KernelCare – kernel security updates without a reboot
Vulnerabilities in the Linux kernel can normally only be closed with a reboot – and reboots tend to be postponed because they mean downtime. KernelCare resolves this conflict: it applies kernel patches while the server is running, automatically and without a reboot. Your server is protected quickly without interrupting websites and applications.
On our managed servers we use KernelCare as standard, and it is included in the managed price. For root vServers, dedicated servers and the VEP Self-Service Cloud you can purchase the licence on its own from us. KernelCare Plus additionally patches the glibc and OpenSSL system libraries.
- No rebootpatches while running
- Automaticnew patches promptly
- KernelCare Plusglibc and OpenSSL
- Managed serversincluded
How KernelCare protects your server
Live patching of the kernel
kernelKernelCare replaces faulty functions in the running kernel with corrected versions. The server simply keeps running.
Automatic updates
automaticAn agent regularly checks for new patches and applies them automatically. Vulnerabilities do not stay open until the next maintenance window.
Less downtime
availabilityReboots for kernel security updates are largely eliminated. Websites, shops and applications stay available, and maintenance windows are easier to plan.
KernelCare Plus
librariesAlso patches the frequently attacked glibc and OpenSSL libraries while running – without restarting the services that use them.
KernelCare at LCube
- Managed servers: On our managed vServers, in the VEP Cloud Silver and Gold and on managed servers with dedicated hardware we use KernelCare as standard. It is included in the managed price. We set up KernelCare Plus for you on request.
- Root vServers and your own servers: On root vServers, dedicated servers and in the VEP Self-Service Cloud you manage the system yourself. You can purchase the licence for KernelCare or KernelCare Plus on its own from us.
- With Imunify360: If you use Imunify360, KernelCare is already included in the licence.
KernelCare requires its own kernel, as all our vServers, dedicated servers and VEP Cloud servers have.
Licence prices
| Licence | Price incl. VAT | Note |
|---|---|---|
| Licence KernelCare | 4,70 € / month | kernel patches without reboot |
| Licence KernelCare Plus | 7,08 € / month | additionally glibc and OpenSSL |
Licence prices per server and month incl. 19% VAT. On managed servers KernelCare is included in the price.
Frequently asked questions about KernelCare
Why does a server need kernel updates without a reboot?
The kernel is the heart of the operating system, and vulnerabilities in it are particularly critical. Conventional kernel updates only take effect after a reboot, however, and that means downtime. In practice reboots are therefore often postponed, and the server remains vulnerable for days. KernelCare applies the security patches while the server is running. This lets you close vulnerabilities immediately without interrupting your websites and applications.
Is KernelCare already included with my server?
On managed servers at LCube – managed vServers, the VEP Cloud Silver and Gold and managed servers with dedicated hardware – we use KernelCare as standard; it is included in the managed price. If you use Imunify360, KernelCare is also already included. For root vServers, dedicated servers and the VEP Self-Service Cloud you add the licence separately.
What is the difference between KernelCare and KernelCare Plus?
KernelCare patches the Linux kernel while it is running. KernelCare Plus goes one step further and also applies security updates to the glibc and OpenSSL system libraries without restarting the affected services. Almost every program on the server uses these libraries, so vulnerabilities in them have particularly far-reaching consequences. KernelCare Plus is therefore particularly worthwhile for servers with high availability requirements.
Does KernelCare replace regular updates?
No. KernelCare takes care of the kernel and, with KernelCare Plus, of glibc and OpenSSL. All other packages, such as the web server, PHP or the database, still need regular updates, and switching to a new kernel version occasionally does require a reboot. On managed servers we take care of updates for you; for root vServers we offer our update service.
Close kernel vulnerabilities without downtime
We advise you on KernelCare and KernelCare Plus and set up the licence for your server.