EHCP Control Panel: Complete Open-Source Hosting Guide | Onlive Infotech

Deploying websites on raw Linux virtual machines traditionally demands deep terminal expertise across Apache virtual host configs, BIND zone files, and database administration. For users seeking a lightweight, open-source alternative to heavy commercial software, Easy Hosting Control Panel (EHCP) delivers an accessible web-based interface for managing multi-domain hosting environments on Debian and Ubuntu distributions. For organizations scaling high-throughput compute workloads, our scalable Linux VPS hosting solutions provides dedicated unmetered performance and enterprise hardware isolation.

Written primarily in PHP and Bash, EHCP automates the installation, configuration, and daily management of core Linux web services, including Apache, BIND9 DNS, MySQL, Postfix, and Dovecot. While EHCP holds a notable position in the history of free web hosting panels, operating it on modern internet-facing servers requires an objective understanding of its architecture, installation procedures, configuration model, security boundaries, and contemporary migration paths. This guide provides an in-depth technical analysis of EHCP, its server setup, administrative capabilities, performance trade-offs, and modern alternatives. When selecting a server administration interface, review our comprehensive Plesk vs cPanel control panel guide.

Underlying Architecture: The PHP and Bash Orchestration Model

To evaluate EHCP’s capabilities, systems engineers must understand how it interacts with the underlying operating system and orchestrates service daemons.

1. Architecture and Component Integration

EHCP does not compile custom web servers or deploy opaque background microservices. Instead, it functions as a modular orchestration layer that configures native Debian/Ubuntu packages via shell automation:

• Web Server Engine: Configures Apache HTTP Server (with optional Nginx reverse proxy modules in later revisions) to manage virtual host configurations inside /var/www/vhosts/.
• Database Management: Connects to local MySQL or MariaDB instances, automating database provisioning, user creation, and phpMyAdmin integration.
• DNS Nameserver: Interfaces with BIND9 to generate forward and reverse DNS zone files, SOA records, and mail routing pointers.
• Mail Transfer Agent (MTA): Manages Postfix for SMTP routing, Dovecot for IMAP/POP3 mailbox retrieval, and integrates SquirrelMail or Roundcube for browser-based webmail.
• File Transfer: Manages vsftpd or Pure-FTPd daemons, creating virtual FTP accounts mapped to specific document root folders.

2. The PHP Daemon and Cron Queue Engine

EHCP’s control interface is executed by a standard PHP engine. When an administrator adds a domain, creates an email account, or updates a DNS record in the web interface, the change is not always written to disk synchronously. Instead, EHCP records the desired configuration state within an internal database table and executes a background PHP daemon (ehcpdaemon.php) running via system cron or background loops.

The daemon queries the database queue, dynamically generates Apache virtual host configuration blocks, writes zone files, sets filesystem ownership permissions, and gracefully reloads the relevant services. This asynchronous design prevents long web browser timeouts during complex multi-service provisioning tasks.

Step-by-Step Installation on Ubuntu Server

EHCP was architected specifically for Debian and Ubuntu LTS releases. It requires a clean, minimal operating system installation with root access and unallocated network ports (80, 443, 3306, 53, 21, 25, 110, 143).

Step 1: System Preparation and Package Refresh

Connect to your server via SSH as the root user and ensure your operating system package repositories are up to date:

Step 2: Downloading the Official Installation Archive

Download the official EHCP installation archive directly to your server’s temporary source directory:

Step 3: Executing the Automated Deployment Script

Launch the interactive installation script:

During the automated installation, the script pulls required packages from official Ubuntu repositories and prompts you for essential operational parameters:

• Admin Name and Email: Provide a valid technical contact email for administrative alerts.
• MySQL Root Password: Define a master administrative password for the MySQL/MariaDB database instance.
• Default IP Address: Confirm your server’s public IPv4 address for virtual host binding.
• Web Server Selection: Select between Apache alone or Apache with Nginx frontend proxy support.

Once installation finishes, the script initializes all background daemons and displays your login URL. Open your web browser and navigate to http://YOUR_SERVER_IP/ehcp/ or https://YOUR_SERVER_IP:4443/ to access the management interface.

Core Administrative Workflows and Feature Walkthrough

EHCP provides a straightforward, tabular interface organized into administrative categories.

1. Virtual Host and Domain Provisioning

To host a new website, navigate to Domain Management → Add Domain. Enter your fully qualified domain name (e.g., example.com). EHCP creates the document root directory at /var/www/vhosts/example.com/httpdocs/, generates an Apache virtual host file with logging directives, configures a default BIND9 DNS zone, and reloads the web daemon automatically.

2. Database and User Administration

Under MySQL Management → Add Database, administrators can define a database name, user, and password with a single submission. EHCP grants granular permissions, restricts access to localhost, and integrates direct access to phpMyAdmin for database importing and table optimization.

3. Mail Server and Inbox Management

Under Email Management, administrators can create virtual mailboxes mapped to specific domains. EHCP configures Postfix virtual mailbox maps, provisions mail storage folders in /var/vmail/, and configures auto-responders and email forwarders without editing raw configuration files.

For organizations deploying web projects on Linux VPS hosting, EHCP provides a unified, low-overhead interface for managing fundamental web services. To achieve balanced multi-instance agility and cost efficiency, pair your deployment with enterprise dedicated server infrastructure featuring high-speed NVMe storage arrays.

Security Analysis, Technical Limitations, and Modern Challenges

While EHCP serves as an accessible learning tool and lightweight management wrapper, systems engineers evaluating it for production workloads must consider critical technical and security factors.

