Network Settings Change

Review and add network interfaces (NICs), assign IP addresses, and change connection states from the BESTNET-CLOUD server management screen in the portal.

API Specification

The BESTNET-CLOUD client portal provides an HTTP REST API with JSON responses, letting you automate account and service operations. Covers auth and methods.

The AI Agent Told Its Own Operation “No” — AI Guardrails and Three-Layer Governance, a Record of Two DB-Migration Blocks

An AI agent's guardrail blocked its own dangerous operations twice before execution during a DB migration. A three-layer governance model from a real case.

Ten Pitfalls Hit With plink, PowerShell 5.1, and SQL Server 2022 — Entrusting Hands-On Windows Work to an AI Agent (SSH / Encoding / T-SQL)

Ten pitfalls from automating Windows/SQL Server with an AI agent on real machines: plink host-key pinning, CP932/BOM, cmd quoting, and GO-splitting.

Automating the Preprocessing of an Oracle 19c → SQL Server 2022 Migration With AI — a “Not a Single Row of Real Data” Claude Code Field Record

Oracle 19c to SQL Server 2022 migration preprocessing run by an AI agent (Claude Code) without real data: three control principles and zero-error verification.

How to Use the DNS Service (Operations Guide)

Operations guide for the BESTNET-CLOUD DNS service: creating zones in the client portal, adding, editing and deleting DNS records (A, CNAME, MX, TXT and more), DNSSEC, and failover monitoring, with screenshots.

LLM Hallucination Audit Implementation

// BASTION Technical Explanation2026-06-13 LLM Hallucination Audit Implementation Cross-checking the numbers AI writes against real-device logs Author: Hideyuki Chinda / BESTNET LLC Related: The More Beautiful the Design, the More You Doubt It with Real Data — BASTION’s Verification Discipline 1. The Trigger — The AI Wrote “639.” The Real Count Was 0 Some time...

The more beautiful the design, the more we doubt it with real data — BASTION’s verification discipline before going to production

Before putting automated control into production infrastructure, we refute our own hypotheses with real data — BASTION's verification discipline.

Investigated What We Thought Was an Attack Targeting Japan’s Golden Week, Only to Uncover a Global Bot Economy

// BASTION Technical Explanation2026-05-16 I thought we were investigating “attacks targeting Japan’s Golden Week,” but what I found was a global-scale bot economy Author: Hideyuki Chinda / BESTNET LLC Related articles: How multilayer correlation campaign detection works ／ DMZ Agent and verification engine ／ Implementation record: achieving accuracy and decisiveness with local LLM infrastructure log...

Implementation Record: Balancing Accuracy and Determinism with Qwen2.5-14B + GPUStack

// BASTION Technical Explanation 2026-05-14 Implementation Record: Achieving Both Accuracy and Determinism with Qwen2.5-14B + GPUStack Author: Hideyuki Chinda / BESTNET LLC Related Articles: Multi-layer Correlation Campaign Detection Mechanism / DMZ Agent and Verification Engine 1. Introduction — Why Local LLM? The core of BASTION is a local LLM (Qwen2.5-14B). Instead of cutting-edge external LLM...

Design based on the premise of “not trusting Agents” in a DMZ environment vulnerable to compromise

// BASTION Technical Overview 2026-05-13Design Premise: “Don’t Trust the Agent” in a Potentially Compromised DMZ Environment Author: Hideyuki Chinda / BESTNET LLC Related Articles: How Multi-Layer Correlated Campaign Detection Works 1. Introduction — The DMZ Has Security Monitoring Blind Spots For cloud and hosting service providers, public web servers, reverse proxies, and other DMZ (demilitarized...

Mechanism of Multi-Layer Correlation Campaign Detection

// BASTION Technical Explanation2026-05-10 How Multi-Layer Correlation Campaign Detection Works Visualizing attack scenarios invisible in single-device logs through cross-layer tracing Author: Hideyuki Chinda / BESTNET LLC Related Articles: Evolving BASTION from a “Security Product” to an “AI Ops Platform” 1. Introduction — Why “Single-Device Logs” Are Not Enough In security log monitoring operations, judgments about...

The Story of Local LLM Fabricating Monitoring Report Numbers and Countermeasures

The Story of a Local LLM Fabricating Numbers in Monitoring Reports, and How We Fixed It BASTION’s AI monitoring report stated “639 authentication failures.” In reality, there were 0. This is a record of how we addressed the unavoidable hallucination problem in local LLM-based security monitoring through sampling inspections and multi-layer fallback mechanisms. When AI...

