Just one more ... resource for you if your boss insist on compiling AMP ... you will need to refer to often me thinks.
https://lists.centos.org/pipermail/centos-announce/
Here is September:
https://lists.centos.org/pipermail/centos-announce/2019-September/thread.html
https://lists.centos.org/pipermail/centos-announce/2019-September/023405.html
Here's one on Firewalled
https://lists.centos.org/pipermail/centos-announce/2019-September/023412.html
Unless you are still using iptables might want to acquire the update to firewalled.
I happen to like the new firewall as it has a zone for dropped ... easy to have your server inaccessible to a bot network - all services/all ports - or a particularly agreessive scanner which sucks your server of bandwidth/resource usage. Let the researchers research ... just not at your server .... considering it's current issues, might want to consider using drop zone.
Ok, now am done!
'SoS', Ken