{"id":40213,"date":"2026-03-14T14:26:40","date_gmt":"2026-03-14T07:26:40","guid":{"rendered":"https:\/\/interdata.vn\/blog\/?p=40213"},"modified":"2026-03-18T12:56:19","modified_gmt":"2026-03-18T05:56:19","slug":"huong-dan-su-dung-vps","status":"publish","type":"post","link":"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/","title":{"rendered":"H\u01b0\u1edbng D\u1eabn S\u1eed D\u1ee5ng VPS: T\u1eeb \u0110\u0103ng Nh\u1eadp \u0110\u1ebfn V\u1eadn H\u00e0nh [2026]"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">N\u1ed8I DUNG<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-la-gi-va-can-chuan-bi-gi-truoc-khi-bat-dau\" >VPS l\u00e0 g\u00ec v\u00e0 c\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi b\u1eaft \u0111\u1ea7u?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-Linux-va-VPS-Windows-khac-nhau-o-diem-nao\" >VPS Linux v\u00e0 VPS Windows kh\u00e1c nhau \u1edf \u0111i\u1ec3m n\u00e0o?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Nhan-VPS-xong-can-kiem-tra-gi-truoc-tien\" >Nh\u1eadn VPS xong c\u1ea7n ki\u1ec3m tra g\u00ec tr\u01b0\u1edbc ti\u00ean?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cach-dang-nhap-VPS-lan-dau-qua-SSH\" >C\u00e1ch \u0111\u0103ng nh\u1eadp VPS l\u1ea7n \u0111\u1ea7u qua SSH<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Dang-nhap-VPS-tren-Windows-bang-PuTTY\" >\u0110\u0103ng nh\u1eadp VPS tr\u00ean Windows b\u1eb1ng PuTTY<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Dang-nhap-VPS-tren-macOS-va-Linux\" >\u0110\u0103ng nh\u1eadp VPS tr\u00ean macOS v\u00e0 Linux<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cach-dang-nhap-VPS-bang-SSH-Key-thay-mat-khau\" >C\u00e1ch \u0111\u0103ng nh\u1eadp VPS b\u1eb1ng SSH Key thay m\u1eadt kh\u1ea9u<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cac-thao-tac-quan-tri-VPS-co-ban-sau-khi-nhan-may\" >C\u00e1c thao t\u00e1c qu\u1ea3n tr\u1ecb VPS c\u01a1 b\u1ea3n sau khi nh\u1eadn m\u00e1y<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Doi-mat-khau-root-va-tao-user-moi\" >\u0110\u1ed5i m\u1eadt kh\u1ea9u root v\u00e0 t\u1ea1o user m\u1edbi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cap-nhat-he-dieu-hanh-VPS-ngay-sau-khi-nhan\" >C\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS ngay sau khi nh\u1eadn<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cau-hinh-timezone-va-hostname-cho-VPS\" >C\u1ea5u h\u00ecnh timezone v\u00e0 hostname cho VPS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Kiem-tra-va-cau-hinh-swap-memory\" >Ki\u1ec3m tra v\u00e0 c\u1ea5u h\u00ecnh swap memory<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cai-dat-web-server-va-trien-khai-ung-dung-tren-VPS\" >C\u00e0i \u0111\u1eb7t web server v\u00e0 tri\u1ec3n khai \u1ee9ng d\u1ee5ng tr\u00ean VPS<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Nginx-hay-Apache-%E2%80%94-nen-chon-cai-nao-cho-VPS\" >Nginx hay Apache \u2014 n\u00ean ch\u1ecdn c\u00e1i n\u00e0o cho VPS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cai-Nginx-tren-VPS-Ubuntu-%E2%80%94-tung-buoc\" >C\u00e0i Nginx tr\u00ean VPS Ubuntu \u2014 t\u1eebng b\u01b0\u1edbc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Tai-sao-VPS-NVMe-nhanh-hon-VPS-SSD-thuong\" >T\u1ea1i sao VPS NVMe nhanh h\u01a1n VPS SSD th\u01b0\u1eddng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Thue-VPS-NVMe-U2-Gia-Re-%E2%80%94-InterData\" >Thu\u00ea VPS NVMe U.2 Gi\u00e1 R\u1ebb \u2014 InterData<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Bao-mat-VPS-%E2%80%94-Nhung-viec-bat-buoc-phai-lam\" >B\u1ea3o m\u1eadt VPS \u2014 Nh\u1eefng vi\u1ec7c b\u1eaft bu\u1ed9c ph\u1ea3i l\u00e0m<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cau-hinh-firewall-co-ban-voi-UFW\" >C\u1ea5u h\u00ecnh firewall c\u01a1 b\u1ea3n v\u1edbi UFW<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Doi-port-SSH-mac-dinh-tu-22-sang-port-khac\" >\u0110\u1ed5i port SSH m\u1eb7c \u0111\u1ecbnh t\u1eeb 22 sang port kh\u00e1c<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cach-xem-va-chan-IP-tan-cong-VPS\" >C\u00e1ch xem v\u00e0 ch\u1eb7n IP t\u1ea5n c\u00f4ng VPS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Tat-dang-nhap-root-truc-tiep-qua-SSH\" >T\u1eaft \u0111\u0103ng nh\u1eadp root tr\u1ef1c ti\u1ebfp qua SSH<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Giam-sat-hieu-nang-va-tai-nguyen-VPS\" >Gi\u00e1m s\u00e1t hi\u1ec7u n\u0103ng v\u00e0 t\u00e0i nguy\u00ean VPS<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Kiem-tra-CPU-RAM-va-disk-dang-dung-bao-nhieu\" >Ki\u1ec3m tra CPU, RAM v\u00e0 disk \u0111ang d\u00f9ng bao nhi\u00eau?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cach-xem-log-he-thong-khi-VPS-co-su-co\" >C\u00e1ch xem log h\u1ec7 th\u1ed1ng khi VPS c\u00f3 s\u1ef1 c\u1ed1<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Dau-hieu-VPS-bi-qua-tai-hoac-sap-hong\" >D\u1ea5u hi\u1ec7u VPS b\u1ecb qu\u00e1 t\u1ea3i ho\u1eb7c s\u1eafp h\u1ecfng<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Sao-luu-va-khoi-phuc-du-lieu-VPS\" >Sao l\u01b0u v\u00e0 kh\u00f4i ph\u1ee5c d\u1eef li\u1ec7u VPS<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Snapshot-VPS-la-gi-va-dung-khi-nao\" >Snapshot VPS l\u00e0 g\u00ec v\u00e0 d\u00f9ng khi n\u00e0o?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Backup-du-lieu-VPS-bang-rsync\" >Backup d\u1eef li\u1ec7u VPS b\u1eb1ng rsync<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#SSH-thuan-vs-Control-Panel-%E2%80%94-nen-dung-cai-nao\" >SSH thu\u1ea7n vs Control Panel \u2014 n\u00ean d\u00f9ng c\u00e1i n\u00e0o?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Khi-nao-nen-dung-Control-Panel-thay-vi-SSH\" >Khi n\u00e0o n\u00ean d\u00f9ng Control Panel thay v\u00ec SSH?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#So-sanh-DirectAdmin-va-cPanel-cho-VPS\" >So s\u00e1nh DirectAdmin v\u00e0 cPanel cho VPS<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Sai-lam-pho-bien-khi-moi-dung-VPS-lan-dau\" >Sai l\u1ea7m ph\u1ed5 bi\u1ebfn khi m\u1edbi d\u00f9ng VPS l\u1ea7n \u0111\u1ea7u<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Can-VPS-toc-do-cao-de-trien-khai-ngay\" >C\u1ea7n VPS t\u1ed1c \u0111\u1ed9 cao \u0111\u1ec3 tri\u1ec3n khai ngay?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Cau-hoi-thuong-gap-khi-su-dung-VPS\" >C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p khi s\u1eed d\u1ee5ng VPS<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Moi-nhan-VPS-phai-lam-gi-dau-tien\" >M\u1edbi nh\u1eadn VPS ph\u1ea3i l\u00e0m g\u00ec \u0111\u1ea7u ti\u00ean?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-mac-dinh-co-san-phan-mem-gi\" >VPS m\u1eb7c \u0111\u1ecbnh c\u00f3 s\u1eb5n ph\u1ea7n m\u1ec1m g\u00ec?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Tai-sao-khong-SSH-duoc-vao-VPS\" >T\u1ea1i sao kh\u00f4ng SSH \u0111\u01b0\u1ee3c v\u00e0o VPS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-Linux-dung-he-dieu-hanh-nao-tot-nhat\" >VPS Linux d\u00f9ng h\u1ec7 \u0111i\u1ec1u h\u00e0nh n\u00e0o t\u1ed1t nh\u1ea5t?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-40\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-khac-Cloud-Server-o-diem-nao\" >VPS kh\u00e1c Cloud Server \u1edf \u0111i\u1ec3m n\u00e0o?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-41\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-NVMe-nhanh-hon-VPS-SSD-thuong-bao-nhieu\" >VPS NVMe nhanh h\u01a1n VPS SSD th\u01b0\u1eddng bao nhi\u00eau?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-42\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Nen-tu-quan-tri-VPS-hay-thue-managed-VPS\" >N\u00ean t\u1ef1 qu\u1ea3n tr\u1ecb VPS hay thu\u00ea managed VPS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-43\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-bi-tan-cong-phai-lam-gi\" >VPS b\u1ecb t\u1ea5n c\u00f4ng ph\u1ea3i l\u00e0m g\u00ec?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-44\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Mot-VPS-co-the-chay-duoc-bao-nhieu-website\" >M\u1ed9t VPS c\u00f3 th\u1ec3 ch\u1ea1y \u0111\u01b0\u1ee3c bao nhi\u00eau website?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-45\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Lam-the-nao-de-tang-RAMCPU-VPS-khi-het-tai-nguyen\" >L\u00e0m th\u1ebf n\u00e0o \u0111\u1ec3 t\u0103ng RAM\/CPU VPS khi h\u1ebft t\u00e0i nguy\u00ean?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-46\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#VPS-co-can-cai-antivirus-khong\" >VPS c\u00f3 c\u1ea7n c\u00e0i antivirus kh\u00f4ng?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-47\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-su-dung-vps\/#Tu-day-ban-di-tiep-theo-huong-nao\" >T\u1eeb \u0111\u00e2y, b\u1ea1n \u0111i ti\u1ebfp theo h\u01b0\u1edbng n\u00e0o?<\/a><\/li><\/ul><\/nav><\/div>\n<p><!-- OVERVIEW BLOCK --><\/p>\n<div class=\"summary\">\n<p><strong>T\u00f3m t\u1eaft nhanh:<\/strong> H\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng VPS xoay quanh 5 nh\u00f3m vi\u1ec7c c\u1ea7n l\u00e0m \u0111\u00fang th\u1ee9 t\u1ef1: \u0111\u0103ng nh\u1eadp l\u1ea7n \u0111\u1ea7u qua SSH, c\u1ea5u h\u00ecnh h\u1ec7 th\u1ed1ng c\u01a1 b\u1ea3n trong 30 ph\u00fat \u0111\u1ea7u, c\u00e0i ph\u1ea7n m\u1ec1m c\u1ea7n thi\u1ebft, b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 tr\u01b0\u1edbc khi m\u1edf b\u1ea5t k\u1ef3 port n\u00e0o ra internet, v\u00e0 thi\u1ebft l\u1eadp monitoring \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1ef1 c\u1ed1 s\u1edbm. Th\u1ee9 t\u1ef1 quan tr\u1ecdng h\u01a1n t\u1ed1c \u0111\u1ed9 \u2014 b\u1ecf qua b\u1ea3o m\u1eadt \u0111\u1ec3 v\u1ed9i c\u00e0i web server l\u00e0 con \u0111\u01b0\u1eddng ng\u1eafn nh\u1ea5t d\u1eabn \u0111\u1ebfn VPS b\u1ecb compromise. B\u00e0i n\u00e0y d\u00e0nh cho developer, freelancer, v\u00e0 SME m\u1edbi nh\u1eadn VPS l\u1ea7n \u0111\u1ea7u mu\u1ed1n t\u1ef1 qu\u1ea3n tr\u1ecb kh\u00f4ng c\u1ea7n DevOps ri\u00eang.<\/p>\n<ul>\n<li>SSH l\u00e0 giao th\u1ee9c \u0111\u0103ng nh\u1eadp ch\u00ednh v\u00e0o VPS Linux \u2014 c\u1ea7n 4 th\u1ee9 \u0111\u1ec3 k\u1ebft n\u1ed1i: \u0111\u1ecba ch\u1ec9 IP, port (m\u1eb7c \u0111\u1ecbnh 22), username (th\u01b0\u1eddng l\u00e0 root), v\u00e0 password ho\u1eb7c private key<\/li>\n<li>Vi\u1ec7c \u0111\u1ea7u ti\u00ean sau khi SSH th\u00e0nh c\u00f4ng kh\u00f4ng ph\u1ea3i c\u00e0i web server, m\u00e0 l\u00e0 \u0111\u1ed5i m\u1eadt kh\u1ea9u root v\u00e0 t\u1ea1o user th\u01b0\u1eddng \u2014 b\u1ecf qua b\u01b0\u1edbc n\u00e0y, attacker c\u00f3 th\u1ec3 brute-force v\u00e0o VPS trong v\u00f2ng v\u00e0i gi\u1edd<\/li>\n<li>B\u1eadt firewall (UFW ho\u1eb7c iptables) tr\u01b0\u1edbc khi expose b\u1ea5t k\u1ef3 port n\u00e0o \u2014 \u0111\u1eb7c bi\u1ec7t kh\u00f4ng \u0111\u1ec3 port 3306 (MySQL) hay 6379 (Redis) m\u1edf tr\u1ef1c ti\u1ebfp ra internet<\/li>\n<li>Monitoring kh\u00f4ng c\u1ea7n tool ph\u1ee9c t\u1ea1p ngay t\u1eeb \u0111\u1ea7u: <code>htop<\/code> xem CPU\/RAM realtime, <code>df -h<\/code> xem disk, <code>free -m<\/code> xem memory \u2014 3 l\u1ec7nh n\u00e0y \u0111\u1ee7 b\u1eaft \u0111\u1ea7u<\/li>\n<li>VPS NVMe U.2 c\u00f3 IOPS cao h\u01a1n VPS SATA SSD t\u1eeb 3\u201310 l\u1ea7n t\u00f9y workload \u2014 ch\u00eanh l\u1ec7ch th\u1ef1c s\u1ef1 r\u00f5 khi ch\u1ea1y database, c\u00f2n v\u1edbi blog t\u0129nh th\u00ec g\u1ea7n nh\u01b0 kh\u00f4ng \u1ea3nh h\u01b0\u1edfng \u0111\u00e1ng k\u1ec3<\/li>\n<\/ul>\n<\/div>\n<p>Email t\u1eeb nh\u00e0 cung c\u1ea5p v\u1eeba v\u00e0o h\u1ed9p th\u01b0: th\u00f4ng tin VPS, \u0111\u1ecba ch\u1ec9 IP, root password. B\u1ea1n m\u1edf terminal. D\u00e1n l\u1ec7nh SSH v\u00e0o. M\u00e0n h\u00ecnh tr\u1ea3 v\u1ec1 d\u1ea5u nh\u1eafc l\u1ec7nh quen thu\u1ed9c \u2014 v\u00e0 b\u1ea1n kh\u00f4ng bi\u1ebft ph\u1ea3i l\u00e0m g\u00ec ti\u1ebfp theo.<\/p>\n<p>C\u00e2u h\u1ecfi t\u01b0\u1edfng \u0111\u01a1n gi\u1ea3n n\u00e0y khi\u1ebfn kh\u00f4ng \u00edt ng\u01b0\u1eddi b\u1eaft \u0111\u1ea7u Google, g\u1eb7p 30 b\u00e0i vi\u1ebft m\u00e2u thu\u1eabn nhau. B\u00e0i b\u1ea3o c\u00e0i web server ngay. B\u00e0i khuy\u00ean update OS tr\u01b0\u1edbc. B\u00e0i l\u1ea1i n\u00f3i ph\u1ea3i c\u1ea5u h\u00ecnh firewall \u0111\u1ea7u ti\u00ean. Kh\u00f4ng ai gi\u1ea3i th\u00edch t\u1ea1i sao th\u1ee9 t\u1ef1 \u0111\u00f3 quan tr\u1ecdng.<\/p>\n<p>S\u1ef1 th\u1eadt l\u00e0: qu\u1ea3n tr\u1ecb VPS kh\u00f4ng kh\u00f3. Nh\u01b0ng l\u00e0m sai th\u1ee9 t\u1ef1 c\u00f3 h\u1eadu qu\u1ea3 c\u1ee5 th\u1ec3 \u2014 VPS b\u1ecb brute-force trong ng\u00e0y \u0111\u1ea7u ti\u00ean v\u00ec ch\u01b0a \u0111\u1ed5i m\u1eadt kh\u1ea9u root, ho\u1eb7c ng\u01b0\u1ee3c l\u1ea1i, t\u1ef1 kh\u00f3a m\u00ecnh ra ngo\u00e0i v\u00ec c\u1ea5u h\u00ecnh firewall sai tr\u01b0\u1edbc khi allow port SSH. C\u1ea3 hai \u0111\u1ec1u \u0111\u00e3 x\u1ea3y ra v\u1edbi nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng m\u1edbi.