We built a mechanism to detect attacks invisible to individual systems through cross-system log correlation

2026.04 / Tech Blog / BASTION Building a System to Detect Attacks Invisible at the Individual Level Through Cross-System Log Correlation Firewall port scans, VPN authentication failures, application login attempts. Each individual event has low severity. However, when the same IP appears simultaneously across these three layers, it’s not a coincidence—it’s an attack campaign. We...

Implementing an AI Active Firewall on a Web Server

2026.04 / Tech Blog / BASTION Implementing an AI Active Firewall on a Web Server We implemented a system where a local LLM analyzes unknown bot patterns and spam requests that cannot be detected by Fail2Ban’s fixed thresholds every 15 minutes and automatically blocks them. We added an AI analysis layer on top of existing...

Graduating from Slack Approval Gates to Fully Automated Blocking of Attack Source IPs

2026.04 / Tech Blog / BASTION Graduating from Slack Approval Gates: Moving to Fully Automated Attack Source IP Blocking In our previous article, we implemented reactive defense with a Slack approval gate method, but the approval process via AI agents had structural problems. By switching to a direct pipeline that bypasses LLM, we transitioned to...

AI detects attack → Slack approval → automatic firewall block setup

2026.04 / Tech Blog / BASTION Built a System Where AI Detects Attacks → Slack Approval → Automatic Firewall Block Added “automated response” to BASTION’s “detect → notify” loop. When AI detects a port scan, it posts a block proposal to Slack, and upon human approval, a block rule is immediately added to the OPNsense...

We tried migrating PRTG network device monitoring definitions to Zabbix using Claude Code [Continued]

Claude Code を使って PRTG のネットワーク機器監視定義を Zabbix へ移行してみた【続編】 Migration / Monitoring Using Claude Code to Migrate PRTG Network Device Monitoring Definitionsto Zabbix [Sequel] Following the previous UPS edition, this time we migrated an environment with a mix of switches, routers, and wireless APs. We leveraged the uniformity of all devices being from the same vendor and...

We built a system where AI automatically detects device types and starts monitoring just by pointing syslog to it

2026.04 / Tech Blog / BASTION Building a System Where AI Automatically Identifies Device Types and Starts Monitoring Just by Pointing Syslog The moment a new device starts sending syslog, the LLM reads log samples and automatically determines “this is a Windows client” or “this is a firewall.” It applies the appropriate monitoring template and...

A Story of AI Log Monitoring Detecting “Account Lockout Caused by a Hung PC”

2026.04 / Tech Blog / BASTION How AI Log Monitoring Detected “Account Lockout Caused by a Hung PC” BASTION’s Windows client monitoring detected an abnormal lockout of an internal human account. The source IP was identified via Slack, and the cause was found to be a hung terminal. From detection to root cause identification took...

Migrating PRTG UPS Monitoring Definitions to Zabbix in 30 Minutes Using Claude Code

Migration / Monitoring I Migrated PRTG UPS Monitoring Definitions to Zabbix in 30 Minutes Using Claude Code Just hand over one backup file. No API server required, no need to write scripts from scratch. The story of how it actually worked when I delegated everything to an AI agent. Claude Code PRTG Zabbix APC UPS...

Automating Health Monitoring for Local LLM Inference Servers

2026.04 / Tech Blog / BASTION Automating Health Monitoring for Local LLM Inference Servers Detecting when GPUStack “appears to be running but cannot perform inference.” We built a system that runs a two-stage health check + Slack notifications + Zabbix integration every 5 minutes. What Was the Problem? The BASTION system introduced in our previous...

Building a System for Automated Infrastructure Log Analysis with Local LLM

2026.04 / Tech Blog / BASTION How We Built a System for Automatic Infrastructure Log Analysis with a Local LLM AI automatically analyzes logs from firewalls, authentication infrastructure, switches, load balancers, and web servers every 15 minutes, detecting anomalies, determining severity, and suggesting responses via Slack notifications. Log data is never sent outside the system....

I Tried Installing OpenClaw on Ubuntu 24.04

Infrastructure / Self-hosted AI Agent Installing OpenClaw on Ubuntu 24.04 Following Windows Server 2019 and Windows 11, this time we validated the OpenClaw installation on Ubuntu 24.04. The Linux native environment is officially supported and significantly simpler compared to Windows environments. However, there was a pitfall: remote dashboard access requires device pairing approval. We’re publishing...

I Tried Natively Installing OpenClaw on Windows 11

Infrastructure / Self-hosted AI Agent Native Installation of OpenClaw on Windows 11 Previously, we verified native installation of OpenClaw on Windows Server 2019. This time, we tried the same native route on Windows 11. Will the various obstacles we struggled with on Server 2019 be reproduced on Windows 11, or will it run smoothly——we are...

