Website QTWS Gzip & Brotli Engine Enable on-the-fly HTTP compression for text, HTML, CSS, and JavaScript assets to minimize network transfer latency.
Configure Greylisting Postfix Postscreen / QMTA Temporarily reject emails from unrecognized senders to eliminate bot-generated spam before it reaches mail filters.
Encryption (GPG/PGP) GnuPG 2.x Keystore Generate, import, export, and delete GPG public and private keys for encrypted email and file signing.
Track DNS (Network Tools) DNS Utilities (`dig` / `traceroute`) Run network diagnostics directly from the browser: domain lookups (`dig`), mail server routing, and network trace paths.
Address Importer Mailbox Bulk Provisioner Import email mailboxes and forwarders in bulk using structured `.csv` or `.xls` spreadsheet files.
Calendars and Contacts CalDAV / CardDAV Protocol Configure address book and calendar synchronization credentials for Apple Mail/Calendar, Thunderbird, and Android.
Password & Security Linux PAM / Quravity Auth Change account login password, evaluate password entropy score, and configure external authentication providers.
Contact Information Notification Dispatcher Maintain account contact email addresses and SMS notification preferences for quota warnings, SSL expiry, and security alerts.
Update Notification Prefs Event Subscription System Fine-tune alert notification triggers: disk usage exceeded, bandwidth overage, SSL auto-renew failure, login from new IP.
Server Status Viewer Linux Kernel `/proc` Inspector Real-time server load averages, CPU utilization, physical RAM allocation, swap status, and active system services.
Application Market Quravity Integration Hub Browse and enable official third-party plugins, security add-ons, and developer toolkits.
Theme Switching Theme Engine Toggle between UI display modes: Dark Mode, Pure Light, Slate Enterprise, Emerald, Cyberpunk, and High Contrast.
Change Language Internationalization (i18n) Select control panel interface language: English, Spanish, German, French, Chinese, Japanese, and Arabic.
Mailing Lists GNU Mailman Integration Manage automated subscription-based email discussion lists with web-based archive viewers.
Site Quality Monitoring Performance & SEO Auditor Monitor Core Web Vitals, page speed, broken links, and SSL certificate expiration on active domains.
Search Engine Optimization SEO Tool Suite Keyword density analysis, ranking monitoring, and Google search console integration.
Search Engine Submit Tool Search Index Notifier Submit website sitemaps directly to Google, Bing, and major search engine discovery APIs.
Social Media Management Social Marketing Hub Coordinate and schedule marketing social media posts across Twitter/X, LinkedIn, and Facebook.
Per-Tenant Outbound SMTP Rate & Reputation Guard qmta-milter Real-time tenant outbound mail burst throttling, DKIM/SPF automated envelope alignment, and proactive IP reputation protection against compromised web scripts.
MCP Connection Model Context Protocol Server Connect external AI agents directly to the control panel using the official Anthropic Model Context Protocol (MCP). Protected by Human-in-the-Loop Confirmation Gates, Scoped Action Allow-Lists, Read-Only Log Inspection Mode, and Immutable Audit Logging (Zero Unsupervised Root Shell Execution).
Images Management ImageMagick / GD CLI Batch scale, convert formats (JPG to WebP/AVIF), and thumbnail images stored in account directories.
Support System Submission Ticketing Integration Submit technical support tickets directly from the panel to host administrators or enterprise helpdesks.
Getting Started Wizard Onboarding Assistant Guided walkthrough for initial domain setup, nameserver configuration, mailbox creation, and website deployment.
QBill Storefront & Client Portal QBill Daemon / Root Socket IPC Native sovereign customer storefront and self-service billing portal. Turnkey cart checkout, automated order intake, domain registration workflow, invoice history, payment method vaulting, and 1-click SSO into cPortal with $0 per-account tiered licensing fees.
WHMCS Drop-In Server Module Quravity WHM Remote API / JSON-API 1-click drop-in server provisioning module for WHMCS v8.x and v9.x. 100% backward-compatible with legacy /json-api/createacct, suspendacct, and changepackage remote calls with seamless single sign-on (SSO).
Blesta Provisioning Module Quravity WHM Remote API / JSON-API Native Blesta v5 server module supporting automatic account creation, package synchronization, disk quota enforcement, dynamic client suspension, and password synchronization.
Automated Subscriptions & Webhooks Stripe & PayPal v2 Webhook Receiver Event-driven recurring billing engine with automated payment reconciliation, HMAC-SHA256 signature verification, automated invoice generation, instant grace period handling, and zero-downtime service suspension and reactivation.
Automated Revenue Infrastructure

Sovereign Billing & WHMCS Automation

Choose your revenue architecture: Deploy our sovereign $0-tax native storefront or plug Quravity directly into your existing WHMCS or Blesta installation in 60 seconds.

