Why Regular VPS Health Checks Matter
Your VPS is the backbone of your online operations — whether it hosts a web application, a game server, an API backend, or a development environment. Without proactive monitoring, small issues like a runaway process filling the disk or a memory leak can escalate into full outages. This guide provides a comprehensive health checklist organized by frequency: daily, weekly, and monthly checks that every server administrator should perform.
Consistent health checks help you catch problems early, maintain performance SLAs, and ensure your backups are actually restorable. Before diving into the checklist, it’s worth noting that the quality of your monitoring experience depends heavily on your VPS provider — you can compare providers that offer advanced monitoring tools and NVMe storage at virtualserversvps.com.
The Complete VPS Health Checklist
| Frequency | Check | Command / Tool | What to Look For | Action Threshold |
|---|---|---|---|---|
| Daily | Disk Usage | df -h | Root partition >80% full | Investigate or resize at 85% |
| Daily | Memory Pressure | free -m / htop | Swap usage > 0 or available RAM low | Add swap or upgrade RAM |
| Daily | CPU Load Average | uptime / top | Load average > # of CPU cores | Investigate heavy processes |
| Daily | Running Services | systemctl list-units --state=running | Unexpected stopped services | Restart and check logs |
| Daily | Failed Login Attempts | journalctl -u sshd | grep Failed | Multiple failed attempts | Review fail2ban / firewall rules |
| Daily | Network Connectivity | ping -c 4 8.8.8.8 | Packet loss > 1% | Check network interface / provider |
| Weekly | Security Updates | apt list --upgradable | Available kernel/package updates | Apply critical patches immediately |
| Weekly | Log Review | journalctl -p err -b | Recurring error patterns | Triage errors by severity |
| Weekly | Backup Verification | Restore test on staging | Backups are corrupt or missing | Fix backup pipeline |
| Weekly | Disk I/O Performance | iostat -x 1 5 | await > 10ms or %util > 90% | Investigate I/O bottlenecks |
| Monthly | SSL Certificate Expiry | openssl s_client -connect localhost:443 | Expiry < 30 days | Renew certificate |
| Monthly | User Account Audit | cat /etc/passwd | Unused or unauthorized accounts | Disable or remove |
| Monthly | Filesystem Integrity | sudo fsck -n /dev/vda1 | Filesystem errors | Schedule maintenance reboot |
| Monthly | Firewall Rule Review | sudo iptables -L -n -v | Overly permissive rules | Apply least-privilege model |
Daily Health Checks in Detail
1. Disk Usage (df -h)
Full disks are the most common cause of service outages. Run df -h to check each mounted partition. Pay special attention to /, /var, and /tmp. If any partition exceeds 80% usage, investigate what’s consuming space with du -sh /var/* | sort -rh | head -10. Log files under /var/log are a frequent culprit — configure logrotate with daily rotation and 7-day retention to keep them in check.
2. Memory and Swap Usage
Use free -m to see total, used, and available RAM. If available memory drops below 10% of total and swap usage is non-zero, your server is under memory pressure. Use ps aux --sort=-%mem | head -15 to identify the top consumers. Common fixes include tuning database buffer pools (innodb_buffer_pool_size for MySQL), adding swap space, or upgrading to a VPS plan with more RAM.
3. CPU Load Average
The load average (from uptime or top) represents the number of processes waiting for CPU time. A rule of thumb: if the 5-minute load average exceeds the number of CPU cores, your server is overloaded. Use mpstat -P ALL 1 to check per-core utilization, and top to find CPU-hungry processes. In some cases, upgrading to a VPS with dedicated CPU cores (rather than shared) resolves the issue — compare providers at virtualserversvps.com.
4. Service Health
Run systemctl list-units --type=service --state=running to see all active services. Compare against your known service baseline. If something critical like Nginx, MySQL, or SSH is missing, check systemctl status <service> and journalctl logs. Set up a cron job that emails you if any critical service is not running.
5. Security: Failed SSH Logins
Brute-force SSH attacks are constant on the public internet. Check journalctl -u sshd | grep "Failed password" | wc -l for the last 24 hours. If you see hundreds of attempts, ensure fail2ban is running (fail2ban-client status sshd) and consider switching to key-based authentication with password authentication disabled. Also check /var/log/auth.log for other suspicious activity.
6. Network Latency and Packet Loss
A quick ping -c 10 8.8.8.8 gives you a baseline for latency and packet loss. If you see >1% packet loss or latency spikes above 100ms, check your network interface with ip -s link show eth0 for errors, drops, and overruns. Persistent network issues may point to your VPS provider’s infrastructure — an often-overlooked factor when choosing a host.
Weekly Health Checks
7. Security Updates
Run apt list --upgradable (or yum check-update for RHEL-based) weekly. Pay special attention to kernel, OpenSSL, OpenSSH, and web server updates. Apply critical and high-severity updates immediately. Schedule a weekly auto-update window using unattended-upgrades for Debian/Ubuntu, but always pin the kernel to avoid unexpected reboots.
8. Log Review
Review journalctl -p err -b for errors since last boot. Filter by service if needed (journalctl -u nginx -p err). Look for patterns — repeated errors may indicate configuration problems, resource constraints, or bugs in your application stack. Use logwatch or lnav for more structured log analysis.
9. Backup Verification
A backup you haven’t tested is not a backup. Weekly, perform a restore test on a staging VPS or local VM. Verify that database dumps are valid (mysqlcheck --all-databases), file archives aren’t corrupted (tar -tzf backup.tar.gz), and the restored system boots and serves traffic. Document the restore procedure and recovery time objective (RTO).
Monthly Health Checks
10. SSL Certificate Expiry
Monitor SSL certificate expiration for all domains hosted on your VPS. Use openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -enddate. Set up automated renewal with Certbot/acme.sh for Let’s Encrypt certificates. For paid certificates, add calendar reminders 30 days before expiry.
11. User Account Audit
Review all user accounts in /etc/passwd. Remove or disable accounts for ex-team members, shared service accounts with shell access, and any accounts with sudo privileges that don’t need them. Check sudo cat /etc/sudoers and all files under /etc/sudoers.d/ for overly permissive entries.
12. Filesystem Integrity
Schedule a monthly read-only filesystem check with sudo fsck -n /dev/vda1. If errors are found, plan a maintenance window to run fsck -y in single-user mode. On modern filesystems like ext4 and XFS, corruption is rare but can occur after unexpected power failures or hypervisor issues.
By following this complete health checklist, you’ll catch 90% of common VPS issues before they become outages. For providers that offer managed monitoring, automated backups, and proactive hardware health checks, explore the options at virtualserversvps.com.
Leave a Reply
You must be logged in to post a comment.