Jordan
Jordan, the AutoMySQL module isn’t a core part of cPFence , it was originally built for our own use at Linkers Hosting and later offered as a bonus. The recommendations are based on real testing across busy shared hosting environments. It’s off by default, so if it doesn’t suit your setup, feel free to leave it off.
The swap or not to swap debate has been around for decades in the linux community. Do what works for you.
As for the malware scanner, cPFence uses native ClamAV , we just provide the signatures and control the output. It runs with ionice -c3 nice -n 19, so it operates at the lowest priority. If native ClamAV scanning process is maxing out your cores, that’s not expected , feel free to open a support ticket and we’ll take a look.