Option A — Zero Licensing Tax

Built-In QBill Storefront & Provisioning

QBill delivers an enterprise-grade client storefront and recurring billing automation engine directly inside Quravity Host Manager. Eliminate external SaaS subscriptions permanently.

Package Builder

Design hosting packages directly mapped to QLVE CPU/RAM/IO limits.

Payment Webhooks

Native webhook processing for Stripe, PayPal, Razorpay, and PayFast.

Automated Dunning

Automated invoice generation, payment retries, and suspension lifecycle.

Option B — 60-Second Compatibility

Drop-In WHMCS & Blesta Provisioning Module

Already running WHMCS or Blesta? Maintain your existing billing workflows without disruption. Our provisioning module drops in with full backward API compatibility.

POST :2087/json-api/createacct HTTP/1.1 200 OK (384ms) 
curl -X POST "https://host.your-domain.com:2087/json-api/createacct" \
  -H "Authorization: whm root:YOUR_SCOPED_QPTOK_TOKEN" \
  -d "user=client01&domain=clientdomain.com&plan=Enterprise_Ultra"
Supports drop-in cPanel/WHM API v1 endpoints using scoped Platform API Tokens (qptok) with IP allow-listing and full audit logging.
Download WHMCS Server Provisioning Module
Version 2.5.0-LTS · Compatible with WHMCS v8.x & v9.x
Download Module (.zip)
Predictable Sovereign Economics

Flat-Rate Infrastructure Pricing

Zero per-account penalties. Zero surprise renewals. One flat license for unlimited hosting accounts per physical or cloud server.

EVALUATION LICENSE

15-Day Full Trial

Evaluate the complete Quravity Enterprise stack on any new server IPv4 address before migrating production workloads.

$0 for 15 days

Automatically converts or locks :2087/:2083 after 15 days · Strictly 1 trial per IPv4 & hardware fingerprint

  • Full access to all 6 native engines (QTWS, QLVE, QMTA, TurboDNS, QShield, QBD)
  • Unlimited test accounts & 1-click cpmove migration testing
  • IP-bound activation via verify.quravity.com (no re-install resets)
  • Instant in-place upgrade to Enterprise LTS ($50/mo) with zero downtime
Zero Website Downtime Guarantee: If a trial expires without upgrade, hosted websites, email, and DNS continue running normally—only the Port 2087/2083 management UI pauses until licensed.
Production Grade

Quravity Enterprise LTS

Complete enterprise hosting platform for commercial hosting providers.

$50 / month per server (or $500/yr)
  • Unlimited hosting accounts & domains
  • All 6 native subsystems (QTWS, QLVE, QShield, QBD, QBill)
  • 1-Click zero-downtime cpmove migration importer
  • 24/7 SLA emergency engineer support
Interactive Fleet Savings Calculator

Calculate Your Annual Savings

Compare your current legacy software licensing stack against Quravity's flat $50/mo or $500/yr per server model.

Number of Physical / Cloud Servers: 10 servers
Accounts per Server (Average): 250 accounts
Legacy Stack Breakdown (Per Server):
• cPanel Premier ($105.00)
• LiteSpeed Enterprise ($46.00)
• CloudLinux Shared Pro ($20.00)
• Imunify360 Unlimited ($45.00)
• JetBackup 5 ($7.95) + WHMCS ($39.99)
Total Legacy Cost: $263.94 /mo per server
Net Annual Savings
$25,673
saved every year on software licensing
Legacy Annual Cost:
$31,673
Quravity Annual Cost:
$6,000
$50/mo per server ($600/yr)
Automated Node Validation

IP-Based License Verification

Verify the active license authorization status of any deployed server IPv4 address.

