Datacentres and infrastructure (Worldstream, AlmaLinux 9)

Applies to: All plans.

Maxinodes hosts your websites on Worldstream's datacentre in the Netherlands (EU), on servers running AlmaLinux 9 with cPanel/WHM, CloudLinux, the LiteSpeed web server and a ModSecurity web application firewall with the OWASP rule set. This article is a plain reference to the platform your site runs on and the technologies behind it. You don't need to configure any of this — it's the standard stack on every plan.

Where your site is hosted

Your hosting runs in Worldstream's datacentre in the Netherlands (EU). Keeping the infrastructure in the EU means your data stays within Europe, which helps with GDPR and gives EU visitors low latency.

Self-Managed and Managed (shared) run on shared AlmaLinux 9 nodes, where each account is isolated from its neighbours.
Managed Enterprise runs on dedicated Worldstream bare-metal, quoted per project — see How to request a quote (Enterprise or custom).

Our main shared hosting node is dual-stack — reachable at the IPv4 address 185.185.49.198 and the IPv6 address 2a00:7c80:0:286:c::10. Customer websites are served over both IPv4 and IPv6 (dual-stack): when your domain uses our nameservers, the zone we create contains both the A and the AAAA records for your domain, www, cpanel and ftp — you do not have to add anything, and AutoSSL (Let's Encrypt) covers both addresses. See Your site's IP address (IPv4 and IPv6).

The hosting stack at a glance

Layer	What we use	What it does for you
Datacentre	Worldstream, Netherlands (EU)	Where your account physically lives
Operating system	AlmaLinux 9	Stable, enterprise Linux base
Control panel	cPanel / WHM	Your per-account panel (files, databases, SSL)
Account isolation	CloudLinux (LVE + CageFS)	Ring-fences each account's CPU, memory and files
Web server	LiteSpeed (LSWS)	Fast page serving; LiteSpeed Cache for WordPress
Database	MySQL / MariaDB	Powers your apps; MySQL Governor smooths heavy use
Languages	Multiple PHP versions (~7.x–8.x)	Pick your PHP version per domain
Security	ModSecurity + OWASP CRS, ImunifyAV, cPHulk	Web application firewall, server-side malware scanning, brute-force protection
SSL	AutoSSL (free Let's Encrypt)	Automatic HTTPS certificates
DNS	Our own nameservers, on a global anycast DNS network (Bunny.net)	Your DNS zone and records
Backups	JetBackup → Backblaze B2	Automatic daily backups

CloudLinux: how accounts stay isolated

On our shared nodes, CloudLinux gives every account its own resource envelope using LVE (Lightweight Virtual Environments). That caps each account's CPU, memory, entry processes and IO so one busy neighbour can't slow yours down — and so a runaway script on your own site is contained. CageFS isolates each account's filesystem from the others. When your site goes over its limits, visitors may briefly see a 508 "Resource Limit Reached" page; that's not a full outage and it clears as usage drops. See Understanding CloudLinux resource limits (LVE).

LiteSpeed and the security stack

LiteSpeed (LSWS) is the web server on every node and is the reason WordPress sites run fast here, especially with the LiteSpeed Cache plugin. LiteSpeed also enforces ModSecurity with the OWASP Core Rule Set, blocking malicious requests (SQL injection, XSS, path traversal) before they reach your application, while ImunifyAV scans account files for malware at server level and cPHulk blocks brute-force login attempts. See How LiteSpeed and LSCache make your site fast and How Maxinodes protects your site.

DNS, email and backups live elsewhere

A few important services don't sit on the hosting node itself:

DNS is managed by us, on our own nameservers, running on a global anycast DNS network (provided by Bunny.net). You manage your records (A, AAAA, CNAME, MX, TXT, NS, SRV and CAA) in the client area, not the cPanel zone editor. Your nameservers are ns1.maxinodes.com and ns2.maxinodes.com. See How DNS works at Maxinodes.
Email is not hosted on our server. There is no cPanel webmail or mail server — Professional Email is resold Microsoft 365 or Google Workspace, read at outlook.office.com or mail.google.com. See How email works at Maxinodes (Microsoft 365 & Google Workspace).
Backups are taken daily with JetBackup and written to Backblaze B2 object storage. Managed plans keep 30 days off-site. See How backups work at Maxinodes (JetBackup and Backblaze B2).

Uptime and reliability

Managed plans carry an uptime SLA with service credits — 99.9% on Starter, 99.95% on Growth, 99.99% on Business, and 99.99% on Enterprise (99.995% by agreement in a bespoke Order Form) — plus 24/7 monitoring. Self-Managed is self-serve, so it has no uptime SLA and no service credits. See Service Level Agreement (SLA) summary and check the status page during any incident, as covered in Service status and how to check for outages.

The Worldstream, AlmaLinux, CloudLinux, LiteSpeed, ModSecurity, OWASP, ImunifyAV, Bunny.net and Backblaze names belong to their respective owners; we use these technologies to run our platform.