<\/p>\n<p>B\u00e0i n\u00e0y \u0111i qua 5 phase theo \u0111\u00fang th\u1ee9 t\u1ef1 logic: chu\u1ea9n b\u1ecb v\u00e0 \u0111\u0103ng nh\u1eadp l\u1ea7n \u0111\u1ea7u, c\u1ea5u h\u00ecnh c\u01a1 b\u1ea3n trong 30 ph\u00fat \u0111\u1ea7u, c\u00e0i ph\u1ea7n m\u1ec1m c\u1ea7n thi\u1ebft cho use case c\u1ee7a b\u1ea1n, b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 \u0111\u00fang c\u00e1ch, r\u1ed3i m\u1edbi \u0111\u1ebfn monitoring v\u00e0 backup li\u00ean t\u1ee5c. M\u1ed7i phase c\u00f3 l\u00fd do r\u00f5 r\u00e0ng t\u1ea1i sao n\u00f3 \u0111\u1ee9ng \u1edf v\u1ecb tr\u00ed \u0111\u00f3 trong chu\u1ed7i \u2014 kh\u00f4ng ph\u1ea3i danh s\u00e1ch checklist ng\u1eabu nhi\u00ean.<\/p>\n<figure id=\"attachment_40220\" aria-describedby=\"caption-attachment-40220\" style=\"width: 800px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40220\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Huong-dan-su-dung-VPS.webp\" alt=\"H\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng VPS\" width=\"800\" height=\"537\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Huong-dan-su-dung-VPS.webp 800w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Huong-dan-su-dung-VPS-300x201.webp 300w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Huong-dan-su-dung-VPS-768x516.webp 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><figcaption id=\"caption-attachment-40220\" class=\"wp-caption-text\">H\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng VPS<\/figcaption><\/figure>\n<p><!-- H2 #1 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"VPS-la-gi-va-can-chuan-bi-gi-truoc-khi-bat-dau\"><\/span>VPS l\u00e0 g\u00ec v\u00e0 c\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi b\u1eaft \u0111\u1ea7u?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong>VPS (Virtual Private Server)<\/strong> l\u00e0 m\u1ed9t m\u00e1y ch\u1ee7 \u1ea3o \u0111\u01b0\u1ee3c t\u1ea1o ra b\u1eb1ng c\u00f4ng ngh\u1ec7 \u1ea3o h\u00f3a (virtualization), cho ph\u00e9p nhi\u1ec1u VPS ch\u1ea1y \u0111\u1ed9c l\u1eadp tr\u00ean c\u00f9ng m\u1ed9t server v\u1eadt l\u00fd nh\u01b0ng kh\u00f4ng chia s\u1ebb t\u00e0i nguy\u00ean v\u1edbi nhau. M\u1ed7i VPS c\u00f3 CPU, <a href=\"https:\/\/interdata.vn\/blog\/ram-server\/\">RAM<\/a>, v\u00e0 \u1ed5 \u0111\u0129a ri\u00eang \u2014 v\u1ec1 m\u1eb7t v\u1eadn h\u00e0nh, b\u1ea1n \u0111ang l\u00e0m vi\u1ec7c v\u1edbi m\u1ed9t m\u00e1y ch\u1ee7 Linux th\u1ef1c th\u1ee5, ch\u1ec9 l\u00e0 ch\u1ea1y tr\u00ean l\u1edbp \u1ea3o h\u00f3a KVM thay v\u00ec ph\u1ea7n c\u1ee9ng v\u1eadt l\u00fd tr\u1ef1c ti\u1ebfp. Theo t\u00e0i li\u1ec7u k\u1ef9 thu\u1eadt c\u1ee7a Red Hat v\u1ec1 KVM virtualization, m\u1ed7i guest VM \u0111\u01b0\u1ee3c c\u1ea5p t\u00e0i nguy\u00ean c\u00e1ch ly ho\u00e0n to\u00e0n th\u00f4ng qua <a href=\"https:\/\/interdata.vn\/blog\/hypervisor-la-gi\/\">hypervisor<\/a> \u2014 \u0111i\u1ec1u n\u00e0y \u0111\u1ea3m b\u1ea3o VPS c\u1ee7a b\u1ea1n kh\u00f4ng b\u1ecb \u1ea3nh h\u01b0\u1edfng b\u1edfi t\u1ea3i c\u1ee7a m\u00e1y kh\u00e1c tr\u00ean c\u00f9ng node.<\/p>\n<p>Tr\u01b0\u1edbc khi g\u00f5 l\u1ec7nh SSH \u0111\u1ea7u ti\u00ean, c\u00f3 4 th\u1ee9 c\u1ea7n x\u00e1c nh\u1eadn \u0111\u00e3 c\u00f3 \u0111\u1ee7 trong tay:<\/p>\n<ul>\n<li><strong>\u0110\u1ecba ch\u1ec9 IP c\u1ee7a VPS<\/strong> \u2014 th\u01b0\u1eddng l\u00e0 IPv4 d\u1ea1ng <code>103.x.x.x<\/code> ho\u1eb7c <code>45.x.x.x<\/code>, nh\u00e0 cung c\u1ea5p g\u1eedi trong email b\u00e0n giao<\/li>\n<li><strong>Port SSH<\/strong> \u2014 m\u1eb7c \u0111\u1ecbnh l\u00e0 22, m\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p \u0111\u00e3 \u0111\u1ed5i sang port kh\u00e1c v\u00ec l\u00fd do b\u1ea3o m\u1eadt, h\u00e3y ki\u1ec3m tra email k\u1ef9<\/li>\n<li><strong>Username v\u00e0 password<\/strong> \u2014 th\u01b0\u1eddng l\u00e0 <code>root<\/code> v\u00e0 m\u1eadt kh\u1ea9u t\u1ea1m do h\u1ec7 th\u1ed1ng sinh ra. M\u1eadt kh\u1ea9u n\u00e0y c\u1ea7n \u0111\u1ed5i ngay sau \u0111\u0103ng nh\u1eadp l\u1ea7n \u0111\u1ea7u<\/li>\n<li><strong>SSH client<\/strong> \u2014 Windows d\u00f9ng PuTTY ho\u1eb7c Windows Terminal (Win 10+); macOS v\u00e0 Linux d\u00f9ng Terminal built-in<\/li>\n<\/ul>\n<p>N\u1ebfu b\u1ea1n th\u1eafc m\u1eafc VPS c\u1ee7a m\u00ecnh \u0111ang ch\u1ea1y h\u1ec7 \u0111i\u1ec1u h\u00e0nh g\u00ec \u2014 Ubuntu hay CentOS \u2014 th\u00f4ng tin n\u00e0y c\u0169ng c\u00f3 trong email b\u00e0n giao. M\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p \u0111\u1ec3 b\u1ea1n ch\u1ecdn OS l\u00fac \u0111\u1eb7t; n\u1ebfu ch\u01b0a ch\u1ecdn th\u00ec h\u1ecfi support tr\u01b0\u1edbc khi b\u1eaft \u0111\u1ea7u, v\u00ec c\u00fa ph\u00e1p l\u1ec7nh gi\u1eefa Debian\/Ubuntu v\u00e0 CentOS\/RHEL kh\u00e1c nhau \u1edf m\u1ed9t s\u1ed1 ch\u1ed7 quan tr\u1ecdng.<\/p>\n<p>\u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 c\u00e1c lo\u1ea1i d\u1ecbch v\u1ee5 m\u00e1y ch\u1ee7 v\u00e0 khi n\u00e0o n\u00ean d\u00f9ng VPS thay v\u00ec Shared Hosting hay Cloud Server, b\u1ea1n c\u00f3 th\u1ec3 xem <a href=\"https:\/\/interdata.vn\/blog\/vps-la-gi\/\">h\u01b0\u1edbng d\u1eabn t\u1ed5ng quan v\u1ec1 VPS d\u00e0nh cho ng\u01b0\u1eddi m\u1edbi<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-Linux-va-VPS-Windows-khac-nhau-o-diem-nao\"><\/span>VPS Linux v\u00e0 VPS Windows kh\u00e1c nhau \u1edf \u0111i\u1ec3m n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>B\u00e0i n\u00e0y ch\u1ee7 y\u1ebfu h\u01b0\u1edbng d\u1eabn VPS Linux \u2014 \u0111\u00e2y l\u00e0 lo\u1ea1i ph\u1ed5 bi\u1ebfn h\u01a1n v\u00e0 l\u00e0 l\u1ef1a ch\u1ecdn m\u1eb7c \u0111\u1ecbnh cho web hosting, app server, v\u00e0 h\u1ea7u h\u1ebft use case ph\u1ed5 bi\u1ebfn. Tuy nhi\u00ean, c\u1ea7n n\u00f3i r\u00f5 ngay t\u1eeb \u0111\u1ea7u \u0111\u1ec3 b\u1ea1n kh\u00f4ng \u00e1p d\u1ee5ng nh\u1ea7m h\u01b0\u1edbng d\u1eabn:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ti\u00eau ch\u00ed<\/th>\n<th>VPS Linux<\/th>\n<th>VPS Windows<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Giao di\u1ec7n qu\u1ea3n tr\u1ecb<\/td>\n<td>SSH (command line)<\/td>\n<td>RDP (Remote Desktop \u2014 giao di\u1ec7n \u0111\u1ed3 h\u1ecda)<\/td>\n<\/tr>\n<tr>\n<td>Ph\u1ea7n m\u1ec1m h\u1ed7 tr\u1ee3<\/td>\n<td>PHP, Python, Node.js, Ruby, Nginx, Apache, MySQL, PostgreSQL<\/td>\n<td>.NET Framework, MS SQL Server, ASP.NET, IIS<\/td>\n<\/tr>\n<tr>\n<td>Gi\u00e1 baseline<\/td>\n<td>Th\u1ea5p h\u01a1n \u2014 kh\u00f4ng c\u00f3 license OS<\/td>\n<td>Cao h\u01a1n \u2014 c\u1ed9ng th\u00eam Windows Server license<\/td>\n<\/tr>\n<tr>\n<td>Ph\u00f9 h\u1ee3p v\u1edbi ai<\/td>\n<td>Developer web\/app, sysadmin, hosting website PHP\/Node.js<\/td>\n<td>Dev .NET, app d\u00f9ng MS SQL Server, c\u1ea7n GUI remote<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>N\u1ebfu b\u1ea1n \u0111ang ch\u1ea1y \u1ee9ng d\u1ee5ng .NET ho\u1eb7c c\u1ea7n MS SQL Server, <a href=\"https:\/\/interdata.vn\/blog\/vps-windows-la-gi\/\">VPS Windows<\/a> l\u00e0 b\u1eaft bu\u1ed9c. V\u1edbi m\u1ecdi use case c\u00f2n l\u1ea1i \u2014 WordPress, Laravel, Node.js, Python app \u2014 VPS Linux l\u00e0 l\u1ef1a ch\u1ecdn hi\u1ec7u qu\u1ea3 h\u01a1n v\u1ec1 c\u1ea3 chi ph\u00ed l\u1eabn hi\u1ec7u n\u0103ng.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nhan-VPS-xong-can-kiem-tra-gi-truoc-tien\"><\/span>Nh\u1eadn VPS xong c\u1ea7n ki\u1ec3m tra g\u00ec tr\u01b0\u1edbc ti\u00ean?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tr\u01b0\u1edbc khi l\u00e0m b\u1ea5t c\u1ee9 \u0111i\u1ec1u g\u00ec, ki\u1ec3m tra nhanh 5 m\u1ee5c n\u00e0y \u2014 gi\u1ed1ng nh\u01b0 b\u01b0\u1edbc ki\u1ec3m tra h\u00e0ng tr\u01b0\u1edbc khi k\u00fd nh\u1eadn. N\u1ebfu c\u00f3 v\u1ea5n \u0111\u1ec1, li\u00ean h\u1ec7 support ngay tr\u01b0\u1edbc khi b\u1eaft \u0111\u1ea7u c\u1ea5u h\u00ecnh \u0111\u1ec3 tr\u00e1nh m\u1ea5t th\u1eddi gian debug v\u1ec1 sau:<\/p>\n<ul>\n<li><strong>Ping th\u1eed IP<\/strong> \u2014 ch\u1ea1y <code>ping [IP_VPS]<\/code> t\u1eeb m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n. N\u1ebfu kh\u00f4ng c\u00f3 response, ki\u1ec3m tra l\u1ea1i IP ho\u1eb7c h\u1ecfi nh\u00e0 cung c\u1ea5p<\/li>\n<li><strong>Test SSH k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c kh\u00f4ng<\/strong> \u2014 <code>ssh root@[IP_VPS]<\/code>. &#8220;Connection refused&#8221; kh\u00e1c &#8220;Connection timed out&#8221;: c\u00e1i \u0111\u1ea7u l\u00e0 SSH ch\u01b0a ch\u1ea1y, c\u00e1i sau l\u00e0 firewall ch\u1eb7n<\/li>\n<li><strong>X\u00e1c nh\u1eadn phi\u00ean b\u1ea3n OS<\/strong> \u2014 sau khi v\u00e0o \u0111\u01b0\u1ee3c: <code>lsb_release -a<\/code> (Ubuntu\/Debian) ho\u1eb7c <code>cat \/etc\/redhat-release<\/code> (CentOS). Bi\u1ebft ch\u00ednh x\u00e1c OS version \u0111\u1ec3 tra l\u1ec7nh \u0111\u00fang<\/li>\n<li><strong>Ki\u1ec3m tra disk space ban \u0111\u1ea7u<\/strong> \u2014 <code>df -h<\/code>. M\u1ed9t s\u1ed1 VPS gi\u00e1 r\u1ebb giao m\u00e1y v\u1edbi disk \u0111\u00e3 d\u00f9ng ~30\u201340% v\u00ec OS snapshot c\u0169. D\u01b0\u1edbi 70% d\u00f9ng l\u00e0 \u1ed5n<\/li>\n<li><strong>Ki\u1ec3m tra RAM kh\u1ea3 d\u1ee5ng<\/strong> \u2014 <code>free -m<\/code>. VPS 1GB RAM sau khi kh\u1edfi \u0111\u1ed9ng th\u01b0\u1eddng ch\u1ec9 c\u00f2n kho\u1ea3ng 700\u2013800MB available \u2014 \u0111\u00e2y l\u00e0 b\u00ecnh th\u01b0\u1eddng<\/li>\n<\/ul>\n<p><!-- H2 #2 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cach-dang-nhap-VPS-lan-dau-qua-SSH\"><\/span>C\u00e1ch \u0111\u0103ng nh\u1eadp VPS l\u1ea7n \u0111\u1ea7u qua SSH<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSH (Secure Shell) l\u00e0 giao th\u1ee9c m\u00e3 h\u00f3a d\u00f9ng \u0111\u1ec3 \u0111i\u1ec1u khi\u1ec3n VPS t\u1eeb xa qua terminal. To\u00e0n b\u1ed9 giao ti\u1ebfp gi\u1eefa m\u00e1y b\u1ea1n v\u00e0 VPS \u0111\u1ec1u \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a \u2014 kh\u00e1c v\u1edbi Telnet th\u1eddi c\u0169 g\u1eedi password d\u01b0\u1edbi d\u1ea1ng plain text. Tr\u00ean VPS Linux, SSH g\u1ea7n nh\u01b0 l\u00e0 c\u00e1ch duy nh\u1ea5t \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0 th\u1ef1c thi l\u1ec7nh.<\/p>\n<p>Ph\u1ea7n n\u00e0y chia th\u00e0nh 2 lu\u1ed3ng ch\u00ednh t\u00f9y OS b\u1ea1n \u0111ang d\u00f9ng \u1edf m\u00e1y c\u00e1 nh\u00e2n, v\u00e0 th\u00eam m\u1ed9t ph\u1ea7n v\u1ec1 SSH Key cho ai mu\u1ed1n b\u1ea3o m\u1eadt h\u01a1n ngay t\u1eeb \u0111\u1ea7u. M\u1ed7i b\u01b0\u1edbc c\u00f3 expected output \u0111\u1ec3 b\u1ea1n bi\u1ebft m\u00ecnh \u0111ang \u0111\u00fang h\u01b0\u1edbng hay c\u00f3 l\u1ed7i c\u1ea7n x\u1eed l\u00fd.<\/p>\n<p>Xem th\u00eam h\u01b0\u1edbng d\u1eabn chi ti\u1ebft cho t\u1eebng h\u1ec7 \u0111i\u1ec1u h\u00e0nh client t\u1ea1i <a href=\"https:\/\/interdata.vn\/blog\/cach-truy-cap-vps-linux-bang-ssh\/\" target=\"_blank\" rel=\"noopener\">\u0111\u0103ng nh\u1eadp SSH t\u1eeb Windows, macOS v\u00e0 Linux<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dang-nhap-VPS-tren-Windows-bang-PuTTY\"><\/span>\u0110\u0103ng nh\u1eadp VPS tr\u00ean Windows b\u1eb1ng PuTTY<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Windows 10 tr\u1edf l\u00ean \u0111\u00e3 c\u00f3 OpenSSH built-in trong Windows Terminal \u2014 b\u1ea1n c\u00f3 th\u1ec3 d\u00f9ng lu\u00f4n m\u00e0 kh\u00f4ng c\u1ea7n c\u00e0i th\u00eam g\u00ec. Nh\u01b0ng n\u1ebfu \u0111ang d\u00f9ng Windows c\u0169 h\u01a1n, ho\u1eb7c mu\u1ed1n giao di\u1ec7n \u0111\u1ed3 h\u1ecda d\u1ec5 qu\u1ea3n l\u00fd nhi\u1ec1u session, PuTTY l\u00e0 l\u1ef1a ch\u1ecdn ti\u00eau chu\u1ea9n. T\u1ea3i t\u1ea1i <code>putty.org<\/code>, ch\u1ea1y file <code>.exe<\/code> th\u1eb3ng, kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t.<\/p>\n<ol>\n<li><strong>Nh\u1eadp th\u00f4ng tin k\u1ebft n\u1ed1i:<\/strong> M\u1edf PuTTY, trong \u00f4 &#8220;Host Name (or IP address)&#8221; nh\u1eadp IP VPS c\u1ee7a b\u1ea1n. Port \u0111i\u1ec1n 22 (ho\u1eb7c port t\u00f9y ch\u1ec9nh n\u1ebfu nh\u00e0 cung c\u1ea5p \u0111\u00e3 \u0111\u1ed5i). Connection type gi\u1eef nguy\u00ean l\u00e0 SSH. Nh\u1ea5n &#8220;Open&#8221;.<\/li>\n<li><strong>Ch\u1ea5p nh\u1eadn host key l\u1ea7n \u0111\u1ea7u:<\/strong> L\u1ea7n \u0111\u1ea7u k\u1ebft n\u1ed1i, PuTTY s\u1ebd h\u1ecfi &#8220;The server&#8217;s host key is not cached in the registry. Do you want to continue connecting?&#8221; \u2014 nh\u1ea5n &#8220;Accept&#8221;. \u0110\u00e2y l\u00e0 vi\u1ec7c b\u00ecnh th\u01b0\u1eddng, PuTTY ch\u1ec9 l\u01b0u fingerprint c\u1ee7a server \u0111\u1ec3 nh\u1eefng l\u1ea7n sau c\u00f3 th\u1ec3 ph\u00e1t hi\u1ec7n n\u1ebfu key thay \u0111\u1ed5i \u0111\u1ed9t ng\u1ed9t.<\/li>\n<li><strong>Nh\u1eadp username:<\/strong> Terminal hi\u1ec7n ra, g\u00f5 <code>root<\/code> r\u1ed3i Enter. M\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p t\u1ea1o username kh\u00e1c \u2014 ki\u1ec3m tra l\u1ea1i email b\u00e0n giao n\u1ebfu <code>root<\/code> kh\u00f4ng \u0111\u01b0\u1ee3c.<\/li>\n<li><strong>Nh\u1eadp password:<\/strong> G\u00f5 m\u1eadt kh\u1ea9u r\u1ed3i Enter.<\/li>\n<\/ol>\n<div class=\"note-box\"><strong>L\u01b0u \u00fd quan tr\u1ecdng:<\/strong> khi g\u00f5 password trong PuTTY (v\u00e0 m\u1ecdi terminal Linux), con tr\u1ecf kh\u00f4ng di chuy\u1ec3n v\u00e0 kh\u00f4ng hi\u1ec3n th\u1ecb d\u1ea5u <code>*<\/code> \u2014 \u0111\u00e2y l\u00e0 behavior b\u00ecnh th\u01b0\u1eddng, kh\u00f4ng ph\u1ea3i l\u1ed7i. G\u00f5 xong nh\u1ea5n Enter.