Technical Documentation · v2.5.0-LTS

Quravity Administration & Buyer Manual

Complete technical specification, server preparation, kernel isolation tuning, and automated billing guides for web hosting providers.

12 Chapters · v2.5.0-LTS
Chapter 01

OS Requirements, XFS Quotas & Firewall Ports

Hardware minimums, supported enterprise Linux distributions, cgroups v2 kernel parameters, XFS project quotas, and mandatory firewall port allocations.

1.1 Supported Linux Distributions & Hardware Minimums

Quravity v2.5.0-LTS installs directly onto a clean, minimal Linux installation using mainline kernel cgroups v2 and mount namespaces (CLONE_NEWNS)—no custom kernel replacement is required.

Specification Minimum (Evaluation / Small VPS) Recommended (Production Shared Host · 250+ Accounts)
Supported OS (64-bit) Ubuntu 22.04 / 24.04 LTS, AlmaLinux 9.x, Rocky Linux 9.x, Debian 12 AlmaLinux 9.4+ or Ubuntu 24.04 LTS (x86_64 or ARM64)
Linux Kernel Kernel 5.14+ with cgroups v2 unified hierarchy enabled Kernel 6.1+ with PSI (CONFIG_PSI=y) enabled
CPU & Memory 2 vCPU Cores · 4 GB RAM 16–32 CPU Cores · 64 GB–128 GB ECC RAM
Filesystem & Disk 40 GB SSD (ext4 or XFS) NVMe RAID-1/10 formatted with XFS (uquota,pquota enabled)
Network 1 Static Public IPv4 Address Static Public IPv4 + /64 IPv6 Subnet

1.2 Pre-Installation OS Preparation Commands

Connect to your fresh server as root via SSH and configure a Fully Qualified Domain Name (FQDN) and XFS project quotas before running the installer:

bash 
sudo hostnamectl set-hostname host.yourdomain.com
SERVER_IP=$(hostname -I | awk '{print $1}')
echo "${SERVER_IP} $(hostname -f) $(hostname -s)" | sudo tee -a /etc/hosts
grep -E " / | /home " /etc/fstab

1.3 Required Network & Firewall Ports

When Quravity installs, QShield automatically configures /etc/nftables.conf. If using external firewalls (AWS Security Groups, Hetzner, OVH), ensure the following ingress ports are open:

Port Protocol Daemon Purpose
80TCPQTWSHTTP web traffic & ACME HTTP-01 AutoSSL validation
443TCP & UDPQTWSHTTPS (TLS 1.3) & Native HTTP/3 QUIC (UDP 443) + Service Subdomain Proxy
2087TCPqhm-coreQHM Master Admin & Reseller Control Panel (HTTPS)
2083TCPqhm-corecPortal Tenant Client Control Panel (HTTPS)
2096TCPQMailDirect Webmail HTTPS Portal (webmail.domain.com)
53TCP & UDPTurboDNSAuthoritative DNS queries (AXFR zone transfers disabled by default, restricted to authenticated secondary cluster nodes)
21, 49152-50152TCPPure-FTPdExplicit TLS FTP & passive transfer port range
25, 465, 587TCPQMTAInbound SMTP & Authenticated Outbound Submission (SMTPS / STARTTLS)
993, 995TCPDovecotEncrypted IMAPS (993) and POP3S (995)
22TCPOpenSSHRoot & Jailed Tenant SSH access
Chapter 02

1-Line Automated Installation & Daemon Verification

Turnkey zero-interaction installer, automated engine compilation, MultiPHP provisioning, and post-installation service health validation.

2.1 Run the Unattended Installer

Execute the official installer as root. You can run it interactively or pass unattended provisioning flags:

bash 
curl -sSL https://quravity.com/install.sh | sudo bash

Advanced Unattended Installation with Custom Nameservers & Admin Email:

bash 
curl -sSL https://quravity.com/install.sh | sudo bash -s -- \
  --hostname host.yourdomain.com \
  --ns1 ns1.yourdomain.com \
  --ns2 ns2.yourdomain.com \
  --admin-email admin@yourdomain.com \
  --db-engine mariadb-10.11 \
  --enable-postgres

