diff --git a/database/registry.mariadb.sql b/database/registry.mariadb.sql
index d98bfe7..190f77e 100644
--- a/database/registry.mariadb.sql
+++ b/database/registry.mariadb.sql
@@ -119,6 +119,7 @@ CREATE TABLE IF NOT EXISTS `registry`.`registrar` (
     `currency` varchar(5) NOT NULL default 'USD',
     `companyNumber` varchar(30) DEFAULT NULL,
     `vatNumber` varchar(30) DEFAULT NULL,
+    `ssl_fingerprint` CHAR(64) DEFAULT NULL,
     `crdate` datetime(3) NOT NULL,
     `lastupdate` TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP,
     PRIMARY KEY (`id`),
diff --git a/database/registry.postgres.sql b/database/registry.postgres.sql
index 9a103a9..352823f 100644
--- a/database/registry.postgres.sql
+++ b/database/registry.postgres.sql
@@ -116,6 +116,7 @@ CREATE TABLE registrar (
      "currency"   varchar(5) NOT NULL default 'USD',
      "companyNumber" VARCHAR(30) DEFAULT NULL,
      "vatNumber" VARCHAR(30) DEFAULT NULL,
+     "ssl_fingerprint" CHAR(64) DEFAULT NULL,
      "crdate"   timestamp(3) without time zone NOT NULL,
      "lastupdate"   timestamp(3),
      unique ("clid"),
diff --git a/database/registry.sqlite.sql b/database/registry.sqlite.sql
index 7c26571..eb545d9 100644
--- a/database/registry.sqlite.sql
+++ b/database/registry.sqlite.sql
@@ -125,6 +125,7 @@ CREATE TABLE IF NOT EXISTS registrar (
     currency VARCHAR(5) NOT NULL DEFAULT 'USD',
     companyNumber VARCHAR(30) DEFAULT NULL,
     vatNumber VARCHAR(30) DEFAULT NULL,
+    ssl_fingerprint CHAR(64) DEFAULT NULL,
     crdate DATETIME NOT NULL,
     lastupdate DATETIME DEFAULT CURRENT_TIMESTAMP,
     UNIQUE (clid),
diff --git a/docs/update1021.sh b/docs/update1021.sh
index d4ed459..22c25e9 100644
--- a/docs/update1021.sh
+++ b/docs/update1021.sh
@@ -142,6 +142,10 @@ AND NOT EXISTS (
 );
 EOF
 
+# Add ssl_fingerprint column
+echo "Adding ssl_fingerprint column to registrar table..."
+mysql -u$DB_USER -p$DB_PASS $DB_NAME -e "ALTER TABLE registrar ADD COLUMN ssl_fingerprint CHAR(64) DEFAULT NULL AFTER vatNumber;"
+
 echo "Database structure updated successfully."
 
 # Check the Linux distribution and version
diff --git a/epp/src/helpers.php b/epp/src/helpers.php
index 0049522..31aea93 100644
--- a/epp/src/helpers.php
+++ b/epp/src/helpers.php
@@ -542,6 +542,30 @@ function getClid(Swoole\Database\PDOProxy $db, string $clid): ?int {
     return $result ? (int)$result['id'] : null;
 }
 