<\/div>\n<p>\u0110\u0103ng nh\u1eadp th\u00e0nh c\u00f4ng s\u1ebd th\u1ea5y th\u00f4ng tin OS, th\u1eddi gian \u0111\u0103ng nh\u1eadp l\u1ea7n cu\u1ed1i, v\u00e0 d\u1ea5u nh\u1eafc l\u1ec7nh d\u1ea1ng <code>root@hostname:~#<\/code>.<\/p>\n<figure id=\"attachment_31212\" aria-describedby=\"caption-attachment-31212\" style=\"width: 600px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-31212\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/Truy-cap-VPS-Linux-qua-SSH-bang-PuTTY.png\" alt=\"Truy c\u1eadp VPS Linux qua SSH b\u1eb1ng PuTTY\" width=\"600\" height=\"540\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/Truy-cap-VPS-Linux-qua-SSH-bang-PuTTY.png 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/Truy-cap-VPS-Linux-qua-SSH-bang-PuTTY-300x270.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption id=\"caption-attachment-31212\" class=\"wp-caption-text\">Truy c\u1eadp VPS Linux qua SSH b\u1eb1ng PuTTY<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"Dang-nhap-VPS-tren-macOS-va-Linux\"><\/span>\u0110\u0103ng nh\u1eadp VPS tr\u00ean macOS v\u00e0 Linux<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tr\u00ean macOS v\u00e0 Linux, SSH client \u0111\u00e3 c\u00f3 s\u1eb5n trong Terminal \u2014 kh\u00f4ng c\u1ea7n c\u00e0i th\u00eam b\u1ea5t c\u1ee9 th\u1ee9 g\u00ec.<\/p>\n<p><strong>M\u1edf Terminal<\/strong> \u2014 macOS: Command + Space, g\u00f5 &#8220;Terminal&#8221;. Linux: t\u00f9y distro, th\u01b0\u1eddng l\u00e0 Ctrl + Alt + T.<\/p>\n<p><strong>Ch\u1ea1y l\u1ec7nh k\u1ebft n\u1ed1i:<\/strong><\/p>\n<p><code>ssh root@[IP_VPS]<\/code><\/p>\n<p>N\u1ebfu port SSH kh\u00f4ng ph\u1ea3i 22, th\u00eam flag <code>-p<\/code>: <code>ssh root@[IP_VPS] -p [PORT]<\/code><\/p>\n<p>L\u1ea7n \u0111\u1ea7u k\u1ebft n\u1ed1i s\u1ebd th\u1ea5y: <em>&#8220;Are you sure you want to continue connecting (yes\/no\/[fingerprint])?&#8221;<\/em> \u2014 g\u00f5 <code>yes<\/code> r\u1ed3i Enter. Sau \u0111\u00f3 nh\u1eadp password khi \u0111\u01b0\u1ee3c h\u1ecfi.<\/p>\n<p>N\u1ebfu d\u00f9ng SSH Key (xem ph\u1ea7n ti\u1ebfp theo), l\u1ec7nh th\u00eam flag <code>-i<\/code> tr\u1ecf \u0111\u1ebfn private key: <code>ssh root@[IP_VPS] -i ~\/.ssh\/id_rsa<\/code>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cach-dang-nhap-VPS-bang-SSH-Key-thay-mat-khau\"><\/span>C\u00e1ch \u0111\u0103ng nh\u1eadp VPS b\u1eb1ng SSH Key thay m\u1eadt kh\u1ea9u<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSH Key authentication b\u1ea3o m\u1eadt h\u01a1n password theo c\u00e1ch c\u01a1 b\u1ea3n: kh\u00f4ng c\u00f3 g\u00ec \u0111\u1ec3 brute-force. Thay v\u00ec m\u1eadt kh\u1ea9u, x\u00e1c th\u1ef1c d\u1ef1a tr\u00ean c\u1eb7p key \u2014 private key l\u01b0u \u1edf m\u00e1y b\u1ea1n, public key \u0111\u0103ng k\u00fd tr\u00ean VPS. Bot t\u1ea5n c\u00f4ng kh\u00f4ng c\u00f3 private key th\u00ec kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c, b\u1ea5t k\u1ec3 th\u1eed bao nhi\u00eau l\u1ea7n.<\/p>\n<p><strong>T\u1ea1o c\u1eb7p key tr\u00ean m\u00e1y local:<\/strong><\/p>\n<p><code>ssh-keygen -t ed25519 -C \"your_email@example.com\"<\/code><\/p>\n<p>L\u1ec7nh n\u00e0y t\u1ea1o 2 file: <code>~\/.ssh\/id_ed25519<\/code> (private key \u2014 <strong>kh\u00f4ng \u0111\u01b0\u1ee3c chia s\u1ebb cho ai<\/strong>) v\u00e0 <code>~\/.ssh\/id_ed25519.pub<\/code> (public key \u2014 upload l\u00ean VPS). C\u00f3 th\u1ec3 \u0111\u1eb7t passphrase th\u00eam m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7, ho\u1eb7c \u0111\u1ec3 tr\u1ed1ng n\u1ebfu mu\u1ed1n login kh\u00f4ng c\u1ea7n nh\u1eadp g\u00ec.<\/p>\n<p><strong>Copy public key l\u00ean VPS:<\/strong><\/p>\n<p><code>ssh-copy-id -i ~\/.ssh\/id_ed25519.pub root@[IP_VPS]<\/code><\/p>\n<p>L\u1ec7nh n\u00e0y t\u1ef1 \u0111\u1ed9ng th\u00eam public key v\u00e0o file <code>~\/.ssh\/authorized_keys<\/code> tr\u00ean VPS. N\u1ebfu kh\u00f4ng c\u00f3 <code>ssh-copy-id<\/code> (Windows), b\u1ea1n c\u1ea7n copy n\u1ed9i dung file <code>.pub<\/code> v\u00e0 paste th\u1ee7 c\u00f4ng v\u00e0o file tr\u00ean.<\/p>\n<p><strong>Test \u0111\u0103ng nh\u1eadp b\u1eb1ng key:<\/strong><\/p>\n<p><code>ssh root@[IP_VPS] -i ~\/.ssh\/id_ed25519<\/code><\/p>\n<p>N\u1ebfu v\u00e0o \u0111\u01b0\u1ee3c m\u00e0 kh\u00f4ng c\u1ea7n nh\u1eadp password l\u00e0 th\u00e0nh c\u00f4ng.<\/p>\n<p><strong>T\u1eaft password authentication (t\u00f9y ch\u1ecdn \u2014 khuy\u1ebfn ngh\u1ecb):<\/strong><\/p>\n<p>S\u1eeda file <code>\/etc\/ssh\/sshd_config<\/code>, t\u00ecm d\u00f2ng <code>PasswordAuthentication yes<\/code> v\u00e0 \u0111\u1ed5i th\u00e0nh <code>PasswordAuthentication no<\/code>. Sau \u0111\u00f3: <code>systemctl restart sshd<\/code>.<\/p>\n<div class=\"warning-box\"><strong>\u26a0\ufe0f C\u1ea3nh b\u00e1o:<\/strong> Ch\u1ec9 l\u00e0m b\u01b0\u1edbc n\u00e0y sau khi \u0111\u00e3 test login b\u1eb1ng key th\u00e0nh c\u00f4ng. N\u1ebfu m\u1ea5t private key sau khi t\u1eaft password auth, b\u1ea1n s\u1ebd kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c VPS tr\u1eeb khi nh\u00e0 cung c\u1ea5p c\u00f3 recovery console.<\/div>\n<p>H\u01b0\u1edbng d\u1eabn chi ti\u1ebft v\u1ec1 t\u1ea1o v\u00e0 qu\u1ea3n l\u00fd SSH Key, bao g\u1ed3m c\u00e1ch d\u00f9ng key tr\u00ean Windows v\u1edbi PuTTYgen, xem t\u1ea1i <a href=\"#\">x\u00e1c th\u1ef1c SSH Key tr\u00ean VPS<\/a>.<\/p>\n<p><!-- H2 #3 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cac-thao-tac-quan-tri-VPS-co-ban-sau-khi-nhan-may\"><\/span>C\u00e1c thao t\u00e1c qu\u1ea3n tr\u1ecb VPS c\u01a1 b\u1ea3n sau khi nh\u1eadn m\u00e1y<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>30 ph\u00fat \u0111\u1ea7u ti\u00ean v\u1edbi VPS m\u1edbi l\u00e0 kho\u1ea3ng th\u1eddi gian quan tr\u1ecdng nh\u1ea5t. Kh\u00f4ng ph\u1ea3i c\u00e0i web server, kh\u00f4ng ph\u1ea3i deploy app \u2014 m\u00e0 l\u00e0 thi\u1ebft l\u1eadp n\u1ec1n t\u1ea3ng an to\u00e0n \u0111\u1ec3 m\u1ecdi th\u1ee9 sau \u0111\u00f3 ch\u1ea1y \u1ed5n \u0111\u1ecbnh. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 nh\u1eefng vi\u1ec7c InterData khuy\u00ean kh\u00e1ch h\u00e0ng l\u00e0m ngay sau khi nh\u1eadn b\u00e0n giao VPS, theo \u0111\u00fang th\u1ee9 t\u1ef1.<\/p>\n<div class=\"note-box\"><strong>L\u01b0u \u00fd v\u1ec1 l\u1ec7nh:<\/strong> ph\u1ea7n n\u00e0y ch\u1ee7 y\u1ebfu d\u00f9ng l\u1ec7nh Ubuntu\/Debian. N\u1ebfu VPS ch\u1ea1y CentOS ho\u1eb7c AlmaLinux, s\u1ebd ghi r\u00f5 l\u1ec7nh t\u01b0\u01a1ng \u0111\u01b0\u01a1ng. Xem th\u00eam <a href=\"https:\/\/interdata.vn\/blog\/cac-lenh-linux-thong-dung\/\" target=\"_blank\" rel=\"noopener\">l\u1ec7nh Linux c\u01a1 b\u1ea3n c\u1ea7n bi\u1ebft khi d\u00f9ng VPS<\/a> n\u1ebfu b\u1ea1n m\u1edbi l\u00e0m quen v\u1edbi command line.<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Doi-mat-khau-root-va-tao-user-moi\"><\/span>\u0110\u1ed5i m\u1eadt kh\u1ea9u root v\u00e0 t\u1ea1o user m\u1edbi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>M\u1eadt kh\u1ea9u root m\u1eb7c \u0111\u1ecbnh do nh\u00e0 cung c\u1ea5p sinh ra th\u01b0\u1eddng ng\u1eafn v\u00e0 c\u00f3 pattern d\u1ec5 \u0111o\u00e1n. \u0110\u1ed5i ngay:<\/p>\n<p><strong>\u0110\u1ed5i m\u1eadt kh\u1ea9u root:<\/strong><\/p>\n<p><code>passwd root<\/code><\/p>\n<p>Nh\u1eadp m\u1eadt kh\u1ea9u m\u1edbi 2 l\u1ea7n. D\u00f9ng m\u1eadt kh\u1ea9u d\u00e0i t\u1ed1i thi\u1ec3u 16 k\u00fd t\u1ef1, mix ch\u1eef hoa\/th\u01b0\u1eddng\/s\u1ed1\/k\u00fd t\u1ef1 \u0111\u1eb7c bi\u1ec7t. L\u01b0u v\u00e0o password manager, kh\u00f4ng l\u01b0u trong file text.<\/p>\n<p><strong>T\u1ea1o user th\u01b0\u1eddng:<\/strong><\/p>\n<p>Ubuntu\/Debian: <code>adduser [username]<\/code> (c\u00f3 interactive prompt \u0111\u1eb7t password ngay)<\/p>\n<p>CentOS\/RHEL: <code>useradd [username] &amp;&amp; passwd [username]<\/code> (2 l\u1ec7nh ri\u00eang)<\/p>\n<p>L\u00fd do c\u1ea7n user th\u01b0\u1eddng: root c\u00f3 quy\u1ec1n x\u00f3a b\u1ea5t c\u1ee9 th\u1ee9 g\u00ec, k\u1ec3 c\u1ea3 file h\u1ec7 th\u1ed1ng quan tr\u1ecdng. D\u00f9ng root h\u00e0ng ng\u00e0y l\u00e0 r\u1ee7i ro kh\u00f4ng c\u1ea7n thi\u1ebft \u2014 m\u1ed9t l\u1ec7nh sai c\u00f3 th\u1ec3 x\u00f3a s\u1ea1ch c\u1ea3 OS.<\/p>\n<p><strong>C\u1ea5p quy\u1ec1n sudo cho user m\u1edbi:<\/strong><\/p>\n<p><code>usermod -aG sudo [username]<\/code><\/p>\n<p>V\u1edbi CentOS: <code>usermod -aG wheel [username]<\/code><\/p>\n<p>Sau b\u01b0\u1edbc n\u00e0y, user th\u01b0\u1eddng c\u00f3 th\u1ec3 ch\u1ea1y l\u1ec7nh v\u1edbi quy\u1ec1n root b\u1eb1ng prefix <code>sudo<\/code> \u2014 nh\u01b0ng ph\u1ea3i nh\u1eadp password x\u00e1c nh\u1eadn m\u1ed7i l\u1ea7n, t\u1ea1o th\u00eam m\u1ed9t l\u1edbp ki\u1ec3m so\u00e1t.<\/p>\n<p>T\u1ea1i sao kh\u00f4ng d\u00f9ng root tr\u1ef1c ti\u1ebfp? N\u1ebfu VPS c\u1ee7a b\u1ea1n b\u1ecb compromise \u2014 <a href=\"https:\/\/interdata.vn\/blog\/web-application-la-gi\/\">\u1ee9ng d\u1ee5ng web<\/a> c\u00f3 l\u1ed7 h\u1ed5ng, ho\u1eb7c b\u1ea1n v\u00f4 t\u00ecnh c\u00e0i malware \u2014 attacker c\u00f3 quy\u1ec1n root ngay l\u1eadp t\u1ee9c. V\u1edbi user th\u01b0\u1eddng, h\u1ecd c\u1ea7n leo thang \u0111\u1eb7c quy\u1ec1n (privilege escalation) th\u00eam m\u1ed9t b\u01b0\u1edbc, cho b\u1ea1n th\u00eam th\u1eddi gian ph\u00e1t hi\u1ec7n.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cap-nhat-he-dieu-hanh-VPS-ngay-sau-khi-nhan\"><\/span>C\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS ngay sau khi nh\u1eadn<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>VPS m\u1edbi giao th\u01b0\u1eddng d\u1ef1a tr\u00ean m\u1ed9t image OS \u0111\u01b0\u1ee3c t\u1ea1o c\u00e1ch \u0111\u00e2y v\u00e0i tu\u1ea7n ho\u1eb7c v\u00e0i th\u00e1ng. Trong kho\u1ea3ng th\u1eddi gian \u0111\u00f3, h\u00e0ng ch\u1ee5c security patch \u0111\u00e3 \u0111\u01b0\u1ee3c release \u2014 nhi\u1ec1u trong s\u1ed1 \u0111\u00f3 v\u00e1 c\u00e1c l\u1ed7 h\u1ed5ng \u0111\u00e3 c\u00f3 exploit c\u00f4ng khai. Theo d\u1eef li\u1ec7u t\u1eeb Shodan research blog, m\u1ed9t VPS m\u1edbi expose tr\u1ef1c ti\u1ebfp ra internet m\u00e0 ch\u01b0a patch s\u1ebd nh\u1eadn \u0111\u01b0\u1ee3c brute-force attempt \u0111\u1ea7u ti\u00ean trong v\u00f2ng d\u01b0\u1edbi 1 gi\u1edd.<\/p>\n<p>C\u1eadp nh\u1eadt ngay, l\u00e0m lu\u00f4n sau khi \u0111\u0103ng nh\u1eadp l\u1ea7n \u0111\u1ea7u:<\/p>\n<p><strong>Ubuntu\/Debian:<\/strong><\/p>\n<p><code>apt update &amp;&amp; apt upgrade -y<\/code><\/p>\n<p>L\u1ec7nh \u0111\u1ea7u refresh danh s\u00e1ch package, l\u1ec7nh sau c\u00e0i t\u1ea5t c\u1ea3 b\u1ea3n c\u1eadp nh\u1eadt. Flag <code>-y<\/code> t\u1ef1 confirm kh\u00f4ng c\u1ea7n nh\u1ea5n Enter t\u1eebng c\u00e1i.<\/p>\n<p><strong>CentOS Stream \/ AlmaLinux \/ Rocky Linux:<\/strong><\/p>\n<p><code>dnf update -y<\/code><\/p>\n<p>Qu\u00e1 tr\u00ecnh th\u01b0\u1eddng m\u1ea5t 5\u201315 ph\u00fat t\u00f9y s\u1ed1 l\u01b0\u1ee3ng package c\u1ea7n update. Sau khi xong, reboot \u0111\u1ec3 \u00e1p d\u1ee5ng kernel update n\u1ebfu c\u00f3: <code>reboot<\/code>. VPS s\u1ebd offline kho\u1ea3ng 30\u201360 gi\u00e2y r\u1ed3i t\u1ef1 kh\u1edfi \u0111\u1ed9ng l\u1ea1i.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cau-hinh-timezone-va-hostname-cho-VPS\"><\/span>C\u1ea5u h\u00ecnh timezone v\u00e0 hostname cho VPS<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Hai vi\u1ec7c nh\u1ecf nh\u01b0ng c\u00f3 \u1ea3nh h\u01b0\u1edfng th\u1ef1c t\u1ebf khi debug v\u1ec1 sau:<\/p>\n<p>\u0110\u1eb7t timezone v\u1ec1 m\u00fai gi\u1edd Vi\u1ec7t Nam:<\/p>\n<p><code>timedatectl set-timezone Asia\/Ho_Chi_Minh<\/code><\/p>\n<p>\u0110\u1eb7t t\u00ean hostname cho VPS:<\/p>\n<p><code>hostnamectl set-hostname [t\u00ean-vps-c\u1ee7a-b\u1ea1n]<\/code><\/p>\n<p>T\u1ea1i sao timezone quan tr\u1ecdng? Log h\u1ec7 th\u1ed1ng ghi timestamp theo timezone c\u1ee7a server. N\u1ebfu \u0111\u1ec3 m\u1eb7c \u0111\u1ecbnh UTC, khi xem <code>\/var\/log\/auth.log<\/code> \u0111\u1ec3 t\u00ecm th\u1eddi \u0111i\u1ec3m c\u00f3 ai \u0111\u00f3 \u0111\u0103ng nh\u1eadp l\u00fac 2 gi\u1edd s\u00e1ng, b\u1ea1n s\u1ebd ph\u1ea3i c\u1ed9ng th\u00eam 7 ti\u1ebfng trong \u0111\u1ea7u m\u1ed7i l\u1ea7n. Hostname c\u00f3 \u00edch h\u01a1n khi b\u1ea1n qu\u1ea3n l\u00fd nhi\u1ec1u VPS \u2014 d\u1ea5u nh\u1eafc l\u1ec7nh s\u1ebd hi\u1ec3n th\u1ecb t\u00ean m\u00e1y, tr\u00e1nh nh\u1ea7m l\u1eabn gi\u1eefa c\u00e1c server.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kiem-tra-va-cau-hinh-swap-memory\"><\/span>Ki\u1ec3m tra v\u00e0 c\u1ea5u h\u00ecnh swap memory<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Nhi\u1ec1u VPS m\u1edbi kh\u00f4ng c\u00f3 swap \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh s\u1eb5n. Ki\u1ec3m tra ngay:<\/p>\n<p><code>free -h<\/code><\/p>\n<p>N\u1ebfu d\u00f2ng &#8220;Swap&#8221; hi\u1ec3n th\u1ecb <code>0B \/ 0B \/ 0B<\/code> l\u00e0 ch\u01b0a c\u00f3 swap. V\u1edbi VPS RAM 1\u20132GB, thi\u1ebfu swap c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn OOM killer (Out-Of-Memory killer) t\u1ef1 \u00fd kill process khi RAM h\u1ebft \u2014 bao g\u1ed3m c\u1ea3 MySQL hay web server c\u1ee7a b\u1ea1n. Swap kh\u00f4ng thay th\u1ebf \u0111\u01b0\u1ee3c RAM th\u1ef1c (t\u1ed1c \u0111\u1ed9 ch\u1eadm h\u01a1n nhi\u1ec1u), nh\u01b0ng l\u00e0 safety net quan tr\u1ecdng.