Provider request: aaPanel

aaPanel · October 14

Where do you provide services?

Worldwide. aaPanel is a self-hosted server management software solution that can be installed on Linux servers worldwide.

What sort of services do you offer?

Linux Server Management Software, Web Hosting Control Panel, Website Management, WordPress Management, Python Application Deployment, Server Security Tools, and Software Licensing.

Are you a registered company or a sole trader?

Registered Company

What is your website?

https://www.aapanel.com/

Tell us about your company, yourself and your services

Hi everyone!
I'm Mauwin from the aaPanel team, where I work in operations.
aaPanel is a Linux server management control panel designed to make server administration easier for developers, website owners, and hosting providers.
Our software provides a web-based interface for managing websites, databases, WordPress installations, Python applications, server security, and other essential server operations.
We offer both a free version and a Pro version with additional features.
Unlike traditional hosting providers, we don't sell VPS or dedicated servers. Instead, aaPanel can be installed on users' existing Linux servers, helping them manage their hosting environments more efficiently.
We'd love to become part of the LowEndSpirit community, exchange ideas with VPS enthusiasts and hosting providers, answer technical questions, and gather feedback to improve our products.
We'd also like to occasionally share special offers for aaPanel Pro licenses with the community.
Our website: https://www.aapanel.com/
Looking forward to connecting with everyone here!

Hardware owned or leased?

N/A – Software provider

IPv4 owned or leased?

N/A

IPv4 has rDNS setting?

N/A

IPv6 on-link or routed?

N/A

IPv6 has rDNS setting?

N/A

IPv6 has rDNS delegation?

N/A

Datacenter name and address?

N/A

Datacenter has fire extinguishers?

N/A

Datacenter has two very scary guard dogs?

N/A

BGP session provided with automatic RPKI updates?

N/A

IXP ports availability?

N/A

Price for extra IPv4 address?

N/A

Price reduction for not needing any IPv4 address?

N/A

Extra IPv6 allocation can be requested?

N/A

Billing panel licensed or nulled or custom?

N/A

VPS control panel?

N/A

Custom ISO supported on KVM service?

N/A

Hypervisor running vulnerable kernel to avoid reboots?

N/A

YABS report?

N/A

Maximum allowable persistent CPU usage?

N/A

Blast the port allowed?

N/A

Mail ports blocked?

N/A

DMCA ignored?

N/A

Many of the above questions are optional after the first 6 questions and might not apply to you but there may be something we did not ask that you want to add or say, feel free to add it here.

Just to clarify, aaPanel is a software provider rather than a traditional VPS or hosting provider. We develop a Linux server management control panel that helps users manage their own servers and websites. That's why most of the questions regarding IP addresses, data centers, BGP, and VPS infrastructure don't apply to us. We'd like to apply for the Services Provider tag under the Server Management, Software Development, and Licensing categories. Our goal is to participate in the community, help users with server management, gather feedback, and occasionally share special offers for aaPanel Pro. We're happy to provide any additional information if needed. Thank you for considering our application!

Baby6 · October 14

Did you fixed the security issues? Or it still has Backdoor?

aaPanel · October 14

@Baby6
Hey, thanks for bringing this up! 🙂
I totally understand your concerns. Security is really important, especially when it comes to managing servers.
If there's a specific issue you've heard about, feel free to share it with me. I'd be happy to check with our development team and give you an update.
We really appreciate feedback like this. It helps us keep improving aaPanel!

AnthonySmith · October 14

@Baby6 said:
Did you fixed the security issues? Or it still has Backdoor?

Which specific security issues?

yoursunny · October 14

How much of the source code is vibed?
How much of the source code is written in a memory safe language?
Is the source code repository guarded by two very scary dogs so that they cannot be hacked by ransomware?
If your panel can self-upgrade, would it pull malicious upgrades if your upgrade server domain is hijacked?
Can your panel be installed on IPv6 only server?
Does your panel support assigning a separate IPv6 address to each account / website?

ascicode · October 14

How is it vibed on an older than 7y project.

Baby6 · October 14

@AnthonySmith said:

@Baby6 said:
Did you fixed the security issues? Or it still has Backdoor?

Which specific security issues?

They had a Backdoor to CCP I think.

poei · October 14

@ascicode said:
How is it vibed on an older than 7y project.

You take the existing old code and then run it through a LLM to produce a new and maybe better piece of software.

AnthonySmith · October 14

Just a reminder, while personal opinions are fine, this vote is if they should be allowed to sell here not if you like it or not, I appreciate the line is a fine one but there is a difference, while I appreciate the waste of time in many cases asking people to be objective, that really is the best way.

Genuine concerns, however... very valid.

flips · October 14

This baffles me, as @AnthonySmith points out, this shouldn't be a Reddit style up/downvote based on if you like or dislike a certain product. So, voting against someone getting a provider tag, that should be based on some serious concern about their conduct or something … I think …

I'm actually curious about aaPanel, looks like it's possible to try out the free version, maybe I should. (But that's probably for another topic/thread.)

Baby6 · October 14

@AnthonySmith said:
Just a reminder, while personal opinions are fine, this vote is if they should be allowed to sell here not if you like it or not, I appreciate the line is a fine one but there is a difference, while I appreciate the waste of time in many cases asking people to be objective, that really is the best way.

Genuine concerns, however... very valid.

If you are pointing at my comment then sorry but I found the whole post years ago on OGF

And I think it's a genuine concern if some foreign govt has access to all my data.

I maybe wrong but I pointed out what I saw on OGF

I think @aaPanel should clarify this as I have no issue to give my upvoter to his application as I would genuinely love to have more products specially an alternative of cPanel

AnthonySmith · October 14

@Baby6 said:

@AnthonySmith said:
Just a reminder, while personal opinions are fine, this vote is if they should be allowed to sell here not if you like it or not, I appreciate the line is a fine one but there is a difference, while I appreciate the waste of time in many cases asking people to be objective, that really is the best way.