GPUStack v2.1.1: Resolving All Multi-Node Inference Startup Issues

Tech Blog GPUStack Multi-Node vLLM Tesla V100 TroubleshootingGPU Cluster Operations Notes GPUStack v2.1.1 Multi-Node Inference Startup Issues – Complete Resolution Report Complete record of running Qwen2.5-32B on 2 nodes with 4×V100 With GPUStack v2.1.1 + vLLM backend, we attempted multi-node distributed inference using 2 GPU workers (each Tesla V100-PCIE-32GB × 2), and encountered successive different...

The approach and pitfalls when upgrading Dify from v1.9.2 to v1.13.3

Infrastructure / Self-hosted AI Platform How to Upgrade Dify from v1.9.2 to v1.13.3 and Common Pitfalls Upgrading a self-hosted Dify becomes increasingly complex the more custom adjustments your legacy docker-compose.yaml has accumulated. This time, we documented the process for updating Dify running on Docker Compose from v1.9.2 to v1.13.3, with sensitive information masked for public...

Steps to Connect Bestnet Cloud and GPU-VPS via 10G Private Network and Implement a GPUStack Cluster

How-to BESTNET-CLOUD GPU-VPS GPUStack 10G Private Network NFS Shared CacheTech Blog / Infrastructure Build Guide Connecting Bestnet Cloud and GPU-VPS via 10G Private Network to Implement a GPUStack Cluster A configuration that separates Bestnet Cloud as the control plane and GPU-VPS as inference workers, centralizing model files with shared NFS cache. We’ve organized this how-to...

Migration Story: GPUStack from v0.7.1 to v2.1.1

Tech Blog GPUStack Docker Migration NFS Shared Cache GPU Cluster Operations Notes Migrating GPUStack from v0.7.1 to v2.1.1 Upgrading without breaking the shared NFS model cache configuration A record of migrating a GPUStack environment operated on the old installation script basis to Docker-based v2 series. While maintaining a configuration where the management node and NFS...

Installing NVIDIA Driver and CUDA 12.9 for Tesla V100 on Ubuntu 24.04 VM in Proxmox VE

Proxmox VE / Ubuntu 24.04 / NVIDIA CUDA Installing NVIDIA Driver and CUDA 12.9 on Tesla V100 in Ubuntu 24.04 VM on Proxmox VE This is a guide for PCIe passthrough of Tesla V100 to an OVMF virtual machine on Proxmox VE and installing NVIDIA driver and CUDA Toolkit 12.9 on the Ubuntu 24.04 side....

Setting Up Redmine on BESTNET-CLOUD

BESTNET Tech Blog Setting Up Redmine on BESTNET-CLOUD Ubuntu 24.04 / Apache + Passenger / PostgreSQL / HTTPSServer setup guide for launching Redmine 6.1 series This article walks through building Redmine on an Ubuntu 24.04 LTS virtual machine provisioned on BESTNET-CLOUD,and takes you through the steps until you can log in for the first time...

Affiliate Terms of Service

Affiliate Program Terms BESTNET LLCAffiliate Program Terms of Use These Terms set forth the conditions for using the affiliate program(the “Program”) operated by BESTNET LLC (“we” or “us”). Affiliate applicants and participantsagree to these Terms when using the Program. Effective Date:March 14, 2026Operator:BESTNET LLC Participation MethodReview and Approval RequiredTracking Period30 days in principleCommission Confirmation30+ days...

Step-by-step guide to setting up a WireGuard VPN on OPNsense and connecting from a Windows client

Network How-To A practical guide for configuring OPNsense at home, branch offices, or corporate sites as a WireGuard server and connecting securely from Windows PCs. This article assumes a split tunnel configuration for the purpose of “accessing a corporate LAN or home LAN.” The procedural framework follows the official OPNsense WireGuard Road Warrior Setup, general...

OPNsense Template Initial Setup Procedure

Setup Guide OPNsense Template Initial Setup Procedure Procedure for safely starting use after initial boot. Establish WAN first, then configure step by step while securing WebGUI with HTTPS. WAN-First SetupHTTPS WebGUISSH only when necessaryLAN can be added later Recommended: Until the first WebGUI login is complete, proceed with WAN-side NIC only to prevent WAN /...

OpenWrt Initial Setup Procedure

Setup Guide Initial Setup Procedure for the Provided OpenWrt Template This procedure allows you to safely start using the system after the first boot. Configure the WAN first, then protect LuCI with HTTPS while gradually building the configuration. WAN = eth0Work LAN = eth1HTTPS GUI (LuCI)SSH only when necessary Target and Prerequisites Target: Provided OpenWrt...

