Debian 12 "bookworm" quietly crossed a line in June 2026: regular security support ended, and it now runs on LTS. Debian 13 "trixie" has meanwhile matured through five point releases, which makes this the right moment to do the in-place upgrade. This guide covers the full procedure for a remote production server: the pre-flight checklist (including the interface-renaming trap that can cut a remote box off mid-upgrade), the three-command upgrade itself, and the trixie-specific changes to check afterwards: /tmp on tmpfs, the sysctl move, and OpenSSH 10.

A freshly provisioned server starts receiving SSH probes within minutes of its IP going live; honeypot studies show most exposed machines are attacked within a day. The good news: the defences that matter are a short, boring, one-hour checklist, not a security research project. This guide walks the eight steps in order (users and SSH keys, firewall baseline, automatic updates, fail2ban, time sync, a listener audit, and logging) with the exact commands for Debian/Ubuntu and the RHEL family, plus an honest list of what not to waste your first hour on.

DDoS attacks come in three broad families: volumetric floods that saturate your pipe, protocol attacks that exhaust connection state, and application-layer floods that look like legitimate traffic. Each one exhausts a different resource, so each one needs a different defence, and no single layer stops all three. This guide maps the common attack forms to the resource they target and the mitigation that actually works against them, explains what an on-host firewall can and cannot stop, and ends with a practical incident-response runbook for when your server is under fire.

A game server is a single-threaded simulation loop on a fixed clock, so it lives or dies on per-core speed and steady timing, not core count. A shared VPS puts a hypervisor's scheduler between that loop and the CPU, and the jitter shows up as missed ticks. Bare metal removes the layer. This pillar covers bare metal against a VPS and managed game panels, why clocks beat cores, real RAM figures for Minecraft, Rust, ARK, Palworld, Valheim and CS2, storage and DDoS reality, running Pterodactyl or its Pelican fork yourself, and the honest cases where a VPS is still the right call.