<\/p>\n<p>T\u1ea1o swap file 1GB:<\/p>\n<p><code>fallocate -l 1G \/swapfile<\/code> \u2014 t\u1ea1o file 1GB<\/p>\n<p><code>chmod 600 \/swapfile<\/code> \u2014 ch\u1ec9 root \u0111\u01b0\u1ee3c \u0111\u1ecdc\/ghi<\/p>\n<p><code>mkswap \/swapfile<\/code> \u2014 format file th\u00e0nh swap<\/p>\n<p><code>swapon \/swapfile<\/code> \u2014 k\u00edch ho\u1ea1t swap<\/p>\n<p>\u0110\u1ec3 swap t\u1ef1 b\u1eadt sau reboot, th\u00eam v\u00e0o <code>\/etc\/fstab<\/code>:<\/p>\n<p><code>echo '\/swapfile none swap sw 0 0' | tee -a \/etc\/fstab<\/code><\/p>\n<p>V\u1edbi VPS c\u00f3 RAM 4GB tr\u1edf l\u00ean v\u00e0 workload kh\u00f4ng c\u00f3 spike b\u1ea5t th\u01b0\u1eddng, swap \u00edt c\u1ea7n thi\u1ebft h\u01a1n. Nh\u01b0ng v\u1edbi RAM th\u1ea5p \u2014 c\u00e0i th\u00eam, kh\u00f4ng c\u00f3 h\u1ea1i g\u00ec.<\/p>\n<p><!-- H2 #4 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cai-dat-web-server-va-trien-khai-ung-dung-tren-VPS\"><\/span>C\u00e0i \u0111\u1eb7t web server v\u00e0 tri\u1ec3n khai \u1ee9ng d\u1ee5ng tr\u00ean VPS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0110\u1ebfn \u0111\u00e2y b\u1ea1n \u0111\u00e3 c\u00f3 m\u1ed9t VPS s\u1ea1ch, \u0111\u01b0\u1ee3c update, c\u00f3 user th\u01b0\u1eddng v\u1edbi sudo, v\u00e0 timezone \u0111\u00fang. B\u00e2y gi\u1edd m\u1edbi \u0111\u1ebfn l\u00fac c\u00e0i ph\u1ea7n m\u1ec1m cho use case c\u1ee5 th\u1ec3 c\u1ee7a b\u1ea1n.<\/p>\n<p>B\u00e0i n\u00e0y kh\u00f4ng c\u1ed1 g\u1eafng cover m\u1ecdi stack \u2014 c\u00f3 qu\u00e1 nhi\u1ec1u l\u1ef1a ch\u1ecdn v\u00e0 m\u1ed7i l\u1ef1a ch\u1ecdn x\u1ee9ng \u0111\u00e1ng c\u00f3 b\u00e0i ri\u00eang. Ph\u1ea7n n\u00e0y t\u1eadp trung 2 tr\u01b0\u1eddng h\u1ee3p ph\u1ed5 bi\u1ebfn nh\u1ea5t: <strong>LEMP stack<\/strong> (Nginx + PHP + MySQL) cho WordPress, Laravel, ho\u1eb7c PHP app; v\u00e0 <strong>Node.js<\/strong> cho JavaScript app. C\u1ea3 hai c\u00f9ng t\u1ed3n t\u1ea1i \u0111\u01b0\u1ee3c tr\u00ean c\u00f9ng m\u1ed9t VPS n\u1ebfu b\u1ea1n c\u1ea7n.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nginx-hay-Apache-%E2%80%94-nen-chon-cai-nao-cho-VPS\"><\/span>Nginx hay Apache \u2014 n\u00ean ch\u1ecdn c\u00e1i n\u00e0o cho VPS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>VPS m\u1edbi \u2192 ch\u1ecdn Nginx. \u0110\u00e2y l\u00e0 khuy\u1ebfn ngh\u1ecb th\u1eb3ng th\u1eafn, kh\u00f4ng ph\u1ea3i &#8220;t\u00f9y nhu c\u1ea7u&#8221;.<\/p>\n<table>\n<thead>\n<tr>\n<th>Ti\u00eau ch\u00ed<\/th>\n<th>Nginx<\/th>\n<th>Apache<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Hi\u1ec7u n\u0103ng concurrent<\/td>\n<td>Event-driven, x\u1eed l\u00fd ngh\u00ecn request\/gi\u00e2y v\u1edbi RAM th\u1ea5p<\/td>\n<td>Process\/thread-based, t\u1ed1n RAM h\u01a1n khi nhi\u1ec1u connection<\/td>\n<\/tr>\n<tr>\n<td>Config syntax<\/td>\n<td>Server blocks \u2014 r\u00f5 r\u00e0ng, \u00edt l\u1ed7i \u00e2m th\u1ea7m<\/td>\n<td>.htaccess linh ho\u1ea1t h\u01a1n nh\u01b0ng override runtime g\u00e2y ch\u1eadm<\/td>\n<\/tr>\n<tr>\n<td>PHP handling<\/td>\n<td>Qua PHP-FPM \u2014 c\u1ea5u h\u00ecnh th\u00eam nh\u01b0ng hi\u1ec7u n\u0103ng t\u1ed1t h\u01a1n<\/td>\n<td>mod_php t\u00edch h\u1ee3p \u2014 d\u1ec5 c\u1ea5u h\u00ecnh, \u00edt linh ho\u1ea1t h\u01a1n<\/td>\n<\/tr>\n<tr>\n<td>Static files<\/td>\n<td>R\u1ea5t nhanh \u2014 x\u1eed l\u00fd tr\u1ef1c ti\u1ebfp kh\u00f4ng qua PHP<\/td>\n<td>Ch\u1eadm h\u01a1n m\u1ed9t ch\u00fat do overhead .htaccess<\/td>\n<\/tr>\n<tr>\n<td>Ph\u00f9 h\u1ee3p v\u1edbi ai<\/td>\n<td>VPS m\u1edbi, high traffic, reverse proxy, microservices<\/td>\n<td>Migrate t\u1eeb Shared Hosting, WordPress c\u0169 d\u00f9ng .htaccess nhi\u1ec1u<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Apache v\u1eabn c\u00f3 ch\u1ed7 \u0111\u1ee9ng \u2014 \u0111\u1eb7c bi\u1ec7t khi b\u1ea1n migrate site c\u0169 t\u1eeb Shared Hosting l\u00ean VPS v\u00e0 site \u0111\u00f3 d\u00f9ng nhi\u1ec1u directive trong <code>.htaccess<\/code>. Nh\u01b0ng v\u1edbi setup m\u1edbi t\u1eeb \u0111\u1ea7u, Nginx cho t\u00e0i nguy\u00ean t\u1ed1t h\u01a1n tr\u00ean c\u00f9ng c\u1ea5u h\u00ecnh ph\u1ea7n c\u1ee9ng.<\/p>\n<figure id=\"attachment_40221\" aria-describedby=\"caption-attachment-40221\" style=\"width: 800px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40221\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Nginx-vs-Apache.webp\" alt=\"Nginx vs Apache\" width=\"800\" height=\"537\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Nginx-vs-Apache.webp 800w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Nginx-vs-Apache-300x201.webp 300w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Nginx-vs-Apache-768x516.webp 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><figcaption id=\"caption-attachment-40221\" class=\"wp-caption-text\">Nginx vs Apache<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"Cai-Nginx-tren-VPS-Ubuntu-%E2%80%94-tung-buoc\"><\/span>C\u00e0i Nginx tr\u00ean VPS Ubuntu \u2014 t\u1eebng b\u01b0\u1edbc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>C\u00e0i Nginx:<\/strong><\/p>\n<p><code>apt install nginx -y<\/code><\/p>\n<p><strong>Kh\u1edfi \u0111\u1ed9ng Nginx v\u00e0 enable auto-start:<\/strong><\/p>\n<p><code>systemctl start nginx<\/code><code><\/code><code><\/code><\/p>\n<p><code>systemctl enable nginx<\/code><\/p>\n<p><strong>Ki\u1ec3m tra Nginx \u0111ang ch\u1ea1y:<\/strong><\/p>\n<p><code>systemctl status nginx<\/code><\/p>\n<p>Output c\u1ea7n th\u1ea5y d\u00f2ng <code>Active: active (running)<\/code>. N\u1ebfu th\u1ea5y <code>failed<\/code>, xem log l\u1ed7i: <code>journalctl -xe<\/code><\/p>\n<figure id=\"attachment_40228\" aria-describedby=\"caption-attachment-40228\" style=\"width: 1080px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40228\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Kich-hoat-Nginx-thanh-cong.png\" alt=\"K\u00edch ho\u1ea1t Nginx th\u00e0nh c\u00f4ng\" width=\"1080\" height=\"384\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Kich-hoat-Nginx-thanh-cong.png 1080w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Kich-hoat-Nginx-thanh-cong-300x107.png 300w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Kich-hoat-Nginx-thanh-cong-1024x364.png 1024w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Kich-hoat-Nginx-thanh-cong-768x273.png 768w\" sizes=\"auto, (max-width: 1080px) 100vw, 1080px\" \/><figcaption id=\"caption-attachment-40228\" class=\"wp-caption-text\">K\u00edch ho\u1ea1t Nginx th\u00e0nh c\u00f4ng<\/figcaption><\/figure>\n<p><strong>Test qua browser:<\/strong> M\u1edf tr\u00ecnh duy\u1ec7t, nh\u1eadp IP VPS. N\u1ebfu th\u1ea5y trang &#8220;Welcome to nginx!&#8221; l\u00e0 Nginx \u0111ang ch\u1ea1y tr\u00ean port 80. N\u1ebfu kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c, ki\u1ec3m tra firewall \u2014 port 80 ph\u1ea3i \u0111\u01b0\u1ee3c allow (xem ph\u1ea7n B\u1ea3o m\u1eadt b\u00ean d\u01b0\u1edbi).<\/p>\n<p><strong>C\u1ea5u h\u00ecnh server block c\u01a1 b\u1ea3n:<\/strong> File c\u1ea5u h\u00ecnh m\u1eb7c \u0111\u1ecbnh t\u1ea1i <code>\/etc\/nginx\/sites-available\/default<\/code>. \u0110\u1ec3 host m\u1ed9t domain, t\u1ea1o file ri\u00eang trong th\u01b0 m\u1ee5c n\u00e0y v\u1edbi t\u00ean domain c\u1ee7a b\u1ea1n, r\u1ed3i t\u1ea1o symlink sang <code>sites-enabled<\/code>. H\u01b0\u1edbng d\u1eabn \u0111\u1ea7y \u0111\u1ee7 \u0111\u1ec3 setup LEMP stack ho\u00e0n ch\u1ec9nh bao g\u1ed3m PHP v\u00e0 MySQL, xem t\u1ea1i <a href=\"https:\/\/interdata.vn\/blog\/cai-dat-nginx-php-mysql-tren-ubuntu-vps\/\" target=\"_blank\" rel=\"noopener\">c\u00e0i Nginx + PHP + MySQL tr\u00ean Ubuntu VPS<\/a>.<\/p>\n<p>N\u1ebfu mu\u1ed1n deploy \u1ee9ng d\u1ee5ng Node.js thay v\u00ec PHP, quy tr\u00ecnh kh\u00e1c nhau m\u1ed9t ch\u00fat \u2014 Nginx \u0111\u00f3ng vai tr\u00f2 reverse proxy tr\u01b0\u1edbc app Node.js. Xem <a href=\"#\">h\u01b0\u1edbng d\u1eabn deploy Node.js tr\u00ean VPS<\/a> \u0111\u1ec3 \u0111i t\u1eebng b\u01b0\u1edbc.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tai-sao-VPS-NVMe-nhanh-hon-VPS-SSD-thuong\"><\/span>T\u1ea1i sao VPS NVMe nhanh h\u01a1n VPS SSD th\u01b0\u1eddng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>NVMe (Non-Volatile Memory Express) d\u00f9ng giao th\u1ee9c PCIe thay v\u00ec SATA truy\u1ec1n th\u1ed1ng. S\u1ef1 kh\u00e1c bi\u1ec7t kh\u00f4ng ch\u1ec9 l\u00e0 t\u1ed1c \u0111\u1ed9 \u0111\u1ecdc\/ghi tu\u1ea7n t\u1ef1 \u2014 m\u00e0 quan tr\u1ecdng h\u01a1n l\u00e0 IOPS (Input\/Output Operations Per Second) v\u00e0 \u0111\u1ed9 tr\u1ec5 (latency).<\/p>\n<p>Theo th\u00f4ng s\u1ed1 t\u1eeb NVMe Express Consortium, \u1ed5 NVMe U.2 Gen 4 c\u00f3 th\u1ec3 \u0111\u1ea1t 300.000\u20131.000.000 IOPS, trong khi SATA SSD th\u01b0\u1eddng ch\u1ec9 \u0111\u1ea1t 80.000\u2013100.000 IOPS. \u0110\u1ed9 tr\u1ec5 NVMe d\u01b0\u1edbi 0.1ms, SATA SSD kho\u1ea3ng 0.1\u20131ms.<\/p>\n<p>Tr\u00ean th\u1ef1c t\u1ebf th\u00ec sao? V\u1edbi m\u1ed9t shop WooCommerce c\u00f3 500 concurrent users \u0111ang checkout c\u00f9ng l\u00fac \u2014 m\u1ed7i checkout l\u00e0 h\u00e0ng ch\u1ee5c MySQL query. Tr\u00ean VPS SATA SSD, I\/O wait t\u0103ng cao, query time k\u00e9o d\u00e0i 200\u2013400ms. Tr\u00ean VPS NVMe, c\u00f9ng workload \u0111\u00f3 query time xu\u1ed1ng c\u00f2n 30\u201360ms. Ng\u01b0\u1eddi d\u00f9ng th\u1ea5y trang checkout load nhanh h\u01a1n r\u00f5 r\u1ec7t.<\/p>\n<p>V\u1edbi blog c\u00e1 nh\u00e2n 100 l\u01b0\u1ee3t truy c\u1eadp\/ng\u00e0y? Kh\u00f4ng th\u1ea5y kh\u00e1c bi\u1ec7t \u0111\u00e1ng k\u1ec3 \u2014 bottleneck l\u00fac \u0111\u00f3 l\u00e0 network ho\u1eb7c PHP processing, kh\u00f4ng ph\u1ea3i disk I\/O.<\/p>\n<p><!-- CTA BOX #1 - M\u1eabu 1 xanh gradient --><\/p>\n<div style=\"background: linear-gradient(135deg, #1a3c6e 0%, #0f6cbf 100%); border-radius: 12px; padding: 28px 32px; margin: 40px 0; max-width: 100%; box-shadow: 0 4px 20px rgba(15,108,191,0.25);\">\n<div style=\"display: inline-block; background: rgba(255,255,255,0.15); border: 1px solid rgba(255,255,255,0.3); border-radius: 20px; padding: 4px 14px; margin-bottom: 16px;\"><span style=\"color: #ffffff; font-size: 12px; font-weight: 600; letter-spacing: 0.5px; text-transform: uppercase;\">InterData<\/span><\/div>\n<h3 style=\"color: #ffffff; font-size: 22px; font-weight: bold; margin: 0 0 8px 0; line-height: 1.3;\"><span class=\"ez-toc-section\" id=\"Thue-VPS-NVMe-U2-Gia-Re-%E2%80%94-InterData\"><\/span>Thu\u00ea VPS NVMe U.2 Gi\u00e1 R\u1ebb \u2014 InterData<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p style=\"color: rgba(255,255,255,0.85); font-size: 15px; margin: 0 0 20px 0; line-height: 1.6;\">CPU \u0111\u1eddi m\u1edbi, \u1ed5 NVMe U.2 Gen 4, \u1ea3o h\u00f3a KVM, full root access, k\u00edch ho\u1ea1t t\u1ef1 \u0111\u1ed9ng ngay sau khi thanh to\u00e1n<\/p>\n<ul style=\"list-style: none; padding: 0; margin: 0 0 24px 0;\">\n<li style=\"color: rgba(255,255,255,0.9); font-size: 14px; padding: 5px 0; display: flex; align-items: flex-start;\"><span style=\"color: #4fc3f7; font-size: 16px; margin-right: 8px; flex-shrink: 0;\">\u2713<\/span>NVMe U.2 Gen 4 \u2014 IOPS cao g\u1ea5p 3\u201310 l\u1ea7n SSD SATA th\u00f4ng th\u01b0\u1eddng<\/li>\n<li style=\"color: rgba(255,255,255,0.9); font-size: 14px; padding: 5px 0; display: flex; align-items: flex-start;\"><span style=\"color: #4fc3f7; font-size: 16px; margin-right: 8px; flex-shrink: 0;\">\u2713<\/span>KVM virtualization \u2014 t\u00e0i nguy\u00ean c\u00e1ch ly ho\u00e0n to\u00e0n, kh\u00f4ng chia s\u1ebb v\u1edbi VPS kh\u00e1c tr\u00ean c\u00f9ng node<\/li>\n<li style=\"color: rgba(255,255,255,0.9); font-size: 14px; padding: 5px 0; display: flex; align-items: flex-start;\"><span style=\"color: #4fc3f7; font-size: 16px; margin-right: 8px; flex-shrink: 0;\">\u2713<\/span>Full root access, t\u1ef1 ch\u1ecdn OS \u2014 Ubuntu, CentOS, Debian, AlmaLinux<\/li>\n<\/ul>\n<p><a style=\"display: inline-block; background: #ffffff; color: #1a3c6e; font-size: 15px; font-weight: bold; text-decoration: none; padding: 12px 28px; border-radius: 8px;\" href=\"https:\/\/interdata.vn\/thue-vps\/\">Xem g\u00f3i VPS NVMe \u2192<\/a><\/p>\n<\/div>\n<p><!-- H2 #5 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Bao-mat-VPS-%E2%80%94-Nhung-viec-bat-buoc-phai-lam\"><\/span>B\u1ea3o m\u1eadt VPS \u2014 Nh\u1eefng vi\u1ec7c b\u1eaft bu\u1ed9c ph\u1ea3i l\u00e0m<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0110\u00e2y l\u00e0 ph\u1ea7n h\u1ea7u h\u1ebft b\u00e0i h\u01b0\u1edbng d\u1eabn VPS vi\u1ebft qua loa ho\u1eb7c b\u1ecf h\u1eb3n. Sai l\u1ea7m \u0111\u00f3 t\u1ed1n k\u00e9m \u2014 kh\u00f4ng ph\u1ea3i v\u1ec1 l\u00fd thuy\u1ebft, m\u00e0 theo ngh\u0129a \u0111en.