Infrastructure
Our infrastructure, described honestly.
Many hosts describe their infrastructure with unverifiable superlatives. Here is ours as it is: what we own, where it is, and how your data moves through it. If a detail intrigues you, ask — we like talking about it.
The servers, in Montreal.
The heart of our infrastructure is a Dell PowerEdge R640 server hosted in a Montreal data centre, which we administer ourselves. It is virtualized with Proxmox VE: each service (web hosting, email, telephony, billing) lives in its own virtual machine, isolated from the others.
Data storage is on NVMe, mounted on ZFS — a filesystem that checks data integrity continuously and detects silent corruption before it becomes loss.
Client sites run under Debian with the HestiaCP panel: PHP 8.x, MariaDB, nginx, Let's Encrypt certificates renewed automatically.
Technical sheet:
- Dell PowerEdge R640, 2× Xeon Gold 6152 (44 cores / 88 threads)
- Data storage: mirrored NVMe, ZFS pool
- Virtualization: Proxmox VE, one VM per service
- System: Debian 12
- Hosting panel: HestiaCP
- 10 GbE network card
DNS: four cities, a serious architecture.
Your DNS zones are managed on a hidden master server in Montreal, invisible to the public. They are replicated automatically to four public servers: Montreal, Toronto, Paris and Seattle. If one point of presence falls, the other three keep answering.
All zones are signed with DNSSEC: visitors get cryptographic assurance that the DNS answer comes from us and was not tampered with in transit.
What we do not claim: this is not an “Anycast” network (the same IP announced everywhere). It is classic geo-distribution — robust and verifiable — and we prefer to describe it for what it is.
Public DNS servers:
- ns1.lyshosting.ca — Montreal, Canada
- ns2.lyshosting.ca — Toronto, Canada
- ns3.lyshosting.ca — Paris, France
- ns4.lyshosting.ca — Seattle, United States
Encrypted and authenticated zone transfers (TSIG), automated DNSSEC signing.
Where your data goes, exactly.
Your sites and email
In Montreal, on our servers. That is where your files, databases and mailboxes live.
Your backups
Backup copies are encrypted before transfer and the storage provider does not hold our decryption keys. They are stored off-site with a provider located in the United States.
DNS
DNS zones (public data by nature) are replicated on our four servers, including two outside Canada, for resilience.
This distribution is described in our terms and privacy policy — useful if you document your own Law 25 compliance.
Monitoring and security.
Continuous monitoring
Every service is checked continuously by our monitoring system, with immediate alerts to the team. Our status page is public: you see the same thing we do.
Defence in layers
Firewall on every machine, automatic blocking of intrusion attempts, administrative access by keys with multi-factor authentication, TLS encryption everywhere. Details on the Security and backups page.