2.2 What the Installer Configures Automatically (60–180 Seconds)

  1. Verifies Linux cgroups v2 unified hierarchy and enables kernel Pressure Stall Information (/proc/pressure/{cpu,memory,io}).
  2. Downloads and configures pre-compiled, signed x86_64/ARM64 binary packages for the 6 Core Engines: qtws (C++20 HTTP/3 Web Server), qlve-arbiter, qmta (Postfix 3.8 + Dovecot 2.3 + OpenDKIM + Rspamd), pdns (PowerDNS 4.8), qshield, and qbd-daemon.
  3. Deploys MultiPHP runtimes (PHP 7.4, 8.0, 8.1, 8.2, 8.3, 8.4) with QSAPI binary socket pools, plus Node.js, Python, and Passenger.
  4. Contacts verify.quravity.com to activate your IP-bound license and writes /etc/quravity/quravity.lic.
  5. Provisions Let's Encrypt TLS for your hostname and sets up Port 443 Service Subdomain Proxies (qhm.yourdomain.com → :2087 and cportal.yourdomain.com → :2083).

2.3 Post-Install Service Health Check

Verify all core daemons are active and running:

bash 
sudo systemctl status qhm-core qtws qlve-arbiter pdns postfix dovecot mariadb qshield qbd-daemon
Chapter 03

IP-Based License Activation & Management (quravity-lic)

Zero-key IP architecture, hardware fingerprint lock, 72-hour rolling cryptographic lease, and instant license upgrade and reissue workflows.

3.1 Zero License Keys Architecture

Quravity eliminates license keys. Your server is authorized automatically by its Public Outbound IPv4 Address and Hardware Node Fingerprint over HTTPS in <50ms. Supports AWS, GCP, and Azure NAT (1:1 Elastic IP) via Ed25519 hardware node binding, with a 14-day offline grace period ensuring hosted websites, mail, and DNS never interrupt.

bash 
sudo quravity-lic --sync
sudo quravity-lic --status

Upgrading from Trial to Enterprise LTS ($50/mo)

Visit quravity.com/pricing, enter your server IPv4 at checkout, and run sudo quravity-lic --sync. Your server upgrades in <1ms with zero downtime.

Migrating to a New Server IP

In your client portal, click Transfer / Reissue IP, enter the new server IPv4 (resetting the hardware fingerprint lock), and execute sudo quravity-lic --sync on the new node.

Chapter 04

Initial QHM (:2087) Setup Wizard & Proxy Subdomains

Root authentication, RFC 6238 two-factor security, 4-step first-boot wizard, and Port 443 firewall-safe proxy subdomains.

4.1 Accessing QHM Master Control Panel

  • Via Dedicated Port: https://host.yourdomain.com:2087/
  • Via Firewall-Safe Port 443 Service Subdomain: https://qhm.yourdomain.com/

4.2 Root Authentication & 2FA Enforcement

Authenticate using username root and your Linux root password. Immediately activate Two-Factor Authentication (RFC 6238) under QHM → Security Center → Two-Factor Auth.

4.3 The 4-Step First-Boot Wizard

Step 1 (Networking & Contact): Confirm alert email (admin@yourdomain.com) and primary shared IPv4/IPv6 addresses.

Step 2 (Nameservers): Set default authoritative nameservers (ns1.yourdomain.com, ns2.yourdomain.com) and assign A records.

Step 3 (Service Subdomains over Port 443): Enable proxy subdomains so every hosted domain automatically routes cportal.<domain>, webmail.<domain>, and qhm.<domain> over standard HTTPS port 443 via QTWS.

Step 4 (Default Quotas & CageFS): Initialize the QLVE mount namespace jail (/var/quravity/jail-skeleton, CageFS-compatible) and enable XFS project quotas.

Chapter 05

Authoritative DNS (TurboDNS) & 1-Click DNSSEC

PowerDNS 4.8 clustering, glue record registration, automatic ECDSA P-256 Algorithm 13 KSK/ZSK keypair generation, and DS export.