<\/p>\n<p>M\u1ed9t VPS m\u1edbi expose port 22 ra internet m\u00e0 kh\u00f4ng \u0111\u1ed5i m\u1eadt kh\u1ea9u root s\u1ebd nh\u1eadn brute-force attempt \u0111\u1ea7u ti\u00ean trong v\u00f2ng v\u00e0i ch\u1ee5c ph\u00fat. Kh\u00f4ng ph\u1ea3i do b\u1ea1n b\u1ecb nh\u1eafm m\u1ee5c ti\u00eau \u2014 \u0111\u00e2y l\u00e0 automated scan ch\u1ea1y li\u00ean t\u1ee5c tr\u00ean to\u00e0n internet, d\u00f2 \u0111\u1ecba ch\u1ec9 IP v\u00e0 th\u1eed m\u1eadt kh\u1ea9u ph\u1ed5 bi\u1ebfn. Port 3306 (MySQL) \u0111\u1ec3 m\u1edf public l\u00e0 l\u1eddi m\u1eddi g\u1ecdi \u0111\u1ec3 attacker dump ho\u1eb7c ransom database. Nh\u1eefng t\u00ecnh hu\u1ed1ng n\u00e0y InterData g\u1eb7p th\u01b0\u1eddng xuy\u00ean trong ticket h\u1ed7 tr\u1ee3 c\u1ee7a kh\u00e1ch h\u00e0ng m\u1edbi.<\/p>\n<p>Kh\u00f4ng c\u1ea7n l\u00e0m m\u1ecdi th\u1ee9 trong m\u1ed9t l\u1ea7n \u2014 nh\u01b0ng 4 b\u01b0\u1edbc d\u01b0\u1edbi \u0111\u00e2y l\u00e0 t\u1ed1i thi\u1ec3u kh\u00f4ng th\u1ec3 b\u1ecf qua.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cau-hinh-firewall-co-ban-voi-UFW\"><\/span>C\u1ea5u h\u00ecnh firewall c\u01a1 b\u1ea3n v\u1edbi UFW<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW (Uncomplicated Firewall) l\u00e0 frontend \u0111\u01a1n gi\u1ea3n h\u00f3a cho iptables, \u0111\u01b0\u1ee3c c\u00e0i s\u1eb5n tr\u00ean Ubuntu. C\u00fa ph\u00e1p \u0111\u1ecdc \u0111\u01b0\u1ee3c b\u1eb1ng ti\u1ebfng Anh th\u01b0\u1eddng \u2014 d\u1ec5 c\u1ea5u h\u00ecnh v\u00e0 \u00edt r\u1ee7i ro nh\u1ea7m l\u1eabn h\u01a1n iptables raw.<\/p>\n<p><strong>C\u00e0i UFW (n\u1ebfu ch\u01b0a c\u00f3):<\/strong><\/p>\n<p><code>apt install ufw -y<\/code><\/p>\n<p><strong>\u0110\u1eb7t default policy \u2014 ch\u1eb7n t\u1ea5t c\u1ea3 traffic v\u00e0o, cho ph\u00e9p t\u1ea5t c\u1ea3 traffic ra:<\/strong><\/p>\n<p><code>ufw default deny incoming<\/code><\/p>\n<p><code>ufw default allow outgoing<\/code><\/p>\n<div class=\"note-box\">\n<p><strong>\u26a0\ufe0f QUAN TR\u1eccNG \u2014 Allow SSH TR\u01af\u1edaC KHI enable UFW:<\/strong><\/p>\n<p><code>ufw allow ssh<\/code> (ho\u1eb7c <code>ufw allow 22\/tcp<\/code> n\u1ebfu mu\u1ed1n t\u01b0\u1eddng minh h\u01a1n)<\/p>\n<p><strong>N\u1ebfu b\u1ecf qua b\u01b0\u1edbc n\u00e0y v\u00e0 b\u1eadt UFW ngay, b\u1ea1n s\u1ebd b\u1ecb lockout kh\u1ecfi VPS ngay l\u1eadp t\u1ee9c.<\/strong> Sau \u0111\u00f3 ch\u1ec9 c\u00f3 th\u1ec3 v\u00e0o l\u1ea1i qua VNC console c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/p>\n<p><strong>Allow c\u00e1c port c\u1ea7n thi\u1ebft:<\/strong><\/p>\n<p><code>ufw allow 80\/tcp<\/code> \u2014 HTTP<br \/>\n<code>ufw allow 443\/tcp<\/code> \u2014 HTTPS<\/p>\n<p>Ch\u1ec9 allow nh\u1eefng port b\u1ea1n th\u1ef1c s\u1ef1 c\u1ea7n. Database (3306, 5432), Redis (6379), Memcached (11211) \u2014 kh\u00f4ng bao gi\u1edd allow public.<\/p>\n<p><strong>B\u1eadt UFW:<\/strong><\/p>\n<p><code>ufw enable<\/code><\/p>\n<p>Ki\u1ec3m tra rules hi\u1ec7n t\u1ea1i: <code>ufw status verbose<\/code><\/p>\n<\/div>\n<figure id=\"attachment_40223\" aria-describedby=\"caption-attachment-40223\" style=\"width: 654px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40223\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bat-UFW.png\" alt=\"B\u1eadt UFW\" width=\"654\" height=\"315\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bat-UFW.png 654w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bat-UFW-300x144.png 300w\" sizes=\"auto, (max-width: 654px) 100vw, 654px\" \/><figcaption id=\"caption-attachment-40223\" class=\"wp-caption-text\">B\u1eadt UFW th\u00e0nh c\u00f4ng<\/figcaption><\/figure>\n<p>N\u1ebfu b\u1ea1n c\u1ea7n c\u1ea5u h\u00ecnh chi ti\u1ebft h\u01a1n v\u1edbi iptables (rule ph\u1ee9c t\u1ea1p, rate limiting, logging), xem <a href=\"https:\/\/interdata.vn\/blog\/huong-dan-cau-hinh-iptables-cho-vps\/\" target=\"_blank\" rel=\"noopener\">h\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh iptables cho VPS<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Doi-port-SSH-mac-dinh-tu-22-sang-port-khac\"><\/span>\u0110\u1ed5i port SSH m\u1eb7c \u0111\u1ecbnh t\u1eeb 22 sang port kh\u00e1c<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Port 22 l\u00e0 port SSH m\u1eb7c \u0111\u1ecbnh. Theo d\u1eef li\u1ec7u t\u1eeb Shodan, h\u01a1n 70% brute-force SSH attack nh\u1eafm v\u00e0o port 22 m\u1eb7c \u0111\u1ecbnh \u2014 v\u00ec bot ch\u1ec9 scan port m\u1eb7c \u0111\u1ecbnh \u0111\u1ec3 ti\u1ebft ki\u1ec7m th\u1eddi gian. \u0110\u1ed5i sang m\u1ed9t port b\u1ea5t k\u1ef3 trong d\u1ea3i 1024\u201365535 s\u1ebd lo\u1ea1i b\u1ecf h\u1ea7u h\u1ebft c\u00e1c automated scan \u0111\u00f3 ngay l\u1eadp t\u1ee9c.<\/p>\n<p>\u0110\u00e2y l\u00e0 &#8220;security through obscurity&#8221; \u2014 kh\u00f4ng ph\u1ea3i b\u1ea3o m\u1eadt th\u1ef1c s\u1ef1, nh\u01b0ng gi\u1ea3m \u0111\u00e1ng k\u1ec3 noise v\u00e0 gi\u00fap log s\u1ea1ch h\u01a1n \u0111\u1ec3 ph\u00e1t hi\u1ec7n threat th\u1ef1c s\u1ef1.<\/p>\n<ol>\n<li>S\u1eeda file SSH config: <code>nano \/etc\/ssh\/sshd_config<\/code><\/li>\n<li>T\u00ecm d\u00f2ng <code>#Port 22<\/code>, b\u1ecf d\u1ea5u <code>#<\/code> v\u00e0 \u0111\u1ed5i s\u1ed1 port: <code>Port 2222<\/code> (ho\u1eb7c port b\u1ea5t k\u1ef3 b\u1ea1n ch\u1ecdn) &gt; L\u01b0u l\u1ea1i b\u1eb1ng CTRL + S &gt; Tho\u00e1t ra b\u1eb1ng CTRL + X<\/li>\n<li>Allow port m\u1edbi trong UFW: <code>ufw allow 2222\/tcp<\/code><\/li>\n<li>Restart SSH: <code>systemctl restart sshd<\/code><\/li>\n<\/ol>\n<figure id=\"attachment_40224\" aria-describedby=\"caption-attachment-40224\" style=\"width: 414px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40224\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Doi-port-SSH-mac-dinh-tu-22-sang-port-khac.png\" alt=\"\u0110\u1ed5i port SSH m\u1eb7c \u0111\u1ecbnh t\u1eeb 22 sang port kh\u00e1c\" width=\"414\" height=\"124\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Doi-port-SSH-mac-dinh-tu-22-sang-port-khac.png 414w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Doi-port-SSH-mac-dinh-tu-22-sang-port-khac-300x90.png 300w\" sizes=\"auto, (max-width: 414px) 100vw, 414px\" \/><figcaption id=\"caption-attachment-40224\" class=\"wp-caption-text\">\u0110\u1ed5i port SSH m\u1eb7c \u0111\u1ecbnh t\u1eeb 22 sang port kh\u00e1c<\/figcaption><\/figure>\n<p>M\u1edf PuTTY m\u1edbi, test k\u1ebft n\u1ed1i b\u1eb1ng port m\u1edbi: <code>2222<\/code> \u2014 test tr\u01b0\u1edbc khi \u0111\u00f3ng session hi\u1ec7n t\u1ea1i<\/p>\n<figure id=\"attachment_40225\" aria-describedby=\"caption-attachment-40225\" style=\"width: 512px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40225\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Test-ket-noi-bang-port-2222.png\" alt=\"Test k\u1ebft n\u1ed1i b\u1eb1ng port 2222\" width=\"512\" height=\"481\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Test-ket-noi-bang-port-2222.png 512w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Test-ket-noi-bang-port-2222-300x282.png 300w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><figcaption id=\"caption-attachment-40225\" class=\"wp-caption-text\">Test k\u1ebft n\u1ed1i b\u1eb1ng port 2222<\/figcaption><\/figure>\n<p>Sau khi test th\u00e0nh c\u00f4ng, c\u00f3 th\u1ec3 x\u00f3a rule allow port 22 c\u0169: <code>ufw delete allow ssh<\/code>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cach-xem-va-chan-IP-tan-cong-VPS\"><\/span>C\u00e1ch xem v\u00e0 ch\u1eb7n IP t\u1ea5n c\u00f4ng VPS<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Xem c\u00e1c l\u1ea7n \u0111\u0103ng nh\u1eadp th\u1ea5t b\u1ea1i g\u1ea7n \u0111\u00e2y:<\/p>\n<p><code>grep \"Failed password\" \/var\/log\/auth.log | tail -20<\/code><\/p>\n<p>Output s\u1ebd th\u1ea5y c\u00e1c d\u00f2ng nh\u01b0 <code>Failed password for root from 45.xxx.xxx.xxx port 54321<\/code>.<\/p>\n<figure id=\"attachment_40226\" aria-describedby=\"caption-attachment-40226\" style=\"width: 984px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40226\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Xem-cac-lan-dang-nhap-VPS-that-bai.png\" alt=\"Xem c\u00e1c l\u1ea7n \u0111\u0103ng nh\u1eadp VPS th\u1ea5t b\u1ea1i\" width=\"984\" height=\"371\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Xem-cac-lan-dang-nhap-VPS-that-bai.png 984w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Xem-cac-lan-dang-nhap-VPS-that-bai-300x113.png 300w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Xem-cac-lan-dang-nhap-VPS-that-bai-768x290.png 768w\" sizes=\"auto, (max-width: 984px) 100vw, 984px\" \/><figcaption id=\"caption-attachment-40226\" class=\"wp-caption-text\">Xem c\u00e1c l\u1ea7n \u0111\u0103ng nh\u1eadp VPS th\u1ea5t b\u1ea1i<\/figcaption><\/figure>\n<p>N\u1ebfu m\u1ed9t IP xu\u1ea5t hi\u1ec7n li\u00ean t\u1ee5c, block th\u1ee7 c\u00f4ng:<\/p>\n<p><code>ufw deny from 45.xxx.xxx.xxx to any<\/code><\/p>\n<p>Nh\u01b0ng l\u00e0m th\u1ee7 c\u00f4ng ch\u1ec9 l\u00e0 gi\u1ea3i ph\u00e1p t\u1ea1m th\u1eddi \u2014 IP thay \u0111\u1ed5i li\u00ean t\u1ee5c. Fail2ban t\u1ef1 \u0111\u1ed9ng \u0111\u1ecdc log, ph\u00e1t hi\u1ec7n pattern brute-force, v\u00e0 block IP \u0111\u1ed9ng. \u0110\u00e2y l\u00e0 c\u00f4ng c\u1ee5 quan tr\u1ecdng th\u1ee9 hai sau firewall, v\u00e0 vi\u1ec7c c\u00e0i \u0111\u1eb7t n\u00f3 kh\u00f4ng ph\u1ee9c t\u1ea1p. H\u01b0\u1edbng d\u1eabn chi ti\u1ebft t\u1ea1i <a href=\"https:\/\/interdata.vn\/blog\/cai-dat-fail2ban-chong-brute-force-ssh\/\" target=\"_blank\" rel=\"noopener\">c\u00e0i \u0111\u1eb7t Fail2ban ch\u1ed1ng brute-force SSH<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tat-dang-nhap-root-truc-tiep-qua-SSH\"><\/span>T\u1eaft \u0111\u0103ng nh\u1eadp root tr\u1ef1c ti\u1ebfp qua SSH<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Khi \u0111\u00e3 c\u00f3 user th\u01b0\u1eddng v\u1edbi sudo (t\u1eeb b\u01b0\u1edbc \u0111\u1ed5i m\u1eadt kh\u1ea9u \u1edf tr\u00ean), kh\u00f4ng c\u1ea7n \u0111\u1ec3 root login qua SSH n\u1eefa. T\u1eaft n\u00f3 \u0111i lo\u1ea1i b\u1ecf m\u1ed9t attack surface l\u1edbn:<\/p>\n<ol>\n<li>S\u1eeda SSH config: <code>nano \/etc\/ssh\/sshd_config<\/code><\/li>\n<li>T\u00ecm d\u00f2ng <code>PermitRootLogin yes<\/code>, \u0111\u1ed5i th\u00e0nh <code>PermitRootLogin no<\/code><\/li>\n<li>Restart SSH: <code>systemctl restart sshd<\/code><\/li>\n<\/ol>\n<p><strong>Prerequisite quan tr\u1ecdng:<\/strong> Ph\u1ea3i test login b\u1eb1ng user th\u01b0\u1eddng tr\u01b0\u1edbc khi logout kh\u1ecfi session root. M\u1edf terminal m\u1edbi, ssh b\u1eb1ng user th\u01b0\u1eddng, ch\u1ea1y <code>sudo whoami<\/code> \u2014 n\u1ebfu tr\u1ea3 v\u1ec1 <code>root<\/code> l\u00e0 sudo \u0111ang ho\u1ea1t \u0111\u1ed9ng \u0111\u00fang. Sau \u0111\u00f3 m\u1edbi logout root.<\/p>\n<p>N\u1ebfu mu\u1ed1n \u0111i s\u00e2u h\u01a1n v\u1ec1 hardening SSH \u2014 disable weak ciphers, c\u1ea5u h\u00ecnh AllowUsers, fail2ban n\u00e2ng cao \u2014 xem <a href=\"#\">h\u01b0\u1edbng d\u1eabn hardening SSH tr\u00ean VPS Linux<\/a>.<\/p>\n<p><!-- CTA BOX #2 - M\u1eabu 2 border accent --><\/p>\n<div style=\"border-left: 4px solid #0f6cbf; background: #f0f7ff; border-radius: 0 8px 8px 0; padding: 20px 24px; margin: 40px 0; max-width: 100%;\">\n<div style=\"display: flex; align-items: center; margin-bottom: 12px;\"><span style=\"font-size: 22px; margin-right: 10px;\">\ud83d\udee1\ufe0f<\/span><br \/>\n<strong style=\"color: #1a3c6e; font-size: 17px;\">VPS NVMe U.2 \u2014 InterData<\/strong><\/div>\n<p style=\"color: #333; font-size: 14px; margin: 0 0 16px 0; line-height: 1.6;\">B\u1ea3o m\u1eadt b\u1eaft \u0111\u1ea7u t\u1eeb h\u1ea1 t\u1ea7ng \u2014 KVM isolation \u0111\u1ea3m b\u1ea3o VPS c\u1ee7a b\u1ea1n kh\u00f4ng b\u1ecb \u1ea3nh h\u01b0\u1edfng b\u1edfi traffic c\u1ee7a m\u00e1y kh\u00e1c tr\u00ean c\u00f9ng node. Full root access \u0111\u1ec3 b\u1ea1n c\u1ea5u h\u00ecnh firewall v\u00e0 security policy theo \u00fd m\u00ecnh.<\/p>\n<p style=\"color: #555; font-size: 13px; margin: 0 0 18px 0;\"><strong style=\"color: #0f6cbf;\">\u2713<\/strong> KVM \u2014 t\u00e0i nguy\u00ean c\u00e1ch ly ho\u00e0n to\u00e0n \u00a0|<br \/>\n<strong style=\"color: #0f6cbf;\">\u2713<\/strong> Deploy d\u01b0\u1edbi 2 ph\u00fat \u00a0|<br \/>\n<strong style=\"color: #0f6cbf;\">\u2713<\/strong> H\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt 24\/7<\/p>\n<p><a style=\"display: inline-block; background: #0f6cbf; color: #fff; font-size: 14px; font-weight: 600; text-decoration: none; padding: 10px 22px; border-radius: 6px;\" href=\"https:\/\/interdata.vn\/thue-vps\/#pricing\">Xem c\u1ea5u h\u00ecnh VPS \u2192<\/a><\/p>\n<\/div>\n<p><!-- H2 #6 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Giam-sat-hieu-nang-va-tai-nguyen-VPS\"><\/span>Gi\u00e1m s\u00e1t hi\u1ec7u n\u0103ng v\u00e0 t\u00e0i nguy\u00ean VPS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>VPS kh\u00f4ng c\u1ea7n gi\u00e1m s\u00e1t 24\/7 t\u1eeb ng\u01b0\u1eddi \u2014 nh\u01b0ng c\u1ea7n c\u00f3 \u0111\u1ee7 d\u1eef li\u1ec7u \u0111\u1ec3 b\u1ea1n bi\u1ebft khi n\u00e0o c\u1ea7n can thi\u1ec7p. Ph\u1ea7n n\u00e0y chia th\u00e0nh 2 nh\u00f3m: gi\u00e1m s\u00e1t th\u1ee7 c\u00f4ng b\u1eb1ng CLI (\u0111\u1ee7 \u0111\u1ec3 b\u1eaft \u0111\u1ea7u v\u00e0 x\u1eed l\u00fd s\u1ef1 c\u1ed1 t\u1ee9c th\u00ec) v\u00e0 gi\u00e1m s\u00e1t t\u1ef1 \u0111\u1ed9ng (c\u1ea7n setup m\u1ed9t l\u1ea7n, sau \u0111\u00f3 ch\u1ea1y n\u1ec1n v\u00e0 c\u1ea3nh b\u00e1o khi c\u00f3 v\u1ea5n \u0111\u1ec1).