Genuine concerns, however... very valid.

If you are pointing at my comment then sorry but I found the whole post years ago on OGF

And I think it's a genuine concern if some foreign govt has access to all my data.

I maybe wrong but I pointed out what I saw on OGF

I think @aaPanel should clarify this as I have no issue to give my upvoter to his application as I would genuinely love to have more products specially an alternative of cPanel

Not you specifically and certainly not personally I have just observed some comments in general on a few of the requests for provider tags that made me worry that the point was being missed or skewed.

Nothing more than that, your concerns are totally valid.

ascicode · October 14

@AnthonySmith said:
Just a reminder, while personal opinions are fine, this vote is if they should be allowed to sell here not if you like it or not, I appreciate the line is a fine one but there is a difference, while I appreciate the waste of time in many cases asking people to be objective, that really is the best way.

Genuine concerns, however... very valid.

You can decide to give a tag rightaway, if service is legit. Just my opinion.

AnthonySmith · October 14

@ascicode said:

@AnthonySmith said:
Just a reminder, while personal opinions are fine, this vote is if they should be allowed to sell here not if you like it or not, I appreciate the line is a fine one but there is a difference, while I appreciate the waste of time in many cases asking people to be objective, that really is the best way.

Genuine concerns, however... very valid.

You can decide to give a tag rightaway, if service is legit. Just my opinion.

True but I am not always here.

aaPanel · 2:47AM

@flips said:
This baffles me, as @AnthonySmith points out, this shouldn't be a Reddit style up/downvote based on if you like or dislike a certain product. So, voting against someone getting a provider tag, that should be based on some serious concern about their conduct or something … I think …

I'm actually curious about aaPanel, looks like it's possible to try out the free version, maybe I should. (But that's probably for another topic/thread.)

Thanks for the interest! Feel free to give the free version a try sometime. Would love to hear your feedback!

aaPanel · 3:11AM

@yoursunny said:
How much of the source code is vibed?
How much of the source code is written in a memory safe language?
Is the source code repository guarded by two very scary dogs so that they cannot be hacked by ransomware?
If your panel can self-upgrade, would it pull malicious upgrades if your upgrade server domain is hijacked?
Can your panel be installed on IPv6 only server?
Does your panel support assigning a separate IPv6 address to each account / website?

Thanks for your questions! I checked with our development team, and here's what I found:
1. Most of aaPanel is written in Python, while some plugins are developed using Go and C++.
2. Regarding update security, our team considers the risk of malicious updates low under normal circumstances. However, I'll double-check the specific verification mechanisms to give you a more accurate answer about your domain-hijacking scenario.
3. aaPanel supports IPv6, although some IPv6-only environments may still have compatibility limitations.
4. Currently, assigning a dedicated IP address to each website is not supported.
Also, part of our source code is publicly available on GitHub if you'd like to take a look:
https://github.com/aaPanel/aaPanel
Really appreciate you taking the time to ask these questions!

devnull · 9:26AM

@Baby6 said:

I found the whole post years ago on OGF

Could you please link to that post here. Feels like a fair thing to do, given the accusation.

Nothing on https://www.google.com/search?q=aapanel+backdoor+site:lowendtalk.com

I maybe wrong but I pointed out what I saw on OGF
I think @aaPanel should clarify this

I think you should link to the post first

Baby6 · 9:41AM

@devnull said:

@Baby6 said:

I found the whole post years ago on OGF

Could you please link to that post here. Feels like a fair thing to do, given the accusation.

Nothing on https://www.google.com/search?q=aapanel+backdoor+site:lowendtalk.com

I maybe wrong but I pointed out what I saw on OGF
I think @aaPanel should clarify this

I think you should link to the post first

https://lowendtalk.com/discussion/181096/what-is-the-advantage-of-using-aapanel

Read all the pages

There are many more related topics.

As I said I have nothing against Aapanel but I'm sure no one wants their data to be compromised.

And I don't know why he avoiding answering my legit concern

Anyways, I am not gonna wasting my time on this topic. I have other things to do. As a responsible member I have submitted my vote.

cybertech · 11:32AM

aapanel is the best.

rcy026 · 1:09PM

@Baby6 said:

@devnull said:

@Baby6 said:

I found the whole post years ago on OGF

Could you please link to that post here. Feels like a fair thing to do, given the accusation.

Nothing on https://www.google.com/search?q=aapanel+backdoor+site:lowendtalk.com

I maybe wrong but I pointed out what I saw on OGF
I think @aaPanel should clarify this

I think you should link to the post first

https://lowendtalk.com/discussion/181096/what-is-the-advantage-of-using-aapanel

Read all the pages

There are many more related topics.

As I said I have nothing against Aapanel but I'm sure no one wants their data to be compromised.

And I don't know why he avoiding answering my legit concern

Anyways, I am not gonna wasting my time on this topic. I have other things to do. As a responsible member I have submitted my vote.

It's only one page and there is not a single source or link in it.
Some anonymous users making claims just like yours, but nothing to back it up.

Not defending anyone, never used aaPanel and probably never will, but throwing out claims like that without a single source or argument is just weak. As I said, never tried it, but I find it hard to believe that an open source project over 10 years old would contain backdoors without anyone noticing it. But I would love to hear what made you so sure of your claims, you must have some kind of evidence I assume?

MichaelCee · 3:02PM

Just so I'm not mixing my panels up, iirc this is the one that did a free lifetime license giveaway during it's inception? If so, I had one and then lost it. Can't remember the details but it looked interesting enough for me to grab one in the first place.

Provider request: aaPanel

Comments