SSL Certificates: Renewal and Billing (Invoice Issuance Timing / Payment Deadline / Handling of Overdue Payments)

This page clarifies the invoice issuance timing, payment deadline, and handling of overdue payments for domain name services provided by BESTNET LLC. ※Domains are subject to rules from third-party organizations such as registries and registrars. Final registration availability, recovery availability, and timeframes are governed by third-party rules. ※Time references are based on Japan Standard Time...

Domain: Renewal & Billing (Invoice Issuance Timing / Payment Deadline / Handling of Overdue Payments)

This page summarizes key points regarding domain services provided by BESTNET LLC, including invoice issuance timing for renewals, payment deadlines, and procedures for overdue payments. 1. Important Matters Domain registration, renewal, and transfer are processed in accordance with the rules of upper-level registrars/registries and other third parties.If third-party rules conflict with information displayed by us,...

Case Studies

Under preparation

Information Based on the Specified Commercial Transaction Act

Display Based on the Act on Specified Commercial Transactions (特定商取引法) 【Seller】 BESTNET LLC 【Chief Operating Officer】 Representative Member: Hideyuki Chinda 【Address】 161-1 Kitanagane, Onuki, Tajiri, Osaki City, Miyagi 989-4302, Japan 【Phone Number】 0229-25-8716 Technical support is only accepted via tickets in the client portal. Except in cases of individual contracts, we do not provide support...

Resolving the issue where pipeline_parallel=2 crashes on V100

  Tech BlogGPUStackvLLMTesla V100Multi-Node GPU Cluster Operation Notes Resolving pipeline_parallel=2 Crashes on V100 andAchieving Stable Operation with tensor_parallel=4 + 64K Context While running Qwen2.5-14B-Instruct on multi-node (Tesla V100×4) with GPUStack v2.1.1 + vLLM 0.17.1, we encountered crashes with AttributeError in _TorchTensorAcceleratorChannel every time a chat was submitted. The root cause was incompatibility between pipeline_parallel and...

Trying It in a Deprecated Environment: Installing OpenClaw on Windows Server 2019

Tried Running in an Unsupported Environment: Installing OpenClaw on Windows Server 2019 (Complete Edition) Infrastructure / Self-hosted AI Agent Tried Running in an Unsupported Environment: Installing OpenClaw on Windows Server 2019 (Complete Edition) The official recommendation for OpenClaw is WSL2, but Windows Server 2019 does not support WSL2. Nevertheless, we persevered and attempted to run...

DNS record management for external domains outside our control

DNS SERVICE Guide Overview This guide explains how to manage DNS records for external domains not managed by us (domains registered with another registrar) from our Client Area portal. The key point is to create a zone (domain to be managed by DNS) in the Client Area, and migrate/create the necessary DNS records in advance,...

Certificate Issuance and Implementation

Technical Tutorial How to Install a PEM Format SSL Certificate on Ubuntu 24 + Apache + WordPress A general tutorial for installing a PEM format SSL certificate issued from a Certificate Authority (CA) management interfaceinto an Ubuntu 24 + Apache + WordPress environment. Ubuntu 24ApacheWordPressPEM SSL Disclaimer This article is a technical tutorial that explains...

DNS Service – Plan Upgrade/Downgrade

DNS SERVICE Guide Overview This document explains the procedure for upgrading / downgrading a DNS SERVICE plan from the client portal. Note Screenshots are from a sample environment (e.g., Basic → Start upgrade). The displayed plan names, amounts, and billing timing will vary depending on your contract details and settings. STEP 1 Select Target Service...

Switching to BESTNET DNS Service

DNS SERVICE Migration Guide Overview This procedure document summarizes the steps to switch from standard domain registrar-provided DNS (e.g., dns*.name-services.com) to our DNS service (e.g., dns*.cloudns.net) on our client portal (BESTNET-CLOUD). The migration process consists of two main parts: PHASE 1 DNS Record Migration Import existing A / CNAME / MX / TXT records, etc.,...

Managing WHOIS Protection

Domain Management Guide This procedure explains how to turn WHOIS protection (WHOIS privacy) on/off for a domain in the client portal. Overview When WHOIS protection (privacy) is enabled, the registrant information (name, address, email, etc.) displayed in WHOIS data is replaced with the registrar’s privacy information (or hidden), allowing you to suppress the public disclosure...

Operations for Invoices, Issuance Timing, and Payment Deadlines

Billing Guide Invoice Confirmation, Payment, and PDF Save/Print This guide covers the basic operations for invoices in the Client Portal, as well as invoice issuance timingand the concept of the Due date. Invoice ConfirmationPay NowPDF SaveDue date ※ Screen displays and menu names may differ depending on your contract plan or permissions. ※ Domains and...