<\/p>\n<p>Nh\u00e0 cung c\u1ea5p hosting th\u01b0\u1eddng nh\u1eadn \u0111\u01b0\u1ee3c ticket &#8220;VPS ch\u1ea1y ch\u1eadm&#8221; m\u00e0 kh\u00f4ng k\u00e8m theo b\u1ea5t k\u1ef3 th\u00f4ng tin n\u00e0o v\u1ec1 t\u00e0i nguy\u00ean \u2014 kh\u00f4ng bi\u1ebft CPU bao nhi\u00eau %, RAM c\u00f2n bao nhi\u00eau, disk c\u00f2n bao nhi\u00eau. Nh\u1eefng l\u1ec7nh d\u01b0\u1edbi \u0111\u00e2y tr\u1ea3 l\u1eddi \u0111\u1ee7 3 c\u00e2u h\u1ecfi \u0111\u00f3 trong v\u00f2ng 30 gi\u00e2y.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kiem-tra-CPU-RAM-va-disk-dang-dung-bao-nhieu\"><\/span>Ki\u1ec3m tra CPU, RAM v\u00e0 disk \u0111ang d\u00f9ng bao nhi\u00eau?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong><code>htop<\/code><\/strong> \u2014 xem realtime CPU v\u00e0 RAM theo t\u1eebng process. C\u1ed9t <code>%CPU<\/code> v\u00e0 <code>%MEM<\/code> cho bi\u1ebft process n\u00e0o \u0111ang ng\u1ed1n t\u00e0i nguy\u00ean nh\u1ea5t. C\u00e0i n\u1ebfu ch\u01b0a c\u00f3: <code>apt install htop -y<\/code>. Ng\u01b0\u1ee1ng c\u1ea7n ch\u00fa \u00fd: CPU load average (d\u00f2ng tr\u00ean c\u00f9ng) v\u01b0\u1ee3t qu\u00e1 s\u1ed1 l\u00f5i CPU k\u00e9o d\u00e0i h\u01a1n 5 ph\u00fat li\u00ean t\u1ee5c.<\/li>\n<li><strong><code>df -h<\/code><\/strong> \u2014 xem disk usage theo t\u1eebng mount point. C\u1ed9t <code>Use%<\/code> l\u00e0 t\u1ef7 l\u1ec7 \u0111\u00e3 d\u00f9ng. Disk tr\u00ean 90% c\u1ea7n x\u1eed l\u00fd ngay \u2014 log file c\u0169, temp file, ho\u1eb7c database dump kh\u00f4ng x\u00f3a th\u01b0\u1eddng l\u00e0 th\u1ee7 ph\u1ea1m. Ch\u1ea1y <code>du -sh \/* | sort -rh | head -20<\/code> \u0111\u1ec3 t\u00ecm th\u01b0 m\u1ee5c n\u00e0o chi\u1ebfm nhi\u1ec1u nh\u1ea5t.<\/li>\n<li><strong><code>free -m<\/code><\/strong> \u2014 xem RAM v\u00e0 swap. D\u00f2ng <code>available<\/code> trong block Mem l\u00e0 RAM th\u1ef1c s\u1ef1 kh\u1ea3 d\u1ee5ng (kh\u00e1c v\u1edbi <code>free<\/code> \u2014 Linux cache nhi\u1ec1u v\u00e0o RAM, nh\u01b0ng cache \u0111\u00f3 \u0111\u01b0\u1ee3c gi\u1ea3i ph\u00f3ng khi app c\u1ea7n). N\u1ebfu <code>available<\/code> g\u1ea7n 0 v\u00e0 swap \u0111ang \u0111\u01b0\u1ee3c d\u00f9ng nhi\u1ec1u l\u00e0 d\u1ea5u hi\u1ec7u c\u1ea7n n\u00e2ng RAM ho\u1eb7c t\u1ed1i \u01b0u app.<\/li>\n<li><strong><code>iostat -x 1 5<\/code><\/strong> \u2014 xem disk I\/O. C\u1ed9t <code>%iowait<\/code> cao (tr\u00ean 30\u201340% k\u00e9o d\u00e0i) cho th\u1ea5y CPU \u0111ang ch\u1edd disk, bottleneck \u0111ang \u1edf storage. C\u00e0i: <code>apt install sysstat -y<\/code>.<\/li>\n<\/ul>\n<p>\u0110\u1ec3 kh\u00f4ng ph\u1ea3i ch\u1ea1y th\u1ee7 c\u00f4ng m\u1ed7i l\u1ea7n, Netdata l\u00e0 c\u00f4ng c\u1ee5 monitoring web-based c\u00e0i tr\u00ean VPS, t\u1ef1 thu th\u1eadp metrics m\u1ed7i gi\u00e2y v\u00e0 hi\u1ec3n th\u1ecb dashboard real-time qua browser. H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t t\u1ea1i <a href=\"#\">c\u00e0i Netdata theo d\u00f5i VPS realtime<\/a>. N\u1ebfu mu\u1ed1n script g\u1eedi c\u1ea3nh b\u00e1o t\u1ef1 \u0111\u1ed9ng qua Telegram khi t\u00e0i nguy\u00ean v\u01b0\u1ee3t ng\u01b0\u1ee1ng, xem <a href=\"https:\/\/interdata.vn\/blog\/tao-bot-giam-sat-tai-nguyen-vps\/\">script monitoring VPS t\u1ef1 \u0111\u1ed9ng<\/a>.<\/p>\n<figure id=\"attachment_40129\" aria-describedby=\"caption-attachment-40129\" style=\"width: 800px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-40129\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bot-telegram-giam-sat-tai-nguyen-VPS.jpg\" alt=\"Bot telegram gi\u00e1m s\u00e1t t\u00e0i nguy\u00ean VPS\" width=\"800\" height=\"537\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bot-telegram-giam-sat-tai-nguyen-VPS.jpg 800w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bot-telegram-giam-sat-tai-nguyen-VPS-300x201.jpg 300w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2026\/03\/Bot-telegram-giam-sat-tai-nguyen-VPS-768x516.jpg 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><figcaption id=\"caption-attachment-40129\" class=\"wp-caption-text\">Bot telegram gi\u00e1m s\u00e1t t\u00e0i nguy\u00ean VPS<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"Cach-xem-log-he-thong-khi-VPS-co-su-co\"><\/span>C\u00e1ch xem log h\u1ec7 th\u1ed1ng khi VPS c\u00f3 s\u1ef1 c\u1ed1<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>3 file log c\u1ea7n bi\u1ebft \u0111\u1ea7u ti\u00ean:<\/p>\n<ul>\n<li><strong><code>\/var\/log\/syslog<\/code><\/strong> \u2014 log s\u1ef1 ki\u1ec7n h\u1ec7 th\u1ed1ng t\u1ed5ng h\u1ee3p. Khi VPS l\u00e0m g\u00ec b\u1ea5t th\u01b0\u1eddng \u2014 crash, service b\u1ecb kill, hardware error \u2014 \u0111\u00e2y l\u00e0 ch\u1ed7 \u0111\u1ea7u ti\u00ean c\u1ea7n xem. \u0110\u1ecdc realtime: <code>tail -f \/var\/log\/syslog<\/code><\/li>\n<li><strong><code>\/var\/log\/auth.log<\/code><\/strong> \u2014 log \u0111\u0103ng nh\u1eadp. Xem ai \u0111\u00e3 SSH v\u00e0o, l\u1ea7n \u0111\u0103ng nh\u1eadp th\u1ea5t b\u1ea1i, v\u00e0 sudo commands \u0111\u00e3 ch\u1ea1y. L\u1ec7nh t\u00ecm brute-force: <code>grep \"Failed password\" \/var\/log\/auth.log | tail -50<\/code><\/li>\n<li><strong><code>\/var\/log\/nginx\/error.log<\/code><\/strong> ho\u1eb7c <code>\/var\/log\/apache2\/error.log<\/code> \u2014 log l\u1ed7i web server. Khi website tr\u1ea3 v\u1ec1 500 hay 502, xem \u1edf \u0111\u00e2y tr\u01b0\u1edbc. T\u00ecm theo th\u1eddi gian g\u1ea7n \u0111\u00e2y: <code>tail -100 \/var\/log\/nginx\/error.log<\/code><\/li>\n<\/ul>\n<p>V\u1edbi CentOS\/RHEL, log h\u1ec7 th\u1ed1ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd b\u1edfi <code>journald<\/code> thay v\u00ec file text \u2014 d\u00f9ng l\u1ec7nh <code>journalctl -xe<\/code> \u0111\u1ec3 xem, ho\u1eb7c <code>journalctl -u nginx --since \"1 hour ago\"<\/code> \u0111\u1ec3 l\u1ecdc theo service v\u00e0 th\u1eddi gian.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dau-hieu-VPS-bi-qua-tai-hoac-sap-hong\"><\/span>D\u1ea5u hi\u1ec7u VPS b\u1ecb qu\u00e1 t\u1ea3i ho\u1eb7c s\u1eafp h\u1ecfng<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Nh\u1eefng tri\u1ec7u ch\u1ee9ng n\u00e0y th\u01b0\u1eddng xu\u1ea5t hi\u1ec7n tr\u01b0\u1edbc khi VPS th\u1ef1c s\u1ef1 &#8220;ch\u1ebft&#8221; \u2014 nh\u1eadn ra s\u1edbm th\u00ec c\u00f2n k\u1ecbp x\u1eed l\u00fd:<\/p>\n<ul>\n<li><strong>Load average v\u01b0\u1ee3t s\u1ed1 l\u00f5i CPU k\u00e9o d\u00e0i<\/strong> \u2014 xem trong <code>htop<\/code> g\u00f3c tr\u00ean tr\u00e1i. VPS 2 core m\u00e0 load average 5\u20136 li\u00ean t\u1ee5c l\u00e0 \u0111ang qu\u00e1 t\u1ea3i n\u1eb7ng<\/li>\n<li><strong>Swap usage tr\u00ean 50%<\/strong> \u2014 RAM th\u1ef1c \u0111\u00e3 g\u1ea7n h\u1ebft, h\u1ec7 th\u1ed1ng \u0111ang d\u00f9ng swap (ch\u1eadm h\u01a1n RAM nhi\u1ec1u l\u1ea7n)<\/li>\n<li><strong>Disk I\/O wait cao<\/strong> \u2014 <code>%iowait<\/code> trong iostat cao li\u00ean t\u1ee5c, website load ch\u1eadm d\u00f9 CPU kh\u00f4ng cao<\/li>\n<li><strong>Website tr\u1ea3 l\u1ed7i 502 Bad Gateway ho\u1eb7c 504 Gateway Timeout<\/strong> \u2014 upstream (PHP-FPM, Node.js) kh\u00f4ng tr\u1ea3 l\u1eddi trong th\u1eddi gian quy \u0111\u1ecbnh, th\u01b0\u1eddng do app crash ho\u1eb7c database qu\u00e1 t\u1ea3i<\/li>\n<li><strong>SSH timeout khi k\u1ebft n\u1ed1i<\/strong> \u2014 n\u1ebfu c\u1ea3 SSH c\u0169ng kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c, VPS c\u00f3 th\u1ec3 \u0111ang b\u1ecb OOM killer ho\u1ea1t \u0111\u1ed9ng ho\u1eb7c kernel panic. C\u1ea7n d\u00f9ng VNC console c\u1ee7a nh\u00e0 cung c\u1ea5p \u0111\u1ec3 v\u00e0o tr\u1ef1c ti\u1ebfp<\/li>\n<li><strong>Connection drops b\u1ea5t th\u01b0\u1eddng<\/strong> \u2014 file <code>\/var\/log\/syslog<\/code> th\u1ea5y nhi\u1ec1u d\u00f2ng <code>connection reset<\/code> ho\u1eb7c <code>broken pipe<\/code><\/li>\n<\/ul>\n<p><!-- H2 #7 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Sao-luu-va-khoi-phuc-du-lieu-VPS\"><\/span>Sao l\u01b0u v\u00e0 kh\u00f4i ph\u1ee5c d\u1eef li\u1ec7u VPS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Backup l\u00e0 th\u1ee9 b\u1ea1n kh\u00f4ng ngh\u0129 \u0111\u1ebfn \u2014 cho \u0111\u1ebfn khi c\u1ea7n. \u1ed4 c\u1ee9ng h\u1ecfng, c\u1ea5u h\u00ecnh sai x\u00f3a m\u1ea5t database, VPS b\u1ecb hack v\u00e0 attacker x\u00f3a d\u1eef li\u1ec7u \u2014 nh\u1eefng t\u00ecnh hu\u1ed1ng n\u00e0y x\u1ea3y ra th\u1ef1c t\u1ebf v\u00e0 th\u01b0\u1eddng xuy\u00ean h\u01a1n ng\u01b0\u1eddi d\u00f9ng VPS m\u1edbi t\u01b0\u1edfng.<\/p>\n<p>C\u00f3 3 ph\u01b0\u01a1ng ph\u00e1p backup ch\u00ednh, m\u1ed7i c\u00e1i gi\u1ea3i quy\u1ebft t\u00ecnh hu\u1ed1ng kh\u00e1c nhau: snapshot t\u1eeb panel nh\u00e0 cung c\u1ea5p (nhanh, \u0111\u01a1n gi\u1ea3n, d\u00f9ng cho rollback sau khi thay \u0111\u1ed5i l\u1edbn), rsync sang remote server (linh ho\u1ea1t, t\u1ef1 ki\u1ec3m so\u00e1t), v\u00e0 cron job t\u1ef1 \u0111\u1ed9ng h\u00f3a (set up m\u1ed9t l\u1ea7n, ch\u1ea1y n\u1ec1n h\u00e0ng ng\u00e0y).<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Snapshot-VPS-la-gi-va-dung-khi-nao\"><\/span>Snapshot VPS l\u00e0 g\u00ec v\u00e0 d\u00f9ng khi n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>Snapshot<\/strong> l\u00e0 b\u1ea3n ch\u1ee5p \u0111\u1ea7y \u0111\u1ee7 tr\u1ea1ng th\u00e1i VPS t\u1ea1i m\u1ed9t th\u1eddi \u0111i\u1ec3m \u2014 g\u1ed3m to\u00e0n b\u1ed9 disk image, h\u1ec7 \u0111i\u1ec1u h\u00e0nh, c\u1ea5u h\u00ecnh, v\u00e0 d\u1eef li\u1ec7u. Kh\u00e1c v\u1edbi backup truy\u1ec1n th\u1ed1ng (copy t\u1eebng file), kh\u00f4i ph\u1ee5c snapshot \u0111\u01b0a VPS v\u1ec1 \u0111\u00fang tr\u1ea1ng th\u00e1i c\u0169 trong v\u00e0i ph\u00fat, kh\u00f4ng c\u1ea7n c\u00e0i l\u1ea1i t\u1eebng ph\u1ea7n m\u1ec1m.<\/p>\n<p>D\u00f9ng snapshot khi n\u00e0o? Tr\u01b0\u1edbc b\u1ea5t k\u1ef3 thay \u0111\u1ed5i l\u1edbn n\u00e0o c\u00f3 th\u1ec3 g\u00e2y h\u1ecfng h\u1ec7 th\u1ed1ng: n\u00e2ng c\u1ea5p OS major version (Ubuntu 22 \u2192 24), thay \u0111\u1ed5i c\u1ea5u h\u00ecnh Nginx quan tr\u1ecdng, c\u00e0i m\u1edbi m\u1ed9t service l\u1edbn. Snapshot nh\u01b0 \u0111i\u1ec3m save game \u2014 n\u1ebfu th\u1ee9 m\u1edbi l\u00e0m g\u00e2y v\u1ea5n \u0111\u1ec1, rollback v\u1ec1 snapshot l\u00e0 xong.<\/p>\n<p>H\u1ea1n ch\u1ebf c\u1ea7n bi\u1ebft: snapshot l\u01b0u trong h\u1ea1 t\u1ea7ng c\u1ee7a nh\u00e0 cung c\u1ea5p. N\u1ebfu datacenter g\u1eb7p s\u1ef1 c\u1ed1 nghi\u00eam tr\u1ecdng, snapshot c\u0169ng m\u1ea5t theo. \u0110\u00e2y l\u00e0 l\u00fd do c\u1ea7n k\u1ebft h\u1ee3p snapshot v\u1edbi backup ra ngo\u00e0i (rsync sang server kh\u00e1c ho\u1eb7c cloud storage).<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Backup-du-lieu-VPS-bang-rsync\"><\/span>Backup d\u1eef li\u1ec7u VPS b\u1eb1ng rsync<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>rsync l\u00e0 c\u00f4ng c\u1ee5 sync file hi\u1ec7u qu\u1ea3 \u2014 ch\u1ec9 copy ph\u1ea7n thay \u0111\u1ed5i, kh\u00f4ng copy l\u1ea1i to\u00e0n b\u1ed9 m\u1ed7i l\u1ea7n. L\u00fd t\u01b0\u1edfng cho backup incremental h\u00e0ng ng\u00e0y.<\/p>\n<p><strong>C\u00e0i rsync (th\u01b0\u1eddng \u0111\u00e3 c\u00f3 s\u1eb5n):<\/strong><\/p>\n<p><code>apt install rsync -y<\/code><\/p>\n<p><strong>L\u1ec7nh backup c\u01a1 b\u1ea3n:<\/strong><\/p>\n<p><code>rsync -avz \/var\/www\/ user@backup-server:\/backups\/www\/<\/code><\/p>\n<p>Flag <code>-a<\/code>: archive mode (gi\u1eef nguy\u00ean permission, timestamp), <code>-v<\/code>: verbose, <code>-z<\/code>: n\u00e9n khi truy\u1ec1n.<\/p>\n<p><strong>T\u1ea1o script backup \u0111\u01a1n gi\u1ea3n:<\/strong><\/p>\n<p>T\u1ea1o file <code>\/root\/backup.sh<\/code> v\u1edbi n\u1ed9i dung:<\/p>\n<pre><code>#!\/bin\/bash\r\nDATE=$(date +%Y%m%d)\r\n# Backup web files\r\nrsync -az \/var\/www\/ user@backup-server:\/backups\/www-$DATE\/\r\n# Backup MySQL databases\r\nmysqldump -u root -p[password] --all-databases | gzip &gt; \/tmp\/db-$DATE.sql.gz\r\nrsync -az \/tmp\/db-$DATE.sql.gz user@backup-server:\/backups\/db\/\r\n# X\u00f3a dump local sau khi transfer\r\nrm \/tmp\/db-$DATE.sql.gz<\/code><\/pre>\n<p>Ph\u00e2n quy\u1ec1n cho script: <code>chmod +x \/root\/backup.sh<\/code><\/p>\n<p><strong>\u0110\u1eb7t cron job ch\u1ea1y t\u1ef1 \u0111\u1ed9ng h\u00e0ng ng\u00e0y l\u00fac 2 gi\u1edd s\u00e1ng:<\/strong><\/p>\n<p><code>crontab -e<\/code><\/p>\n<p>Th\u00eam d\u00f2ng: <code>0 2 * * * \/root\/backup.sh &gt;&gt; \/var\/log\/backup.log 2&gt;&amp;1<\/code><\/p>\n<p>\u0110\u1ec3 backup sang AWS S3, Backblaze B2, ho\u1eb7c setup retention policy t\u1ef1 \u0111\u1ed9ng x\u00f3a backup c\u0169 h\u01a1n 30 ng\u00e0y, xem <a href=\"#\">h\u01b0\u1edbng d\u1eabn t\u1ef1 \u0111\u1ed9ng backup VPS v\u1edbi rsync v\u00e0 cron job<\/a>.<\/p>\n<p><!