1. Development Cadence and Security Patching

The primary consideration with EHCP is that official upstream development has slowed significantly in recent years. Modern internet servers face sophisticated threat vectors, including automated botnet brute-forcing, zero-day PHP vulnerabilities, and complex supply-chain exploits. Control panels that lack active, continuous security maintenance expose servers to unpatched vulnerabilities.

2. Absence of Containerization and Process Isolation

Modern commercial and advanced open-source control panels isolate tenant accounts using Linux cgroups, namespaces, or Docker containers. On an EHCP server, hosted websites typically execute under the shared web server user (such as www-data) unless custom suEXEC or PHP-FPM pool isolation is configured manually. If one website on the server is compromised through a vulnerable CMS plugin, the attacker can potentially read files across neighboring directories that share identical filesystem permissions.

3. Lack of Native Two-Factor Authentication (2FA)

EHCP’s web interface relies primarily on standard username-and-password authentication. It lacks native integration with modern Two-Factor Authentication frameworks (such as TOTP or FIDO2/WebAuthn), making the administrative panel vulnerable to credential stuffing if exposed on public internet ports.

For production deployments and mission-critical databases operating on dedicated servers, modern infrastructure demands platforms with active security teams and hardened privilege models.

Modern Open-Source Alternatives to EHCP

Organizations seeking free, open-source server management platforms with active development, modern Linux kernel support, and enterprise security features should evaluate these contemporary alternatives:

1. HestiaCP

An active, community-driven fork of VestaCP built specifically for Debian and Ubuntu LTS. HestiaCP provides a lightweight Bash core, native Nginx reverse proxy with PHP-FPM, multi-PHP version switching, 1-click Let’s Encrypt SSL, built-in file manager, and native Two-Factor Authentication (2FA).

2. Virtualmin

A mature, feature-rich open-source hosting control panel built on top of Webmin. Virtualmin supports comprehensive multi-tenancy, granular access controls, automated Let’s Encrypt renewal, and direct native file manipulation without proprietary database locks.

3. CloudPanel

A modern, high-performance hosting panel engineered specifically for PHP and Node.js applications running on cloud instances. CloudPanel runs on top of pure Nginx, MySQL, and PHP-FPM, delivering extreme performance with minimal CPU and memory overhead.

DNS Zone Architecture and BIND9 Troubleshooting

EHCP integrates with the Berkeley Internet Name Domain (BIND9) daemon to manage authoritative nameserver records. Master zone files are stored in /etc/bind/ and loaded dynamically into named.conf.local. When custom DNS records (such as SPF, DKIM, or external mail routing pointers) fail to resolve, systems administrators should inspect and validate the zone syntax from the Linux terminal:

Ensuring that serial numbers follow standard YYYYMMDDNN incrementing conventions prevents secondary slave nameservers from rejecting zone transfers.

Step-by-Step Migration from EHCP to Modern Control Panels

Organizations operating legacy production servers on EHCP should plan an orderly migration to actively maintained control panels like HestiaCP or Virtualmin. A reliable migration workflow follows these steps:

1. Export MySQL Databases: Generate clean SQL dumps of all databases using mysqldump -u root -p --all-databases > full_backup.sql.
2. Archive Document Roots: Compress individual virtual host directories into standalone tarballs: tar -czvf example_com.tar.gz /var/www/vhosts/example.com/httpdocs/.
3. Transfer via Secure Copy: Transfer archives to the target server using scp or rsync over SSH.
4. Reconstitute on Modern Panel: Provision clean domains and database users in HestiaCP or Virtualmin, restore files to the new document root, import database tables, and re-issue automated Let’s Encrypt SSL certificates.
5. Update Authoritative DNS: Lower DNS Time-to-Live (TTL) values 24 hours in advance, update nameserver delegations or A records, and confirm live traffic flow.

Technical Comparison Matrix: EHCP vs. Modern Hosting Panels

The following table compares EHCP against contemporary open-source and commercial hosting platforms:

Common Pitfalls in EHCP Administration

Awareness of these operational challenges preserves server availability and system stability:

• Attempting Installation on Non-Debian Distributions: EHCP scripts depend explicitly on the apt package manager and Debian filesystem hierarchies. Running the installer on AlmaLinux, Rocky Linux, or CentOS will fail immediately and disrupt package configurations.
• Leaving Administrative Ports Open on Public Networks: Running EHCP on unencrypted HTTP port 80 or non-standard port 4443 without IP access restrictions invites automated brute-force attacks. Protect administrative ports using UFW firewall allowlists or SSH tunneling.
• Failing to Monitor PHP Error Logs: Because EHCP’s background configuration daemon executes via PHP scripts, syntax errors or permission issues can cause the daemon to stall quietly. Regularly audit logs in /var/log/ehcp/ to ensure configuration queues are processing properly.
• Neglecting Automated Remote Backups: Local disk backups generated by EHCP can consume substantial storage space. Configure automated offsite backup synchronization using rsync over SSH to transfer web roots and database dumps to an independent offsite server.

✓
VERIFIED TECHNICAL AUTHOR
•
Network Architecture, Perimeter Security & DDoS Mitigation

✓

Naveen Rajput

Network Security & DDoS Mitigation Specialist

Naveen Rajput is a Network Security Engineer at Onlive Server, focusing on upstream DDoS mitigation, firewall policies, BGP routing, and network threat defense.

DDoS MitigationBGP RoutingNetwork SecurityFirewall Architecture

LinkedIn

X (Twitter)

Facebook

View All Technical Publications →