Infrastructure and Recovery
Servers, cloud and on-site fallback systems, with uptime monitoring and tested backups, on hardware and accounts your company owns.
Infrastructure and recovery is one of the four pillars of the Tuxxin Annual IT Program. Tuxxin maintains your servers and builds on-site fallback systems in your office, and your company holds the credentials and documented runbooks.
Infrastructure and Recovery Services
Server Provisioning
Bare-metal or virtual servers hardened from first boot: SSH key-only authentication, an nftables firewall, automatic security updates, fail2ban and WireGuard for administrative access.
Proxmox Virtualization
Multi-host clusters with ZFS replication, live migration, scheduled backup snapshots and a web console for your staff, running LXC containers and KVM virtual machines on one platform.
On-Site Fallback
Tuxxin builds fallback systems in your office that take over when the primary system is down. At Houston's Courier, an on-site standby server keeps a fresh copy of the database and can take over in under 30 minutes.
Backups and Disaster Recovery
Snapshots and encrypted incremental (delta) backups with Proxmox Backup Server and Restic, to local and off-site storage, with scheduled integrity checks and restore tests, and documented recovery time and recovery point objectives (RTO and RPO).
Uptime Monitoring and Alerts
Uptime checks plus Prometheus and Grafana dashboards for CPU, memory, disk, network and application metrics. Alerts go to email, Slack or Telegram when a check fails.
Hardening and Patching
Server hardening, monthly patching and security reviews, log shipping and intrusion detection.
Our Infrastructure Stack
Operating Systems
Debian 12 or 13, Ubuntu 22.04 or 24.04 LTS, Red Hat Enterprise Linux, Rocky Linux, AlmaLinux and Fedora, with Kali Linux for security testing.
Virtualization
Proxmox VE 8 and 9: open source, with a web console, native ZFS, and LXC containers and KVM virtual machines on one platform.
Storage
ZFS pools with snapshots, send and receive replication and native compression, plus Ceph for high-availability clusters.
Networking
nftables firewalls, WireGuard for site-to-site and administrative access, and Cloudflare Tunnels for inbound traffic without port forwarding.
Backup
Proxmox Backup Server for snapshot and incremental (delta) backups of virtual machines and containers, plus Restic and rclone to off-site destinations, with scheduled restore tests that catch a broken backup during a drill.
Observability
Prometheus and Grafana, Loki for logs and Alertmanager for routing, running on your own Proxmox cluster.
Databases and Web Servers
MariaDB and PostgreSQL tuning, NGINX and Apache configuration reviews, kernel sysctl tuning and slow-query analysis.
Our Delivery Process
-
Assessment
The fixed-price assessment inventories your internet-facing systems, reviews your cloud and hosting bills and ends with a prioritized 90-day plan.
-
Build
New infrastructure is stood up in a sandbox, validated against your requirements and promoted to production with documented runbooks.
-
Cutover
A migration plan with rollback. Zero-downtime moves where the workload allows, and scheduled maintenance windows where it requires them.
-
Operate
Monthly monitoring, patching, backup verification and security reviews, with a quarterly roadmap review.
Infrastructure and Recovery Is Right for You If
- You want servers on hardware and accounts your company owns, without a full-time system administrator on staff.
- Your business needs an on-site fallback that can take over when the primary system is down.
- Your operations depend on one server with no tested fallback.
- You inherited a Linux server with no documentation and need it audited, hardened and documented.
- You need backups that are restore-tested on a schedule.
Frequently Asked Questions
Plan Your Infrastructure and Recovery
Most clients follow a scoping call with the fixed-price IT cost and security assessment, from $2,500.
Book a Scoping Call