-- H2 #8 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSH-thuan-vs-Control-Panel-%E2%80%94-nen-dung-cai-nao\"><\/span>SSH thu\u1ea7n vs Control Panel \u2014 n\u00ean d\u00f9ng c\u00e1i n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSH thu\u1ea7n ph\u00f9 h\u1ee3p v\u1edbi developer v\u00e0 sysadmin. Control Panel (<a href=\"https:\/\/interdata.vn\/blog\/directadmin-la-gi\/\">DirectAdmin<\/a>, cPanel) ph\u00f9 h\u1ee3p v\u1edbi SME, freelancer, ho\u1eb7c b\u1ea5t k\u1ef3 ai kh\u00f4ng mu\u1ed1n nh\u1edb l\u1ec7nh Linux \u0111\u1ec3 qu\u1ea3n l\u00fd website h\u00e0ng ng\u00e0y. \u0110\u00e2y l\u00e0 k\u1ebft lu\u1eadn th\u1ef1c t\u1ebf, kh\u00f4ng ph\u1ea3i c\u00e2u tr\u1ea3 l\u1eddi &#8220;t\u00f9y&#8221; m\u00e0 thi\u1ebfu h\u1eefu \u00edch.<\/p>\n<p>Theo quan s\u00e1t c\u1ee7a InterData t\u1eeb base kh\u00e1ch h\u00e0ng VPS, kho\u1ea3ng 60\u201365% kh\u00e1ch h\u00e0ng technical (developer, sysadmin) d\u00f9ng SSH thu\u1ea7n. 35\u201340% c\u00f2n l\u1ea1i \u2014 ch\u1ee7 y\u1ebfu l\u00e0 SME hosting nhi\u1ec1u website ho\u1eb7c reseller \u2014 d\u00f9ng Control Panel. C\u1ea3 hai \u0111\u1ec1u ho\u1ea1t \u0111\u1ed9ng t\u1ed1t, ch\u1ec9 l\u00e0 phong c\u00e1ch qu\u1ea3n l\u00fd kh\u00e1c nhau.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Khi-nao-nen-dung-Control-Panel-thay-vi-SSH\"><\/span>Khi n\u00e0o n\u00ean d\u00f9ng Control Panel thay v\u00ec SSH?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Control Panel kh\u00f4ng &#8220;an to\u00e0n h\u01a1n&#8221; hay &#8220;m\u1ea1nh h\u01a1n&#8221; SSH \u2014 ch\u1ec9 l\u00e0 giao di\u1ec7n kh\u00e1c. V\u1eabn c\u1ea7n l\u00e0m \u0111\u1ee7 c\u00e1c b\u01b0\u1edbc b\u1ea3o m\u1eadt OS b\u00ean d\u01b0\u1edbi (update, firewall, \u0111\u1ed5i password) d\u00f9 d\u00f9ng Control Panel. Nh\u1eefng tr\u01b0\u1eddng h\u1ee3p Control Panel th\u1ef1c s\u1ef1 h\u1eefu \u00edch:<\/p>\n<ul>\n<li><strong>Qu\u1ea3n l\u00fd nhi\u1ec1u website tr\u00ean c\u00f9ng m\u1ed9t VPS<\/strong> \u2014 t\u1ea1o virtual host, domain addon, <a href=\"https:\/\/interdata.vn\/blog\/subdomain-la-gi\/\">subdomain<\/a> qua GUI nhanh h\u01a1n nhi\u1ec1u so v\u1edbi s\u1eeda file config tay<\/li>\n<li><strong>Team kh\u00f4ng c\u00f3 background Linux<\/strong> \u2014 nh\u00e2n vi\u00ean n\u1ed9i dung, designer c\u1ea7n upload file hay restart service m\u00e0 kh\u00f4ng c\u1ea7n h\u1ecdc command line<\/li>\n<li><strong>T\u1ea1o hosting account cho kh\u00e1ch<\/strong> \u2014 n\u1ebfu b\u1ea1n l\u00e0 reseller ho\u1eb7c agency c\u1ea7n cung c\u1ea5p hosting cho kh\u00e1ch h\u00e0ng, Control Panel l\u00e0 b\u1eaft bu\u1ed9c<\/li>\n<li><strong>Qu\u1ea3n l\u00fd email server<\/strong> \u2014 c\u1ea5u h\u00ecnh mailbox, DKIM, SPF qua giao di\u1ec7n \u0111\u01a1n gi\u1ea3n h\u01a1n nhi\u1ec1u so v\u1edbi Postfix config th\u1ee7 c\u00f4ng<\/li>\n<li><strong>Backup v\u00e0 restore website nhanh<\/strong> \u2014 DirectAdmin v\u00e0 cPanel \u0111\u1ec1u c\u00f3 t\u00ednh n\u0103ng backup\/restore domain level v\u1edbi v\u00e0i click<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"So-sanh-DirectAdmin-va-cPanel-cho-VPS\"><\/span>So s\u00e1nh DirectAdmin v\u00e0 cPanel cho VPS<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<table>\n<thead>\n<tr>\n<th>Ti\u00eau ch\u00ed<\/th>\n<th>DirectAdmin<\/th>\n<th>cPanel<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Gi\u00e1 license<\/td>\n<td>~15\u201330 USD\/th\u00e1ng t\u00f9y lo\u1ea1i<\/td>\n<td>~15\u201345 USD\/th\u00e1ng t\u00f9y s\u1ed1 account<\/td>\n<\/tr>\n<tr>\n<td>T\u00e0i nguy\u00ean s\u1eed d\u1ee5ng<\/td>\n<td>Nh\u1eb9 h\u01a1n \u2014 ph\u00f9 h\u1ee3p VPS RAM th\u1ea5p (2\u20134GB)<\/td>\n<td>N\u1eb7ng h\u01a1n \u2014 n\u00ean d\u00f9ng v\u1edbi VPS 4GB RAM tr\u1edf l\u00ean<\/td>\n<\/tr>\n<tr>\n<td>T\u00ednh n\u0103ng<\/td>\n<td>\u0110\u1ee7 d\u00f9ng cho h\u1ea7u h\u1ebft use case \u2014 hosting, email, database<\/td>\n<td>Nhi\u1ec1u t\u00ednh n\u0103ng h\u01a1n, ecosystem plugin r\u1ed9ng<\/td>\n<\/tr>\n<tr>\n<td>Ph\u00f9 h\u1ee3p v\u1edbi ai<\/td>\n<td>VPS ti\u1ebft ki\u1ec7m, ng\u01b0\u1eddi d\u00f9ng Vi\u1ec7t Nam (InterData h\u1ed7 tr\u1ee3 DirectAdmin)<\/td>\n<td>Quen cPanel t\u1eeb Shared Hosting, c\u1ea7n t\u00ednh n\u0103ng n\u00e2ng cao<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>InterData h\u1ed7 tr\u1ee3 DirectAdmin natively \u2014 c\u00e0i \u0111\u1eb7t, c\u1ea5u h\u00ecnh, v\u00e0 h\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt. N\u1ebfu ch\u1ecdn DirectAdmin tr\u00ean VPS, xem <a href=\"#\">h\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng DirectAdmin to\u00e0n t\u1eadp<\/a> ho\u1eb7c <a href=\"https:\/\/interdata.vn\/blog\/cai-dat-directadmin-tren-vps-interdata\/\" target=\"_blank\" rel=\"noopener\">c\u00e1ch c\u00e0i DirectAdmin tr\u00ean VPS Linux<\/a>.<\/p>\n<p><!-- H2 #9 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Sai-lam-pho-bien-khi-moi-dung-VPS-lan-dau\"><\/span>Sai l\u1ea7m ph\u1ed5 bi\u1ebfn khi m\u1edbi d\u00f9ng VPS l\u1ea7n \u0111\u1ea7u<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Nh\u1eefng l\u1ed7i d\u01b0\u1edbi \u0111\u00e2y kh\u00f4ng ph\u1ea3i suy di\u1ec5n \u2014 \u0111\u00e2y l\u00e0 nh\u1eefng g\u00ec \u0111\u1ed9i support InterData g\u1eb7p l\u1eb7p l\u1ea1i trong ticket h\u1ed7 tr\u1ee3 c\u1ee7a kh\u00e1ch h\u00e0ng m\u1edbi. M\u1ed7i l\u1ed7i c\u00f3 h\u1eadu qu\u1ea3 th\u1ef1c t\u1ebf, kh\u00f4ng ph\u1ea3i c\u1ea3nh b\u00e1o l\u00fd thuy\u1ebft.<\/p>\n<p><strong>Kh\u00f4ng \u0111\u1ed5i m\u1eadt kh\u1ea9u root m\u1eb7c \u0111\u1ecbnh.<\/strong><\/p>\n<p>H\u1eadu qu\u1ea3: b\u1ecb brute-force trong v\u00f2ng 24 gi\u1edd \u0111\u1ea7u. M\u1eadt kh\u1ea9u do nh\u00e0 cung c\u1ea5p sinh ra th\u01b0\u1eddng c\u00f3 pattern (v\u00ed d\u1ee5: ch\u1eef c\u00e1i + s\u1ed1 + k\u00fd t\u1ef1 \u0111\u1eb7c bi\u1ec7t, \u0111\u1ed9 d\u00e0i c\u1ed1 \u0111\u1ecbnh) \u2014 bot brute-force c\u00f3 th\u1ec3 th\u1eed pattern \u0111\u00f3 tr\u01b0\u1edbc. S\u1eeda: <code>passwd root<\/code> ngay sau l\u1ea7n \u0111\u0103ng nh\u1eadp \u0111\u1ea7u ti\u00ean.<\/p>\n<p><strong>\u0110\u1ec3 port 3306 (MySQL) m\u1edf ra internet.<\/strong><\/p>\n<p>C\u00e0i MySQL xong, qu\u00ean kh\u00f4ng ki\u1ec3m tra port n\u00e0o \u0111ang public. <code>netstat -tlnp | grep 3306<\/code> \u2014 n\u1ebfu th\u1ea5y <code>0.0.0.0:3306<\/code> l\u00e0 \u0111ang expose to\u00e0n internet. Database b\u1ecb scan t\u00ecm l\u1ed7 h\u1ed5ng ho\u1eb7c b\u1ecb bruteforce t\u00e0i kho\u1ea3n. MySQL ch\u1ec9 c\u1ea7n l\u1eafng nghe tr\u00ean <code>127.0.0.1:3306<\/code> \u2014 s\u1eeda trong <code>\/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/code>, d\u00f2ng <code>bind-address = 127.0.0.1<\/code>.<\/p>\n<p><strong>Kh\u00f4ng update OS sau khi nh\u1eadn VPS.<\/strong><\/p>\n<p>H\u1eadu qu\u1ea3: d\u00ednh l\u1ed7 h\u1ed5ng c\u0169 \u0111\u00e3 c\u00f3 exploit c\u00f4ng khai. V\u00ed d\u1ee5: CVE-2021-4034 (PwnKit) cho ph\u00e9p user th\u01b0\u1eddng leo thang l\u00ean root \u2014 l\u1ed7 h\u1ed5ng n\u00e0y t\u1ed3n t\u1ea1i trong h\u1ea7u h\u1ebft distro Linux v\u00e0 \u0111\u00e3 c\u00f3 exploit PoC public. Patch m\u1ea5t 5 ph\u00fat, b\u1ecf qua th\u00ec \u0111\u1ec3 l\u1ed7 h\u1ed5ng m\u1edf v\u00f4 h\u1ea1n.<\/p>\n<p><strong>S\u1eeda SSH config sai c\u00fa ph\u00e1p \u2192 lockout.<\/strong><\/p>\n<p>M\u1ed9t d\u1ea5u c\u00e1ch th\u1eeba trong <code>\/etc\/ssh\/sshd_config<\/code>, restart SSH, v\u00e0 b\u1ea1n kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c n\u1eefa. Quy t\u1eafc: tr\u01b0\u1edbc khi restart b\u1ea5t k\u1ef3 service critical n\u00e0o, m\u1edf terminal th\u1ee9 hai gi\u1eef session hi\u1ec7n t\u1ea1i. N\u1ebfu session m\u1edbi kh\u00f4ng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c, session c\u0169 v\u1eabn c\u00f2n \u0111\u1ec3 s\u1eeda.<\/p>\n<p><strong>Kh\u00f4ng theo d\u00f5i disk usage \u2192 disk full, website die.<\/strong><\/p>\n<p>Log file (\u0111\u1eb7c bi\u1ec7t <code>\/var\/log\/nginx\/access.log<\/code>) kh\u00f4ng \u0111\u01b0\u1ee3c rotate s\u1ebd grow kh\u00f4ng gi\u1edbi h\u1ea1n. M\u1ed9t server nh\u1eadn 50.000 request\/ng\u00e0y t\u1ea1o ra h\u00e0ng tr\u0103m MB log m\u1ed7i ng\u00e0y. C\u1ea5u h\u00ecnh logrotate \u0111\u1ec3 t\u1ef1 rotate: Ubuntu \u0111\u00e3 c\u00e0i s\u1eb5n logrotate, ki\u1ec3m tra <code>\/etc\/logrotate.d\/nginx<\/code>.<\/p>\n<p><strong>Ch\u1ea1y \u1ee9ng d\u1ee5ng web b\u1eb1ng user root.<\/strong><\/p>\n<p>N\u1ebfu web app c\u00f3 l\u1ed7 h\u1ed5ng (SQL injection, RCE) v\u00e0 attacker khai th\u00e1c \u0111\u01b0\u1ee3c, h\u1ecd c\u00f3 quy\u1ec1n root ngay. App web n\u00ean ch\u1ea1y d\u01b0\u1edbi user ri\u00eang (<code>www-data<\/code> cho Nginx\/Apache m\u1eb7c \u0111\u1ecbnh, ho\u1eb7c t\u1ea1o user ri\u00eang cho t\u1eebng app). Ki\u1ec3m tra: <code>ps aux | grep nginx<\/code> \u2014 worker processes ph\u1ea3i ch\u1ea1y d\u01b0\u1edbi <code>www-data<\/code>, kh\u00f4ng ph\u1ea3i <code>root<\/code>.<\/p>\n<p><strong>Kh\u00f4ng backup tr\u01b0\u1edbc khi c\u00e0i th\u1ee9 g\u00ec \u0111\u00f3 m\u1edbi.<\/strong><\/p>\n<p>&#8220;Th\u1eed c\u00e0i xem sao&#8221; l\u00e0 c\u00e2u n\u00f3i tr\u01b0\u1edbc khi m\u1ea5t database. T\u1ea1o snapshot tr\u01b0\u1edbc m\u1ed7i thay \u0111\u1ed5i l\u1edbn \u2014 2 ph\u00fat \u0111\u1ec3 t\u1ea1o snapshot, v\u00e0i gi\u1edd \u0111\u1ec3 rebuild t\u1eeb \u0111\u1ea7u n\u1ebfu kh\u00f4ng c\u00f3. \u0110\u00e2y l\u00e0 quy t\u1eafc kh\u00f4ng c\u00f3 ngo\u1ea1i l\u1ec7.<\/p>\n<p><!-- CTA BOX #3 - M\u1eabu 3 cam\/v\u00e0ng --><\/p>\n<div style=\"background: linear-gradient(135deg, #ff6b35 0%, #f7931e 100%); border-radius: 12px; padding: 28px 32px; margin: 40px 0; max-width: 100%; box-shadow: 0 4px 20px rgba(255,107,53,0.25);\">\n<div style=\"display: inline-block; background: rgba(255,255,255,0.2); border-radius: 20px; padding: 4px 14px; margin-bottom: 14px;\"><span style=\"color: #fff; font-size: 12px; font-weight: bold; text-transform: uppercase; letter-spacing: 0.5px;\">G\u1ee3i \u00fd t\u1eeb InterData<\/span><\/div>\n<h3 style=\"color: #ffffff; font-size: 21px; font-weight: bold; margin: 0 0 10px 0;\"><span class=\"ez-toc-section\" id=\"Can-VPS-toc-do-cao-de-trien-khai-ngay\"><\/span>C\u1ea7n VPS t\u1ed1c \u0111\u1ed9 cao \u0111\u1ec3 tri\u1ec3n khai ngay?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p style=\"color: rgba(255,255,255,0.9); font-size: 14px; margin: 0 0 20px 0; line-height: 1.6;\">VPS NVMe U.2 Gen 4 c\u1ee7a InterData \u2014 \u0111\u1ecdc\/ghi nhanh, KVM c\u00e1ch ly t\u00e0i nguy\u00ean ho\u00e0n to\u00e0n, s\u1eb5n s\u00e0ng d\u00f9ng ngay sau khi \u0111\u0103ng k\u00fd.<\/p>\n<ul style=\"list-style: none; padding: 0; margin: 0 0 22px 0;\">\n<li style=\"color: #fff; font-size: 14px; padding: 4px 0;\">\u26a1 NVMe U.2 Gen 4 \u2014 IOPS cao, ph\u00f9 h\u1ee3p database v\u00e0 high traffic<\/li>\n<li style=\"color: #fff; font-size: 14px; padding: 4px 0;\">\u26a1 Deploy d\u01b0\u1edbi 2 ph\u00fat \u2014 full root access, t\u1ef1 c\u00e0i OS<\/li>\n<li style=\"color: #fff; font-size: 14px; padding: 4px 0;\">\u26a1 H\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt 24\/7 qua hotline 1900 636 822<\/li>\n<\/ul>\n<p><a style=\"display: inline-block; background: #ffffff; color: #e05a1a; font-size: 15px; font-weight: bold; text-decoration: none; padding: 12px 28px; border-radius: 8px;\" href=\"https:\/\/interdata.vn\/thue-vps\/\" target=\"_blank\" rel=\"noopener\">Xem g\u00f3i VPS NVMe \u2192<\/a><\/p>\n<\/div>\n<p><!-- H2 FAQ --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cau-hoi-thuong-gap-khi-su-dung-VPS\"><\/span>C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p khi s\u1eed d\u1ee5ng VPS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Moi-nhan-VPS-phai-lam-gi-dau-tien\"><\/span>M\u1edbi nh\u1eadn VPS ph\u1ea3i l\u00e0m g\u00ec \u0111\u1ea7u ti\u00ean?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ed5i m\u1eadt kh\u1ea9u root ngay trong 5 ph\u00fat \u0111\u1ea7u ti\u00ean \u2014 \u0111\u00e2y l\u00e0 vi\u1ec7c \u01b0u ti\u00ean s\u1ed1 m\u1ed9t. Ti\u1ebfp theo, ch\u1ea1y <code>apt update &amp;&amp; apt upgrade -y<\/code> \u0111\u1ec3 c\u1eadp nh\u1eadt to\u00e0n b\u1ed9 package l\u00ean phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t. Sau \u0111\u00f3 t\u1ea1o user th\u01b0\u1eddng v\u1edbi sudo, c\u1ea5u h\u00ecnh timezone v\u1ec1 Asia\/Ho_Chi_Minh, v\u00e0 b\u1eadt UFW firewall v\u1edbi \u00edt nh\u1ea5t port 22 \u0111\u01b0\u1ee3c allow. Ch\u1ec9 sau khi l\u00e0m xong 5 b\u01b0\u1edbc n\u00e0y m\u1edbi b\u1eaft \u0111\u1ea7u c\u00e0i \u1ee9ng d\u1ee5ng.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-mac-dinh-co-san-phan-mem-gi\"><\/span>VPS m\u1eb7c \u0111\u1ecbnh c\u00f3 s\u1eb5n ph\u1ea7n m\u1ec1m g\u00ec?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>VPS Linux m\u1edbi giao ch\u1ec9 c\u00f3 h\u1ec7 \u0111i\u1ec1u h\u00e0nh c\u01a1 b\u1ea3n \u2014 Ubuntu, CentOS, ho\u1eb7c distro b\u1ea1n ch\u1ecdn khi \u0111\u1eb7t. Kh\u00f4ng c\u00f3 web server, database, hay Control Panel n\u00e0o \u0111\u01b0\u1ee3c c\u00e0i s\u1eb5n. B\u1ea1n c\u00f3 to\u00e0n quy\u1ec1n quy\u1ebft \u0111\u1ecbnh c\u00e0i g\u00ec. M\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p c\u00f3 option &#8220;VPS + DirectAdmin&#8221; ho\u1eb7c &#8220;VPS + cPanel&#8221; khi \u0111\u1eb7t \u2014 trong tr\u01b0\u1eddng h\u1ee3p \u0111\u00f3, Control Panel \u0111\u01b0\u1ee3c c\u00e0i k\u00e8m, nh\u01b0ng v\u1eabn c\u1ea7n b\u1ea1n t\u1ef1 c\u1ea5u h\u00ecnh th\u00eam.