---

Last modified: March 15, 2024

Overview

This document lists the services (daemons) that exist on cPanel & WHM servers. A daemon is a program that runs as a background process, rather than under a user’s control.

• To view a complete list of daemons on your server, run the WHM API 1 servicestatus function.

• To view a list of daemons that you can enable and monitor via the interface, use WHM’s Service Manager interface (WHM » Home » Service Configuration » Service Manager).

Services

apache_php_fpm— PHP-FPM service for Apache

This daemon improves the performance of EasyApache 4’s PHP-based internal applications.

clamd — ClamAV Daemon

This daemon scans your server for malicious programs.

cpanel-dovecot-solr — IMAP Full-Text Search (FTS) Indexing (Powered by Apache Solr™).

This daemon provides fast search capabilities for IMAP mailboxes.

cpanel_php_fpm — PHP-FPM service for cPanel Daemons

This daemon improves the performance of PHP-based internal applications that ship with cPanel & WHM, such as:

• phpMyAdmin
• phpPgAdmin
• Webmail applications
• Any third-party PHP application that the user installs.

cpanellogd — cPanel Log and Bandwidth Processor

This daemon compresses and archives cPanel & WHM log files at the end of each month into a single file for each type. For more information, read our cPanel Log Rotation Configuration and The cPanel & WHM Log Files documentation.

cpdavd — cPanel DAV Daemon

This daemon enables a set of extensions that allow users to manage their websites remotely.

In cPanel & WHM version 120 and later, this daemon also allows users to access and manage their calendars and contacts. For more information, read our cpdavd Service Replaces CCS Plugin documentation.

cpgreylistd — cPanel Greylisting Daemon

This daemon manages Greylisting, a service that protects your server against spam from sources that your server does not recognize. For more information, read our Greylisting documentation.

cphulkd — cPHulk Daemon

This daemon manages cPHulk Brute Force Protection, a service that provides protection for your server against brute force attacks.

cpsrvd — cPanel Server Daemon

This daemon is the application server for cPanel, WHM, and Webmail services.

crond — Cron Daemon

The cron scheduling daemon. For more information, read our Cron Jobs documentation.

dnsadmin — cPanel DNS (Domain Name System) Admin Cache

The dnsadmin daemon runs as a standalone daemon. This improves speed, but increases its memory usage. Deselect this option if you wish to use multiple dnsadmin daemon processes for zone-related actions.

exim — Exim Mail Server

The SMTP mail server daemon is the part of your mail server that sends and receives mail. We recommend that you monitor and enable this feature for most servers.

exim-altport — Exim Mail Server (on another port)

By default, Exim listens to the following ports:

• 25
• 465
• 587

This option allows you to configure Exim to listen to an additional port.

ftpd — FTP (File Transfer Protocol) Server

The FTP server daemon runs your FTP server. Enable this feature if you plan to host other people’s websites on your web server.

httpd — Web Server

The web server daemon processes HTTP requests from visitors. Enable this feature to host websites with your web server.

imap — IMAP (Internet Mail Access Protocol) Server

The IMAP daemon for Dovecot processes how your users download their mail.

For more information, read our IMAP vs. POP3 documentation.

ipaliases — IP (Internet Protocol) Aliases

The IP Aliases daemon allows you to add more than one IP address to your network adapter. The system stores IP addresses that you add in WHM’s Add a New IP Address interface (WHM » Home » IP Functions » Add a New IP Address) in the /etc/ips file. The ipaliases service activates those IP addresses when the server starts.

Use this configuration to run multiple connections on a single network, where each connection serves an additional purpose.

lmtp — LMTP (Local Mail Transport Protocol) Server

The Local Mail Transport Protocol (LMTP) server allows Exim to connect to the Dovecot mail server.

mailman — Mailman

The Mailman mailing list manager allows your users to create a single email address to send mail to multiple email addresses. For more information, read our Mailing Lists documentation.

mysql — MySQL® or MariaDB® Server

The MySQL® database server processes database queries. If you plan to host any content management systems or applications that require a database, enable this feature or the postgresql server.

named — DNS (Domain Name System) Server

The Berkeley Internet Name Domain (BIND), PowerDNS, MyDNS, or NSD daemon runs the nameservers.

nscd — Name Service Cache Daemon

This daemon manages a cache for name service requests.

p0f — Passive OS (Operating System) Fingerprinting Daemon

The Passive OS Fingerprinting daemon (p0f) reports the visitor’s operating system and other information for email notifications that the system administrator requests in the Contact Manager interface (WHM » Home » Server Contacts » Contact Manager). This information helps a system administrator quickly identify visitors that trigger events that cause alerts. The spam prevention and cPHulk systems use this information to identify potential spammers and brute force attacks.

For example, if a user logs in to a server from multiple locations and uses multiple operating systems, this may indicate that someone has compromised the user’s account.

For more information about this daemon, read the Passive OS Fingerprinting documentation at GitHub.

pop — POP3 (Post Office Protocol 3) Server

The POP3 daemon processes how your users will download their mail.

postgresql — PostgresSQL® Server

The PostgreSQL® database server processes database queries. If you plan to host any content management systems or applications that require a database, enable this feature or the mysqld server.

queueprocd — TaskQueue Processor

The TaskQueue Processor processes the task queue periodically and resides in the /usr/local/cpanel/libexec directory. For more information, read our Task Queue Monitor documentation.

rsyslogd — System Logger Daemon

The system log daemon monitors your web server and logs the system activity.

spamd — Apache SpamAssassin™

The Apache SpamAssassin daemon attempts to filter spam messages. If you disable this daemon, make sure that you also disable it in WHM’s Tweak Settings interface (WHM » Home » Server Configuration »Tweak Settings).

sshd — SSH (Secure Shell) Daemon

The secure shell (SSH) daemon allows users to connect to your server in a terminal session via SSH.

syslogd — syslog System Logger Daemon

The system log daemon. This daemon handles your web server’s monitoring and logging system information.

tailwatchd — TailWatch Daemon

The TailWatch daemon monitors a log file for certain activities and then performs an action based on the activity. For more information, read our TailWatch documentation.

tomcat — Tomcat Server

Tomcat is an Apache module that provides a web server in addition to the Apache web server. For more information, read our Introduction to Tomcat documentation.