5.1 Register Glue Records at Your Domain Registrar

At your domain registrar (Namecheap, Cloudflare, GoDaddy), register Host/Glue records pointing to your server:

ns1.yourdomain.com → <Primary Server IPv4>
ns2.yourdomain.com → <Secondary or Primary Server IPv4>

5.2 Enable 1-Click DNSSEC per Domain

In QHM → DNS Functions → Manage DNSSEC (or tenant's cPortal → Domains → Manage DNSSEC), click Enable DNSSEC. TurboDNS automatically generates an ECDSA P-256 (Algorithm 13) Key Signing Key (KSK) and Zone Signing Key (ZSK) and outputs the DS Record:

dns 
Key Tag: 23719
Algorithm: 13 (ECDSA Curve P-256 with SHA-256)
Digest Type: 2 (SHA-256)
Digest: e9a2c478f110...
Chapter 06

QTWS HTTP/3 Web Server, MultiPHP & Q-Mage Cache

C++20 kernel zero-copy sendfile, QUIC 0-RTT resumption, MultiPHP 7.4-8.4 QSAPI sockets, LiteSpeed Cache compatibility, and Redis object caching.

6.1 Tuning QTWS & Kernel PSI Load Shedding

QTWS is engineered in C++20 with native HTTP/3 QUIC (UDP 443). Configure /etc/qtws/psi_governor.json to shed bot crawler traffic during high load (60% stall threshold) while protecting legitimate visitors and WooCommerce checkouts.

Hot-reload QTWS config and SSL certificates in <1ms via SCM_RIGHTS socket passing:

bash 
sudo qtws-ctl reload

6.2 MultiPHP Runtimes & QSAPI Binary Sockets

Tenants execute PHP over private AF_UNIX sockets (/run/quravity/qsapi/<username>-php83.sock) secured by kernel SO_PEERCRED. Manage system default and per-vhost versions under QHM → Software → MultiPHP Manager.

6.3 QMage L1 RAM Cache & Smart Advice CMS Optimizer

QTWS natively parses X-LiteSpeed-Cache-Control and <esi:include> tags. Tenants install the standard LiteSpeed Cache plugin in WordPress or enable the Smart Advice CMS Optimizer (quravity-cms-opt) in cPortal to provision an isolated Unix-socket Redis instance (/home/<user>/.redis/redis.sock).

Chapter 07

QLVE Kernel Isolation (cgroups v2, Mount Namespace Jail & PHP X-Ray)

Hardware isolation boundaries, QLVE mount namespace sandboxing (CageFS-compatible), QLVE Database Query Governor throttling, and sub-50ms PHP X-Ray APM tracing.

7.1 Initialize & Manage QLVE Tenant Sandboxing

Initialize the read-only skeleton and mount namespaces for every tenant:

bash 
sudo qhm-qlve --init-jail
sudo qhm-qlve --enable-all
sudo qhm-qlve --update

7.2 Hardware Limits in cgroups v2

Enforced directly in /sys/fs/cgroup/quravity.slice/user-<uid>.slice/:

  • SPEED (CPU): cpu.max (e.g. 100% = 1 core, 200% = 2 cores)
  • PMEM (Memory): memory.high throttling + memory.max OOM boundary
  • IO & IOPS: io.max (e.g. 50 MB/s & 1024 IOPS)
  • EP (Entry Processes): Concurrent dynamic PHP-FPM requests (clean HTTP 508 on exceed)
  • NPROC: pids.max process limits

7.3 QLVE Database Governor & PHP X-Ray APM

The QLVE Database Query Governor throttles runaway SQL queries under the tenant's own cgroups slice. QSAPI wire-speed worker pools and managed PHP-FPM fallback provide HTTP 429/503 graceful queue backpressure. PHP X-Ray APM traces slow WordPress/Laravel endpoints to pinpoint plugin hooks, queries, or external curl calls taking longer than 50ms.

Chapter 08

Hosting Packages, 123 Core Capabilities & Account Creation

Granular feature toggles, tiered package definition, and sub-500ms automated account provisioning CLI.

8.1 Configure 123 Core Capabilities

In QHM → Packages → Feature Manager, create tiered feature sets (e.g., Starter, Pro, Enterprise). Disabling a feature hides its icon in cPortal (:2083) and rejects requests at the socket arbiter level.

8.2 Create Hosting Packages

Define disk quota, monthly bandwidth, domain allowances, database counts, Feature List, and QLVE hardware limits under QHM → Packages → Add a Package.