Update services manually

Service Renewal Guide The client portal has a “Manually Renew Service” feature that allows you to issue renewal invoices in advance at any time. Overview The client portal has a “Manually Renew Service” feature that allows you to issue renewal invoices in advance at any time. What this operation does When you perform this operation,...

Create Server from Template

Overview This procedure describes how to create a new server (virtual machine) using an existing template in the Client Portal (example screen: BESTNET-CLOUD). Please note: This procedure is created with the use of generative AI and similar tools, so annotations (arrows, frames, numbers, etc.) in screen captures may appear slightly offset from the actual screen....

Account Credit Handling Policy

Enacted: January 11, 2026 Effective: January 14, 2026 Last Updated: February 17, 2026 Article 1 (Purpose) These provisions set forth the granting, use, application, adjustment, expiration, refund (final settlement), and other handling of account credits (hereinafter “credits”) in hosting services and ancillary services (hereinafter “the Service”) provided by BESTNET LLC (hereinafter “we”). Matters not stipulated...

Create a new server

Overview This procedure explains how to create a new server (virtual machine) from the client portal. In this procedure, you will create a server by selecting an ISO. When you select an ISO, OS installation via the console will be required after creation. Note: If you select an OS template, you can start using a...

Team Management

Overview This document provides basic operating procedures for Teams management in the client portal. Create teams, configure contacts and privileges associated with the team, and invite members using invite codes. This document is created with the assistance of generative AI and other tools, so annotations (arrows, frames, numbers, etc.) in screen captures may appear slightly...

Subuser Management

Overview This procedure describes how to add, configure permissions, edit, and delete “sub-users (contacts)” in the client portal. Please note: This procedure was created with the assistance of generative AI, so annotations (arrows, boxes, numbers, etc.) in screen captures may be slightly misaligned from the actual screens. When performing operations, please prioritize the on-screen display...

Client Portal Security Settings

Security Settings Guide This manual outlines the procedures for configuring security-related settings (multi-factor authentication, allowed IP access) in the client portal. Overview In the client portal, you can enhance account security by configuring Multi-Factor Authentication (MFA) and Allowed IP Access. Prerequisites An account that can log in to the client portal To set up multi-factor...

Virtual machine scale-up

Overview This explains the procedure for upgrading resources (e.g., RAM, disk capacity) of a VPS under contract. This procedure describes the flow of executing Upgrade from the More menu on the service details screen. Prerequisites Ability to log in to the client portal The target VPS (service) must be “Active” Ability to use a payment...

Privacy Policy

Article 1 (Scope of Application and Order of Precedence) This Policy applies to the handling of personal data and other information that we acquire, use, store, provide, or otherwise process in connection with the provision of this Site and this Service. If we establish separate provisions or notices regarding privacy or information management in relation...

Installing and setting up an OpenSense virtual router from an ISO file

Prerequisites: When using BESTNET Cloud, you can install an OPNsense virtual router from the standard provided ISO file. This procedure describes the flow from virtual machine creation to ISO boot installation and initial configuration. STEP1. Virtual Machine Creation You can create an OPNsense virtual machine by proceeding in the following order. 1. Create a new...

BESTNET Prior Support Service Agreement

Terms and Conditions Article 1 (Purpose) These terms and conditions govern the paid priority technical support service “BESTNET Prio Support” provided by us, and define the matters that both we and the Customer must comply with in the contract concluded between us. Article 2 (Service Content) This contract is concluded at the time the Customer...

Install Nvidia Driver and CUDA on Ubuntu 24

Client Portal: Add Account Credit (Funds)

Account Credit Addition Guide Instructions for adding “Account Credit (Funds)” in the client portal that can be used for future orders and invoice payments. Overview From the client portal, you can add credit that can be used for future orders and invoice payments by depositing funds into your account in advance. Prerequisites You must be...

Terms of Service

Basic Information Established: 2025-12-24 Revised: 2026-02-19 Effective Date: 2026-02-19 Service Provider: BESTNET LLC (hereinafter “the Company”) Address: 161-1 Kitanagane, Aza Onuki, Tajiri, Osaki City, Miyagi Prefecture Contact: General Support: Support Tickets Abuse Reporting: This Form Article 1 (Application) These Terms set forth the conditions of use for all services provided by the Company, including virtual...

Private Network NAT Environment Using Virtual Router

private network

Private Network Configuration Guide This guide explains how to order a private network (Private IP / Subnet) on the client portal and assign private IPs to BESTNET-CLOUD and BESTNET-VPS servers. Overview This procedure explains how to order a private network (Private IP / Subnet) on the client portal and assign private IPs to BESTNET-CLOUD and...

