Quick Start • WHM Plugin • Features • Troubleshooting • Discord
Integration Guide | Documentation | Sign Up
cPanel servers are high-value DDoS targets: shared hosting, game servers, ecommerce, and high-traffic sites all live on cPanel infrastructure. This integration installs ftagent as a lightweight systemd service on your server, monitors traffic in real time, and reports to the Flowtriq dashboard. A WHM plugin gives you at-a-glance status and service controls directly in your hosting panel.
SSH into your cPanel server as root and run:
curl -fsSL https://raw.githubusercontent.com/Flowtriq/flowtriq-cpanel/main/install.sh | bashThe installer will:
- Verify you are on a cPanel server
- Install ftagent via pip
- Run interactive setup (you will need your Flowtriq API key)
- Start the ftagent service
- Register the WHM plugin
After install, find Flowtriq DDoS Detection in WHM under Plugins.
# 1. Install ftagent
pip3 install ftagent
# 2. Configure (have your API key ready)
ftagent --setup
# 3. Start the service
systemctl enable ftagent
systemctl start ftagent
# 4. Install the WHM plugin
git clone https://github.com/Flowtriq/flowtriq-cpanel.git /tmp/flowtriq-cpanel
bash /tmp/flowtriq-cpanel/whm-plugin/install_plugin.sh
# 5. Verify
systemctl status ftagentThe plugin appears in WHM under Plugins > Flowtriq DDoS Detection and shows:
| Service Status | Running/stopped indicator with uptime |
| Agent Version | Currently installed ftagent version |
| Incidents | Attacks detected in the last 24 hours |
| Server Info | IP address and hostname |
| Controls | Start, stop, and restart buttons |
| Logs | Recent ftagent log output |
| Attack Detection | Volumetric floods, SYN floods, DNS amplification, and dozens of other vectors |
| Alerting | Sub-second notifications when an incident is detected |
| PCAP Evidence | Packet captures for every incident |
| Auto-Mitigation | Upstream integration or local blocking rules |
| WHM Dashboard | Service status, incident count, and logs in your hosting panel |
| Web Dashboard | Full analytics at app.flowtriq.com |
| Requirement | Details |
|---|---|
| cPanel/WHM | Version 100+ (tested on 108, 110, 114) |
| OS | CentOS 7+, AlmaLinux 8+, CloudLinux 7+, Rocky Linux 8+ |
| Python | 3.8 or later |
| Access | Root (WHM) |
| Account | Free Flowtriq account at flowtriq.com |
ftagent service not starting
# Check service status
systemctl status ftagent
# View recent logs
journalctl -u ftagent --no-pager -n 30
# Verify the binary is installed
which ftagentWHM plugin not appearing
# Re-register the plugin
bash /tmp/flowtriq-cpanel/whm-plugin/install_plugin.sh
# Rebuild WHM chrome
/usr/local/cpanel/bin/rebuild_whm_chrome
# Verify plugin files exist
ls -la /usr/local/cpanel/whostmgr/docroot/cgi/flowtriq/No incidents showing in dashboard
- Verify the agent is running:
systemctl status ftagent - Check that your API key is correct:
cat /etc/ftagent/config.json - Confirm the server can reach the Flowtriq API:
curl -s https://api.flowtriq.com/health
CloudLinux or LiteSpeed compatibility
ftagent monitors at the network level, below the CloudLinux LVE container layer. No special configuration is needed. It works with LiteSpeed, Apache, Nginx, or any other web server running on the machine.
curl -fsSL https://raw.githubusercontent.com/Flowtriq/flowtriq-cpanel/main/uninstall.sh | bashOr manually:
systemctl stop ftagent
systemctl disable ftagent
pip3 uninstall ftagent
rm -rf /usr/local/cpanel/whostmgr/docroot/cgi/flowtriq
rm -f /usr/local/cpanel/whostmgr/docroot/cgi/addon_flowtriq.cgi
rm -f /var/cpanel/apps/flowtriq.conf
rm -f /usr/local/cpanel/whostmgr/addonfeatures/flowtriq
/usr/local/cpanel/bin/rebuild_whm_chromeDoes this slow down my server?
No. ftagent uses less than 2% CPU and under 50 MB of RAM. It passively monitors network traffic and does not intercept or modify packets in normal operation.
Can I use this on a VPS?
Yes, as long as your VPS runs cPanel/WHM. Works on dedicated servers and VPS alike.
What attacks does it detect?
Volumetric floods (UDP, ICMP), SYN floods, DNS amplification, NTP reflection, HTTP floods, and dozens of other attack vectors. See the Flowtriq docs for the full list.
Where do I get my API key?
Sign up at flowtriq.com, then go to Settings > API in your dashboard.
How do I update ftagent?
pip3 install --upgrade ftagent
systemctl restart ftagentStart your free 14-day trial at flowtriq.com/signup.
MIT. See LICENSE.
Built by Flowtriq - Real-time DDoS detection and mitigation.