8.3 Sub-500ms Account Creation CLI

Provision accounts directly via CLI or API:

bash 
sudo qhm-provisiond createacct \
  --username acmehost \
  --domain acmeagency.com \
  --package "Business_Turbo" \
  --email billing@acmeagency.com \
  --autossl true
Chapter 09

Enterprise Mail Suite (QMTA & QMail) & Deliverability

Automated 2048-bit DKIM, SPF, DMARC, reverse DNS PTR validation, 1-click deliverability repair, and outbound smart host relay.

9.1 Automated DKIM, SPF & DMARC

Every hosted domain automatically receives a 2048-bit RSA DKIM keypair (/etc/opendkim/keys/<domain>/default.private), SPF policy, and DMARC record in TurboDNS. Tenants can inspect and repair records under cPortal → Email → Email Deliverability.

9.2 Reverse DNS (PTR) & Hostname HELO

Ensure your server provider sets the PTR (Reverse DNS) record of your server IPv4 to match host.yourdomain.com to guarantee 10/10 deliverability scores on mail-tester.com.

9.3 Outbound Smart Host Relay (Port-25 Blocked Clouds)

If hosting on AWS, GCP, or Azure where outbound TCP port 25 is blocked, configure SendGrid, SES, Mailgun, or TurboSMTP relay credentials in QHM → Service Configuration → QMTA Mail Manager → Smart Host Relay.

Chapter 10

Security Hardening (QShield nftables, ModSecurity & Guardian)

Kernel nftables firewall hooks, autonomous brute-force defense, ModSecurity v3 OWASP Core Rule Set, and Quravity Guardian CMS virtual patching.

10.1 QShield Kernel Firewall

Manage IP whitelists and country blocks via CLI or QHM:

bash 
sudo qshield-cli allow 203.0.113.50 --comment "Admin Office IP"
sudo qshield-cli block-country KP,RU --ports 22,2087,2083

10.2 ModSecurity v3 WAF & Quravity Guardian

Enable the bundled OWASP Core Rule Set (CRS) and Quravity Guardian CMS Virtual Patching Feed under QHM → Security Center → ModSecurity Manager. Tenants can exclude specific rule IDs per domain in cPortal to resolve false positives.

Chapter 11

Deduplicated Backups (QBD FastCDC) & cPanel Migration (cpmove)

Content-Defined Chunking incremental backups, S3/Wasabi cloud offload, AES-256-GCM encryption, and 100% fidelity cpmove migration.

11.1 FastCDC Backups & S3 Cloud Offload

Configure incremental schedules with S3, Wasabi, Backblaze B2, or Cloudflare R2 offload in QHM → Backup → QBD Backup Configuration. Backups are deduplicated and encrypted with AES-256-GCM. Tenants can restore individual files or databases in milliseconds under cPortal → Files → File Restoration.

11.2 Zero-Downtime cPanel Migration (cpmove Importer)

Migrate single accounts or entire servers with 100% fidelity (files, MySQL, users, Maildir, SSL, cron jobs):

bash 
sudo qhm-migrate --import-archive /home/cpmove-clientuser.tar.gz
sudo qhm-migrate --remote-whm 198.51.100.25 --ssh-port 22 --all-accounts --live-sync
Chapter 12

Automated Billing (QBill Storefront & WHMCS / Blesta Integration)

Built-in $0-tax QBill customer storefront with Stripe/PayPal integration, or plug-and-play WHMCS module connection.

Option A: Built-In QBill ($0 Extra Cost)

  1. Navigate to QHM → QBill Automation → Storefront Settings.
  2. Bind your billing domain (e.g. billing.yourdomain.com).
  3. Paste API keys for Stripe, PayPal, Razorpay, or PayFast.
  4. Map pricing plans to QHM packages and set automated dunning rules (3-day suspend, instant unsuspend, overdue accounts default to Admin UI / Account Suspension preserving data rather than automatic 30-day termination).

Option B: External WHMCS or Blesta

  1. Generate a scoped provisioning API token (e.g. qptok with createacct/suspendacct permissions) in QHM → Development → Manage API Tokens.
  2. Download whmcs-quravity-module.zip from quravity.com/billing (or use built-in cPanel module).
  3. In WHMCS (Servers → Add New), enter hostname, root, API token, Port 2087, and test connection.