Creating Virtual Machine Templates

Overview This procedure describes the flow from creating a template based on an existing instance in the client portal to confirming that the status becomes Ready. Please note: This procedure document is created with the assistance of generative AI and other tools. Annotations in screen captures (arrows, frames, numbers, etc.) may be slightly misaligned from...

SSL Certificate Reissue

Regarding Domain and SSL Certificate Renewal and Billing

Domain Application

Domain Registration Guide This guide explains the procedure for ordering (registering) a new domain from the Client Portal. Screens are samples. Overview This procedure explains how to order (register) a new domain from the Client Portal. When ordering, please enter names, addresses, company names, etc. used in the order screen and domain registration information in...

Check Expiration Date and Status

Purchasing an SSL Certificate

OV SSL Issuance Guide This guide outlines the process from purchasing an OV SSL certificate through the client portal, approving Domain Control Validation (DCV), and checking the issuance status. Important When applying for OV SSL, you must enter contact information in English (half-width alphanumeric characters). Including Japanese (full-width) characters may result in errors. OV SSL...

Email forwarding feature

Domain Management Guide Overview This manual explains how to add, change, and delete domain email forwarding from the client portal. Email forwarding diagram ACTION 1 Add Automatically forward emails sent to your domain to an existing email address. ACTION 2 Change Edit and save an existing forwarding destination address. ACTION 3 Delete Clear the target...

Registering Custom Nameservers

Domain Management Guide Overview This procedure describes how to switch the nameservers for a target domain from our client portal to external DNS servers (external DNS hosting). When you change nameservers, the DNS record reference destination (authoritative DNS) switches to the external DNS side. After the switch, DNS records configured on our side will no...

Cloud Resource Upgrade

Client Portal Guide Cloud Service Resource Modification Procedure This guide summarizes the procedure for upgrading (increasing) / downgrading (reducing) resources(CPU cores, memory, NVMe SSD, backup retention generations, snapshot limit, etc.)of contracted cloud services on the client portal. UpgradeDowngradeCredit RefundResource Modification Notice: This procedure document is created using generative AI and other tools, so annotations (arrows,...

VPS – New Application Procedure

Overview This procedure document summarizes the operational steps for placing a new order for VPS (NV Plan) from the client portal. Preparation Email address to be used for the order (for new registration) Login password (for new registration) SSH public key (OpenSSH format, if you want to log in with public key authentication) Payment method...

DNS record update management

DNS Management Guide This article explains how to manage (add, edit, delete) DNS records (A / CNAME / MX / TXT, etc.) in the client portal. Important DNS records edited on this screen will be reflected externally only when the nameservers (NS) for the target domain are currently pointing to this DNS management. Example: If...

Domain Contact Management

Domain Contacts Configuration Guide How to Change Domain Contacts This procedure explains how to change Domain Contacts (Registrant Contact / Administrative Contact / Technical Contact / Billing Contact) for a target domain from the client portal. In this manual, domain contact terms are always written in English (such as Registrant Contact). Overview You can change...

Opening a Ticket

Client Portal Guide Client Portal: Support Ticket Creation Guide This guide explains how to create (open) a new support ticket from the Client Portal. Notice: This guide is created with the assistance of generative AI and other tools. Therefore, annotations (arrows, boxes, numbers, etc.) in screen captures may appear slightly offset from the actual screen....

Bandwidth Upgrade

VPS Bandwidth Upgrade Guide This procedure document outlines the steps to increase the transfer capacity (“Monthly Bandwidth Limit [GB]”) of your VPS from the client portal. Note The wording and layout of screens may vary depending on the service type, contract details, and display language. Target Audience Users who want to increase the monthly bandwidth...

Virtual Machine Scaling and Upgrades

Important: This procedure assumes that the cloud instance has sufficient resource capacity. If the cloud instance is short on resources, please refer to the following article to add resources in advance. Cloud Resource Upgrade Overview This procedure describes how to change (scale) the CPU cores and memory (RAM) of a cloud virtual machine (instance) from...

Client Portal Operating Procedures (Log Viewing・Resource Graphs)

Client Portal Guide Client Portal: Log and Usage (Resource) Confirmation Guide This guide explains how to view logs and check resource graphs (usage) on the client portal. Notice: This guide is created using generative AI and other tools, so annotations (arrows, frames, numbers, etc.) in screen captures may be displayed slightly off from the actual...

Snapshot Management

Client Portal Guide Client Portal: Snapshot Operations Guide This document summarizes the procedures for creating, deleting, and scheduling VPS snapshots in the client portal. Prerequisites Ability to log in to the client portal Access permissions to the target service (e.g., VPS) Snapshot creation and retention limits depend on your contract plan/limit settings Creating a Manual...

