VPS acceptable use rules

A QuantylCloud VPS gives you full root access: you install whatever you want on it. It still shares its physical server, its network and its addresses with other customers. These few rules protect everyone, yourself included: an IP address that has been used to attack or to send spam stays blocked for a long time, for its next user too.

What is prohibited

• spam and any mass email campaign without the recipients' consent;
• attacking other systems: port or network scanning, brute-force login attempts, denial of service, phishing, spreading malware;
• cryptocurrency mining, farming or plotting, whatever the protocol, GPU instances included;
• illegal or pornographic content, or gambling not authorised by Moroccan regulations;
• reselling capacity to third parties without our written consent.

Hosting your own websites, applications, databases or tools, even for business use, is of course allowed. The full list is in the terms and conditions.

Port 25 is closed

Outbound port 25, the one used by mail servers, is blocked by default on all servers: it is the way spam leaves a hacked machine. For a website's emails (sign-up, forgotten password, order), use an email sending service, on port 587. Opening port 25 is requested from support, must be justified and is not guaranteed.

What we monitor

An automatic system watches the traffic leaving each VPS. It only reads its metadata — destination addresses and ports, volumes, rates — and never the content of your exchanges or of your files. It immediately cuts off, without notice, a server that scans ports or networks, floods a target with packets, tries passwords on other servers, connects to a mining pool or keeps hammering port 25.

A cut-off is not a deletion: the IP address and the disk are kept, and you have 72 hours to reply to us. The activity may come from the server having been hacked without its owner's knowledge. What to do is explained in the guide Server cut off for abuse: what to do.

The processor: shared, never a reason for a cut-off

The vCPUs of a VPS are shared fairly between the machines on the same physical server. A spike, a build or a night of computing is not a problem. Sustained use, however, shows:

• above 90% of its vCPUs for 6 hours in a row, you receive an email that tells you so and suggests a better-suited plan;
• if that use lasts more than 24 hours while the physical server is itself under load, your VPS is throttled to half of its vCPUs, with no change in price;
• the throttling lifts by itself after 24 hours below 40%, or on request to support.

A server is never cut off for processor use alone. For permanent intensive computing, a dedicated server reserves a whole machine for you.

A limit on creations

An account can order at most 10 servers per hour and 30 over 24 hours, deleted servers included. This limit targets the "create, delete, recreate" loop used to keep changing IP address; launching four servers at once for a project goes through without any trouble. Beyond it, the console refuses the order and tells you why: wait a little, or write to us if you need to launch more.

One hour minimum, then by the second

A server deleted less than an hour after its first start pays for the full hour, options included. After that, it is billed by the second, with no rounding. A server whose creation fails costs nothing. Billing is detailed in the guide Wallet, top-ups and invoices.

And on a dedicated server?

The same prohibitions apply. We do not monitor the traffic of a dedicated server: complaints from our supplier are forwarded to us and handled with you. A well-founded complaint can lead to the server's network being cut off, and the current month remains due during the cut-off.