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tai-sao-khong-SSH-duoc-vao-VPS\"><\/span>T\u1ea1i sao kh\u00f4ng SSH \u0111\u01b0\u1ee3c v\u00e0o VPS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ba nguy\u00ean nh\u00e2n ph\u1ed5 bi\u1ebfn nh\u1ea5t: (1) <strong>Connection refused<\/strong> \u2014 SSH service ch\u01b0a ch\u1ea1y tr\u00ean VPS, ho\u1eb7c b\u1ea1n \u0111ang d\u00f9ng sai port. Ki\u1ec3m tra l\u1ea1i port trong email b\u00e0n giao. (2) <strong>Connection timed out<\/strong> \u2014 firewall \u0111ang ch\u1eb7n, th\u01b0\u1eddng l\u00e0 firewall ph\u00eda nh\u00e0 cung c\u1ea5p ho\u1eb7c network upstream. Li\u00ean h\u1ec7 support v\u00e0 cung c\u1ea5p IP ngu\u1ed3n c\u1ee7a b\u1ea1n \u0111\u1ec3 ki\u1ec3m tra. (3) <strong>Permission denied (publickey)<\/strong> \u2014 \u0111ang th\u1eed d\u00f9ng SSH key nh\u01b0ng public key ch\u01b0a \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd tr\u00ean VPS, ho\u1eb7c \u0111ang tr\u1ecf nh\u1ea7m private key. Th\u1eed th\u00eam flag <code>-o PasswordAuthentication=yes<\/code> \u0111\u1ec3 d\u00f9ng password tr\u01b0\u1edbc.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-Linux-dung-he-dieu-hanh-nao-tot-nhat\"><\/span>VPS Linux d\u00f9ng h\u1ec7 \u0111i\u1ec1u h\u00e0nh n\u00e0o t\u1ed1t nh\u1ea5t?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>V\u1edbi ng\u01b0\u1eddi m\u1edbi, Ubuntu Server LTS l\u00e0 l\u1ef1a ch\u1ecdn t\u1ed1t nh\u1ea5t \u2014 t\u00e0i li\u1ec7u nhi\u1ec1u nh\u1ea5t, c\u1ed9ng \u0111\u1ed3ng l\u1edbn nh\u1ea5t, v\u00e0 h\u1ea7u h\u1ebft h\u01b0\u1edbng d\u1eabn tr\u00ean internet \u0111\u1ec1u c\u00f3 phi\u00ean b\u1ea3n cho Ubuntu. Phi\u00ean b\u1ea3n khuy\u1ebfn ngh\u1ecb hi\u1ec7n t\u1ea1i: Ubuntu 22.04 LTS (h\u1ed7 tr\u1ee3 \u0111\u1ebfn 2027). V\u1edbi ng\u01b0\u1eddi \u0111\u00e3 quen RedHat ecosystem ho\u1eb7c c\u1ea7n t\u01b0\u01a1ng th\u00edch v\u1edbi m\u00f4i tr\u01b0\u1eddng enterprise, AlmaLinux ho\u1eb7c Rocky Linux l\u00e0 l\u1ef1a ch\u1ecdn \u1ed5n \u0111\u1ecbnh.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-khac-Cloud-Server-o-diem-nao\"><\/span>VPS kh\u00e1c Cloud Server \u1edf \u0111i\u1ec3m n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<table>\n<thead>\n<tr>\n<th>Ti\u00eau ch\u00ed<\/th>\n<th>VPS<\/th>\n<th>Cloud Server<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>T\u00e0i nguy\u00ean<\/td>\n<td>C\u1ed1 \u0111\u1ecbnh \u2014 2 core, 4GB RAM mua l\u00e0 c\u00f3 \u0111\u00f3<\/td>\n<td>Co gi\u00e3n \u0111\u01b0\u1ee3c \u2014 scale CPU\/RAM theo nhu c\u1ea7u<\/td>\n<\/tr>\n<tr>\n<td>Gi\u00e1<\/td>\n<td>Th\u1ea5p h\u01a1n \u2014 ph\u00f9 h\u1ee3p workload \u1ed5n \u0111\u1ecbnh<\/td>\n<td>Cao h\u01a1n \u2014 pay-as-you-go, ph\u00f9 h\u1ee3p workload bi\u1ebfn \u0111\u1ed9ng<\/td>\n<\/tr>\n<tr>\n<td>Ph\u00f9 h\u1ee3p v\u1edbi ai<\/td>\n<td>Website, app c\u00f3 traffic \u1ed5n \u0111\u1ecbnh, hosting c\u00e1 nh\u00e2n\/doanh nghi\u1ec7p nh\u1ecf<\/td>\n<td>E-commerce c\u00f3 peak traffic, startup scale nhanh<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Xem th\u00eam so s\u00e1nh chi ti\u1ebft t\u1ea1i <a href=\"https:\/\/interdata.vn\/blog\/cloud-server-may-chu-dam-may\/\" target=\"_blank\" rel=\"noopener\">Cloud Server l\u00e0 g\u00ec v\u00e0 khi n\u00e0o n\u00ean d\u00f9ng thay VPS<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-NVMe-nhanh-hon-VPS-SSD-thuong-bao-nhieu\"><\/span>VPS NVMe nhanh h\u01a1n VPS SSD th\u01b0\u1eddng bao nhi\u00eau?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>V\u1ec1 IOPS (th\u01b0\u1edbc \u0111o t\u1ed1c \u0111\u1ed9 truy c\u1eadp ng\u1eabu nhi\u00ean quan tr\u1ecdng nh\u1ea5t v\u1edbi database v\u00e0 web app): NVMe U.2 Gen 4 \u0111\u1ea1t 300.000\u20131.000.000 IOPS, so v\u1edbi SATA SSD th\u00f4ng th\u01b0\u1eddng 80.000\u2013100.000 IOPS \u2014 ch\u00eanh l\u1ec7ch t\u1eeb 3 \u0111\u1ebfn 10 l\u1ea7n t\u00f9y c\u1ea5u h\u00ecnh. Trong th\u1ef1c t\u1ebf v\u1edbi website WordPress c\u00f3 caching \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh t\u1ed1t, ch\u00eanh l\u1ec7ch kh\u00f4ng r\u00f5 l\u1eafm. Nh\u01b0ng v\u1edbi database n\u1eb7ng, nhi\u1ec1u concurrent query, ho\u1eb7c \u1ee9ng d\u1ee5ng I\/O-intensive \u2014 NVMe cho latency th\u1ea5p h\u01a1n r\u00f5 r\u00e0ng.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nen-tu-quan-tri-VPS-hay-thue-managed-VPS\"><\/span>N\u00ean t\u1ef1 qu\u1ea3n tr\u1ecb VPS hay thu\u00ea managed VPS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>T\u1ef1 qu\u1ea3n tr\u1ecb (unmanaged VPS) ph\u00f9 h\u1ee3p n\u1ebfu b\u1ea1n c\u00f3 background k\u1ef9 thu\u1eadt \u2014 developer, sysadmin, ho\u1eb7c ng\u01b0\u1eddi s\u1eb5n s\u00e0ng h\u1ecdc Linux. Chi ph\u00ed th\u1ea5p h\u01a1n, ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n. Managed VPS (nh\u00e0 cung c\u1ea5p h\u1ed7 tr\u1ee3 c\u1ea5u h\u00ecnh, monitor, v\u00e0 x\u1eed l\u00fd s\u1ef1 c\u1ed1) ph\u00f9 h\u1ee3p v\u1edbi SME kh\u00f4ng c\u00f3 IT staff ri\u00eang v\u00e0 c\u1ea7n \u0111\u1ea3m b\u1ea3o uptime cao m\u00e0 kh\u00f4ng t\u1ed1n th\u1eddi gian qu\u1ea3n tr\u1ecb. Managed th\u01b0\u1eddng t\u1ed1n th\u00eam 50\u2013100% chi ph\u00ed so v\u1edbi unmanaged c\u00f9ng c\u1ea5u h\u00ecnh.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-bi-tan-cong-phai-lam-gi\"><\/span>VPS b\u1ecb t\u1ea5n c\u00f4ng ph\u1ea3i l\u00e0m g\u00ec?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>5 b\u01b0\u1edbc x\u1eed l\u00fd kh\u1ea9n c\u1ea5p theo th\u1ee9 t\u1ef1: (1) C\u00f4 l\u1eadp ngay \u2014 n\u1ebfu nh\u00e0 cung c\u1ea5p c\u00f3 t\u00ednh n\u0103ng t\u1eaft network interface t\u1eeb panel, d\u00f9ng ngay \u0111\u1ec3 ng\u0103n attacker ti\u1ebfp t\u1ee5c truy c\u1eadp v\u00e0 ng\u0103n VPS t\u1ea5n c\u00f4ng ngu\u1ed3n kh\u00e1c. (2) V\u00e0o qua VNC console \u0111\u1ec3 kh\u00f4ng b\u1ecb ph\u1ee5 thu\u1ed9c v\u00e0o SSH. (3) Ki\u1ec3m tra process l\u1ea1: <code>ps aux | sort -k3 -r | head -20<\/code>, ki\u1ec3m tra cron job: <code>crontab -l<\/code> v\u00e0 <code>ls \/etc\/cron.*<\/code>. (4) Ki\u1ec3m tra auth.log \u0111\u1ec3 bi\u1ebft attacker v\u00e0o t\u1eeb \u0111\u00e2u v\u00e0 l\u00fac n\u00e0o. (5) Sau khi hi\u1ec3u r\u00f5 vector t\u1ea5n c\u00f4ng, rebuild VPS t\u1eeb snapshot s\u1ea1ch thay v\u00ec c\u1ed1 g\u1eafng &#8220;clean&#8221; \u2014 b\u1ea1n kh\u00f4ng th\u1ec3 ch\u1eafc ch\u1eafn \u0111\u00e3 d\u1ecdn s\u1ea1ch 100%.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Mot-VPS-co-the-chay-duoc-bao-nhieu-website\"><\/span>M\u1ed9t VPS c\u00f3 th\u1ec3 ch\u1ea1y \u0111\u01b0\u1ee3c bao nhi\u00eau website?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kh\u00f4ng c\u00f3 con s\u1ed1 c\u1ed1 \u0111\u1ecbnh \u2014 ph\u1ee5 thu\u1ed9c ho\u00e0n to\u00e0n v\u00e0o traffic v\u00e0 resource consumption c\u1ee7a t\u1eebng site. VPS 2GB RAM c\u00f3 th\u1ec3 ch\u1ea1y 20\u201330 website WordPress \u00edt traffic (d\u01b0\u1edbi 100 l\u01b0\u1ee3t\/ng\u00e0y m\u1ed7i site) v\u1edbi caching t\u1ed1t, ho\u1eb7c ch\u1ec9 2\u20133 site medium traffic (5.000\u201310.000 l\u01b0\u1ee3t\/ng\u00e0y m\u1ed7i site). Database l\u00e0 bottleneck th\u01b0\u1eddng g\u1eb7p nh\u1ea5t khi ch\u1ea1y nhi\u1ec1u site \u2014 gi\u00e1m s\u00e1t RAM v\u00e0 slow query log \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1edbm.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Lam-the-nao-de-tang-RAMCPU-VPS-khi-het-tai-nguyen\"><\/span>L\u00e0m th\u1ebf n\u00e0o \u0111\u1ec3 t\u0103ng RAM\/CPU VPS khi h\u1ebft t\u00e0i nguy\u00ean?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>V\u1edbi VPS th\u00f4ng th\u01b0\u1eddng, c\u1ea7n n\u00e2ng g\u00f3i (vertical scaling) \u2014 li\u00ean h\u1ec7 nh\u00e0 cung c\u1ea5p \u0111\u1ec3 upgrade l\u00ean plan cao h\u01a1n. Qu\u00e1 tr\u00ecnh th\u01b0\u1eddng c\u1ea7n reboot VPS, gi\u00e1n \u0111o\u1ea1n v\u00e0i ph\u00fat. V\u1edbi Cloud Server, c\u00f3 th\u1ec3 thay \u0111\u1ed5i t\u00e0i nguy\u00ean linh ho\u1ea1t h\u01a1n m\u00e0 kh\u00f4ng c\u1ea7n migration. Tr\u01b0\u1edbc khi n\u00e2ng c\u1ea5p, ki\u1ec3m tra xem bottleneck th\u1ef1c s\u1ef1 l\u00e0 g\u00ec \u2014 \u0111\u00f4i khi c\u1ea5u h\u00ecnh MySQL ho\u1eb7c PHP-FPM sai c\u00f3 th\u1ec3 g\u00e2y tri\u1ec7u ch\u1ee9ng gi\u1ed1ng nh\u01b0 thi\u1ebfu RAM nh\u01b0ng th\u1ef1c ra kh\u00f4ng ph\u1ea3i.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"VPS-co-can-cai-antivirus-khong\"><\/span>VPS c\u00f3 c\u1ea7n c\u00e0i antivirus kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>C\u00e2u tr\u1ea3 l\u1eddi th\u1eb3ng th\u1eafn: v\u1edbi VPS Linux ch\u1ea1y web server, antivirus truy\u1ec1n th\u1ed1ng kh\u00f4ng c\u1ea7n thi\u1ebft v\u00e0 th\u01b0\u1eddng kh\u00f4ng hi\u1ec7u qu\u1ea3 v\u1edbi lo\u1ea1i threat m\u00e0 Linux server th\u1ef1c s\u1ef1 g\u1eb7p. Threat ph\u1ed5 bi\u1ebfn nh\u1ea5t v\u1edbi VPS Linux kh\u00f4ng ph\u1ea3i virus m\u00e0 l\u00e0: brute-force SSH, khai th\u00e1c l\u1ed7 h\u1ed5ng web app, v\u00e0 misconfiguration. Th\u1ee9 th\u1ef1c s\u1ef1 c\u1ea7n l\u00e0: Fail2ban, firewall c\u1ea5u h\u00ecnh \u0111\u00fang, update OS th\u01b0\u1eddng xuy\u00ean, v\u00e0 web app firewall (ModSecurity ho\u1eb7c t\u01b0\u01a1ng \u0111\u01b0\u01a1ng) n\u1ebfu ch\u1ea1y website public. ClamAV c\u00f3 th\u1ec3 h\u1eefu \u00edch n\u1ebfu VPS \u0111\u01b0\u1ee3c d\u00f9ng l\u00e0m mail server \u0111\u1ec3 qu\u00e9t attachment.<\/p>\n<p><!-- CONCLUSION (kh\u00f4ng heading \"K\u1ebft lu\u1eadn\") --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Tu-day-ban-di-tiep-theo-huong-nao\"><\/span>T\u1eeb \u0111\u00e2y, b\u1ea1n \u0111i ti\u1ebfp theo h\u01b0\u1edbng n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Qu\u1ea3n tr\u1ecb VPS hi\u1ec7u qu\u1ea3 kh\u00f4ng ph\u1ea3i v\u1ec1 vi\u1ec7c bi\u1ebft nhi\u1ec1u l\u1ec7nh Linux. Quan tr\u1ecdng h\u01a1n l\u00e0 hi\u1ec3u th\u1ee9 t\u1ef1 \u0111\u00fang: b\u1ea3o m\u1eadt tr\u01b0\u1edbc, c\u00e0i ph\u1ea7n m\u1ec1m sau, t\u1ed1i \u01b0u khi \u0111\u00e3 c\u00f3 d\u1eef li\u1ec7u th\u1ef1c t\u1ebf, monitor li\u00ean t\u1ee5c \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u1ea5n \u0111\u1ec1 tr\u01b0\u1edbc khi ch\u00fang leo thang. L\u00e0m ng\u01b0\u1ee3c th\u1ee9 t\u1ef1 n\u00e0y \u2014 d\u00f9 t\u1eebng b\u01b0\u1edbc ri\u00eang l\u1ebb \u0111\u00fang \u2014 v\u1eabn c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn h\u1eadu qu\u1ea3 kh\u00f4ng l\u01b0\u1eddng tr\u01b0\u1edbc \u0111\u01b0\u1ee3c.<\/p>\n<p>Hai vi\u1ec7c quan tr\u1ecdng nh\u1ea5t \u0111\u1ec3 l\u00e0m ti\u1ebfp theo t\u00f9y v\u00e0o giai \u0111o\u1ea1n b\u1ea1n \u0111ang \u1edf: n\u1ebfu VPS m\u1edbi nh\u1eadn v\u00e0 ch\u01b0a b\u1ea3o m\u1eadt, \u0111\u1ecdc ngay <a href=\"#\">h\u01b0\u1edbng d\u1eabn hardening SSH tr\u00ean VPS Linux<\/a> \u2014 \u0111\u00e2y l\u00e0 l\u1edbp b\u1ea3o v\u1ec7 quan tr\u1ecdng nh\u1ea5t sau firewall. N\u1ebfu \u0111\u00e3 b\u1ea3o m\u1eadt xong v\u00e0 mu\u1ed1n deploy web app, <a href=\"#\">c\u00e0i LEMP stack tr\u00ean Ubuntu VPS<\/a> l\u00e0 \u0111i\u1ec3m b\u1eaft \u0111\u1ea7u th\u1ef1c t\u1ebf nh\u1ea5t cho h\u1ea7u h\u1ebft use case PHP.<\/p>\n<p>Nh\u1eefng ph\u1ea7n \u0111i s\u00e2u h\u01a1n trong b\u00e0i n\u00e0y \u2014 rsync backup t\u1ef1 \u0111\u1ed9ng, Netdata monitoring, Fail2ban, v\u00e0 DirectAdmin \u2014 \u0111\u1ec1u c\u00f3 b\u00e0i v\u1ec7 tinh chi ti\u1ebft trong c\u00f9ng chu\u1ed7i. \u0110i t\u1eebng b\u01b0\u1edbc m\u1ed9t, kh\u00f4ng c\u1ea7n l\u00e0m t\u1ea5t c\u1ea3 trong m\u1ed9t ng\u00e0y.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>T\u00f3m t\u1eaft nhanh: H\u01b0\u1edbng d\u1eabn s\u1eed d\u1ee5ng VPS xoay quanh 5 nh\u00f3m vi\u1ec7c c\u1ea7n l\u00e0m \u0111\u00fang th\u1ee9 t\u1ef1: \u0111\u0103ng nh\u1eadp l\u1ea7n \u0111\u1ea7u qua SSH, c\u1ea5u h\u00ecnh h\u1ec7 th\u1ed1ng c\u01a1 b\u1ea3n trong 30 ph\u00fat \u0111\u1ea7u, c\u00e0i ph\u1ea7n m\u1ec1m c\u1ea7n thi\u1ebft, b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 tr\u01b0\u1edbc khi m\u1edf b\u1ea5t k\u1ef3 port n\u00e0o ra internet, v\u00e0 thi\u1ebft l\u1eadp<\/p>\n","protected":false},"author":2,"featured_media":40220,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-40213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vps"],"_links":{"self":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/40213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/comments?post=40213"}],"version-history":[{"count":10,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/40213\/revisions"}],"predecessor-version":[{"id":40391,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/40213\/revisions\/40391"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media\/40220"}],"wp:attachment":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media?parent=40213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/categories?post=40213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/tags?post=40213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}