How secure is DirhamStack and how are VPS isolated?

DirhamStack is built so that each VPS is genuinely separate from the others and from the host. Every VPS is a full, isolated KVM guest running its own kernel, so one server cannot see or reach into another.

The hypervisor uses an isolated NAT network and never touches the server's main network interface. This keeps your existing services and routing untouched while the virtual machines run on their own private network.

The VNC console for each VPS is bound to localhost on the host and reached over an SSH tunnel, so it is never exposed publicly. Nobody can browse to a console from the open internet.

Finally, setting up the hypervisor is additive. It does not restart or reconfigure existing websites, mail or panels, so enabling DirhamStack does not put your live workloads at risk.