Firewall Settings Change

Firewall Configuration Guide This procedure guide explains how to add, edit, and delete Firewall rules for VPS / servers from the client portal, and configure default policies (Input / Output Policy) and log settings as needed. Important Outbound communications may require permission application. For details, please refer to this page. Overview Rules: Add, edit, and...

SSH Key Registration and Management

Purpose This procedure enables secure login to cloud hosts using SSH public key authentication by performing public/private key generation → public key registration on the cloud → login verification with private key. About Public Keys and Private Keys Public Keys and Private Keys are key pairs used for encryption and authentication. Public keys can be...

Backup & Restore

Purpose This document outlines the procedures for restore (recovery) from backup and backup schedule configuration that can be performed on the client portal. Prerequisites You can log in to the client portal You can open the target VPS/VM (service) screen The backup you want to restore has already been created (displayed in the list) Open...

Virtual machine password reset

Client Portal Guide Client Portal: VPS Password Reset Guide This guide explains how to reset the VPS (server) root password on the Client Portal. Notice: This guide is created with the assistance of generative AI and other tools. As a result, annotations (arrows, boxes, numbers, etc.) in screen captures may appear slightly misaligned from the...

Managing Register Lock

Domain Management Guide Overview This guide explains how to turn the domain Registrar Lock on/off (lock/unlock) in the client portal. Turning the Registrar Lock on helps prevent unauthorized domain transfers by third parties. If you need to transfer your domain, please change it to off beforehand. STATE 1 On Helps prevent unauthorized transfers by third...

Domain Transfer

BESTNET-VPS Bandwidth Limits, Transfer Volume, and Additional Traffic Fees

Last updated: 2025-12-19 1. Port Speed (Bandwidth) Each VPS network is 1Gbps shared (best effort) Since this is a shared environment, 1Gbps is not guaranteed at all times 2. Monthly Transfer Volume (Total Inbound and Outbound) Transfer volume for this service is measured as outbound + inbound combined (IPv4/IPv6 aggregated). 2.1 Standard Transfer Volume Limits...

Backup/Snapshot Notes

Last updated: 2025-12-19 1. Important Points to Understand Backup: “Insurance” for recovery from failures and mistakes (stored in a separate location) Snapshot: A “checkpoint” for temporary safekeeping and rollback before updates (primarily for short-term use)Snapshots are convenient, but they do not replace backups. 2. Standard Backup (Automatic, Daily) 2.1 Standard Specifications Daily automatic backup: 1...

The Story of Turning a Team into a “Pseudo-BMI”

※The content of this article is based on the author’s personal experience and views, and does not represent the official views of any organization or specific vendor. Additionally, we do not guarantee that the methods introduced here are effective and safe for all organizations. When actually implementing these methods, please make your judgment based on...

Lightweight Zero Trust Operations Model Implementation Guide

※This article is a compilation of discussions and experiences within our organization based on general security principles. It does not represent the official views of any specific company or organization, nor the internal implementation of any specific vendor. ✅ Disclaimer The content of this article introduces general approaches to the design and operations of information...

Common Terms of Use (Domain Name Registration / SSL Certificate Issuance Services)

Terms of Service These Terms of Service set forth the conditions of use for domain name registration services and SSL certificate issuance services. Last Updated February 19, 2026 Effective Date February 19, 2026 Provider BESTNET LLC (hereinafter “we”) Address 161-1 Kitanagane, Onuki, Tajiri, Osaki City, Miyagi Prefecture Contact General Support: Support Tickets / Abuse Reports:...

Bandwidth Limit Upgrade

Currently under construction

AgentSeek WebGUI Setup Procedure (Windows 11)

STEP1. Overview Flow Enable WSL 2 + Required Windows Features Install Docker Desktop (WSL 2 Backend) Clone AgentSeek repository and prepare Python virtual environment (venv) Start “Frontend + Redis + SearxNG” with Docker Compose Manually verify FastAPI Backend → Convert to Windows Service with NSSM Change BACKEND_URL to host.docker.internal:8000 for frontend integration Restart test &...

Ubuntu 24+Firecrawl / Bull Board Upgrade Procedure

(Ubuntu 24 — Single Node / systemd / Playwright MS) Prerequisites Already built in /home/firecrawl, and systemd services firecrowl-server・firecrowl-workers・firecrowl-playwright are running Node.js 20 & pnpm 10 installed Redis running on localhost:6379 STEP 0 Stop Services & Backup sudo systemctl stop firecrowl-server firecrowl-workers firecrowl-playwright cd /home sudo cp -r firecrawl firecrawl_backup_$(date +%Y%m%d) STEP 1 Update Repository...

Install and set up OpenSE virtual router from ISO file

Prerequisites: When using BESTNET Cloud, you can install the OPNsense virtual router from the standard-provided ISO file. This procedure covers the flow from virtual machine creation through ISO boot installation to initial configuration.   STEP1. Creating a Virtual Machine Follow the steps below to create an OPNsense virtual machine. 1. Create a new server 2....

Replacing AI Engine’s OpenAI Endpoint with Dify’s OpenAI-Compatible API Endpoint

STEP1: Always obtain a backup before updating Save the current openai.php as a file that has already been modified to a working state. For example: save a local copy with a name like openai.php-dify. We recommend taking a full backup by backing up either the entire WordPress installation or the plugins folder, so that you...

Workaround for Dify Plugin Daemon Thread Leak

Overview of the Issue Symptoms: When indexing a large number of knowledge base documents, the plugin daemon (plugin_daemon) continues to spawn countless threads, and eventually at around “30,000” new threads can no longer be created. The container logs show a can't start new thread error, and the service freezes. Estimated Cause: The container/cgroup v2 pids.max...

Virtual machine rebuild

This document outlines the procedure for rebuilding (reinstalling) a VPS from the client portal. Overview “Rebuild” = Reinstalls the VPS with the selected OS template. When executed, all data on the disk will be deleted (this cannot be undone). Important: When you execute a rebuild, existing data on the server will be lost. If you...

Install Dify on Ubuntu 24.04 and enable HTTPS

STEP1. System Requirements Ubuntu 24.04 Docker, Docker Compose Domain (example: test.bestnetllc.co.jp) Let’s Encrypt SSL certificate STEP2. OS and Docker Installation Update OS sudo apt-get update sudo apt-get upgrade -y sudo apt-get autoremove -y sudo apt-get autoclean sudo reboot Install Docker and Docker Compose sudo apt-get update sudo apt-get install -y ca-certificates curl gnupg lsb-release curl...

ISO Upload/Mount

Client Portal Guide Client Portal: ISO Upload and Boot from ISO Operation Guide This guide explains the process of uploading an ISO image on the client portal, mounting the ISO to a VPS (Boot from ISO), and booting from it. Notice: This guide is created with the assistance of generative AI, so annotations (arrows, boxes,...

Running an app created with Bolt.new/diy on Ubuntu for production

Overall Flow Set up the development environment Obtain source code and install dependent packages Verify operation on the development server Create a production build Configure nginx to serve built files HTTPS support (if necessary) Auto-start on restart (if necessary) The following procedures provide specific work examples. STEP1. Development Environment Setup STEP1.1 Install Node.js and npm...

virtual machine console

Client Portal Guide Client Portal: Console (noVNC) Operation Guide This guide summarizes the steps to launch the server console (noVNC) from the client portal and access the OS login screen. Prerequisites You must be logged into the client portal You must be able to open the service details screen for the target VPS Procedure 1....

Install FireCrawl on Ubuntu 24

This procedure sets the following configuration as the final goal. FireCrawl (API server & workers) installation on Ubuntu 24 Node.js installed system-wide, with pnpm used globally Rust toolchain (rustup, etc.) deployment, and building FireCrawl’s Rust-based HTML conversion library (html-transformer) Installation of Playwright dependency packages and creation of a custom Playwright microservice script Creation of two...

Virtual Machine Power Operations

Overview This document explains the procedure for performing power operations on a server from the client portal (server details screen). Target Screen (Server Details Screen) Select the target VPS/Cloud from Services in the left menu and open the Server Details screen (e.g., NVPS663). Preparation and Precautions Before shutting down or restarting, stop any running processes...

Installing NVIDIA Driver and CUDA on Rocky Linux 9.3

Installation Steps STEP1. Add the Official NVIDIA Repository Register the official NVIDIA CUDA repository for Rocky Linux 9 with your system. Running the following command will add the CUDA (NVIDIA) repository. sudo dnf config-manager --add-repo http://developer.download.nvidia.com/compute/cuda/repos/rhel9/$(uname -i)/cuda-rhel9.repo After execution, the NVIDIA repository definition file will be added to /etc/yum.repos.d/, and you will then be able...

OS Template List

OS Template List You can immediately deploy virtual machines from the following OS templates.Our templates are based on server use cases (minimal configuration / no GUI). Important: Standard Security Specifications (Common to All Templates) Our templates maintain the following as standard specifications to ensure initial safety and consistent operations. 1) OS Internal Firewall (Initial Configuration)...