+function getFingerprint(Swoole\Database\PDOProxy $db, int $clid): ?string {
+    $stmt = $db->prepare("SELECT ssl_fingerprint FROM registrar WHERE id = :clid LIMIT 1");
+    $stmt->bindParam(':clid', $clid, PDO::PARAM_INT);
+    $stmt->execute();
+
+    $result = $stmt->fetch(PDO::FETCH_ASSOC);
+    $stmt->closeCursor();
+
+    return $result ? $result['ssl_fingerprint'] : null;
+}
+
+function getClientFingerprint(\Swoole\Server $serv, int $fd): ?string {
+    $info = $serv->getClientInfo($fd);
+    if (empty($info['ssl_client_cert'])) {
+        return null;
+    }
+
+    $cert = $info['ssl_client_cert'];
+    $pem = preg_replace('/\-+BEGIN CERTIFICATE\-+|\-+END CERTIFICATE\-+|\s+/', '', $cert);
+    $der = base64_decode($pem);
+
+    return $der ? strtoupper(hash('sha256', $der)) : null;
+}
+
 /**
  * Calculate ds-rdata from dnskey-rdata
  * For additional information please refer to RFC 5910: http://www.ietf.org/rfc/rfc5910.txt
diff --git a/epp/start_epp_test.php b/epp/start_epp_test.php
new file mode 100644
index 0000000..e9460df
--- /dev/null
+++ b/epp/start_epp_test.php
@@ -0,0 +1,756 @@
+<?php
+
+global $c;
+$c = require_once 'config.php';
+require_once 'src/EppWriter.php';
+require_once 'src/helpers.php';
+require_once 'src/epp-check.php';
+require_once 'src/epp-info.php';
+require_once 'src/epp-create.php';
+require_once 'src/epp-update.php';
+require_once 'src/epp-renew.php';
+require_once 'src/epp-poll.php';
+require_once 'src/epp-transfer.php';
+require_once 'src/epp-delete.php';
+
+$logFilePath = '/var/log/namingo/epp.log';
+$log = setupLogger($logFilePath, 'EPP');
+
+use Swoole\Table;
+use Swoole\Timer;
+use Swoole\Server;
+use Namingo\Rately\Rately;
+use Selective\XmlDSig\PublicKeyStore;
+use Selective\XmlDSig\CryptoVerifier;
+use Selective\XmlDSig\XmlSignatureVerifier;
+
+$table = new Table(1024);
+$table->column('clid', Table::TYPE_STRING, 64);
+$table->column('logged_in', Table::TYPE_INT, 1);
+$table->create();
+
+$permittedIPsTable = new Table(1024);
+$permittedIPsTable->column('addr', Table::TYPE_STRING, 64);
+$permittedIPsTable->create();
+
+$eppExtensionsTable = new Table(64);
+$eppExtensionsTable->column('extension', Table::TYPE_INT, 1);
+$eppExtensionsTable->create();
+$data = json_decode(@file_get_contents('/opt/registry/epp/extensions.json'), true);
+if (is_array($data)) {
+    foreach ($data as $urn => $info) {
+        if (!empty($info['enabled'])) {
+            $eppExtensionsTable->set($urn, ['extension' => 1]);
+        }
+    }
+} else {
+    // fallback if file is missing or invalid
+    $fallback = [
+        'https://namingo.org/epp/funds-1.0',
+        'https://namingo.org/epp/identica-1.0',
+        'urn:ietf:params:xml:ns:secDNS-1.1',
+        'urn:ietf:params:xml:ns:rgp-1.0',
+        'urn:ietf:params:xml:ns:launch-1.0',
+        'urn:ietf:params:xml:ns:idn-1.0',
+        'urn:ietf:params:xml:ns:epp:fee-1.0',
+        'urn:ietf:params:xml:ns:mark-1.0',
+        'urn:ietf:params:xml:ns:allocationToken-1.0'
+    ];
+    foreach ($fallback as $urn) {
+        $eppExtensionsTable->set($urn, ['extension' => 1]);
+    }
+}
+
+// Initialize the PDO connection pool
+$pool = new Swoole\Database\PDOPool(
+    (new Swoole\Database\PDOConfig())
+        ->withDriver($c['db_type'])
+        ->withHost($c['db_host'])
+        ->withPort($c['db_port'])
+        ->withDbName($c['db_database'])
+        ->withUsername($c['db_username'])
+        ->withPassword($c['db_password'])
+        ->withCharset('utf8mb4')
+);
+
+$server = new Server($c['epp_host'], $c['epp_port'], SWOOLE_PROCESS, SWOOLE_SOCK_TCP | SWOOLE_SSL);
+$server->set([
+    'enable_coroutine' => true,
+    'hook_flags' => SWOOLE_HOOK_ALL,
+    'log_file' => '/var/log/namingo/epp_application.log',
+    'log_level' => SWOOLE_LOG_INFO,
+    'worker_num' => swoole_cpu_num() * 4,
+    'pid_file' => $c['epp_pid'],
+    'max_request' => 1000,
+    'max_conn' => 1024,
+    'open_tcp_nodelay' => true,
+    'open_tcp_keepalive' => true,
+    'tcp_keepidle' => 30,
+    'tcp_keepinterval' => 10,
+    'tcp_keepcount' => 3,
+    'tcp_defer_accept' => true,
+    'tcp_fastopen' => true,
+    'tcp_user_timeout' => 30000,
+    //'ssl_handshake_timeout' => 15,
+    'heartbeat_check_interval' => 60,
+    'heartbeat_idle_time' => 120,
+    'buffer_output_size' => 2 * 1024 * 1024,
+    'send_yield' => true,
+    //'open_ssl' => true,
+    //'ssl_client_cert_depth' => 1,
+    'ssl_cert_file' => $c['ssl_cert'],
+    'ssl_key_file' => $c['ssl_key'],
+    'ssl_verify_peer' => true,
+    'ssl_verify_depth' => 3,
+    'ssl_client_cert_file' => '/etc/ssl/certs/ca-certificates.crt',
+    'ssl_allow_self_signed' => false,
+    'ssl_protocols' => SWOOLE_SSL_TLSv1_2 | SWOOLE_SSL_TLSv1_3,
+    'ssl_ciphers' => 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE+AESGCM:ECDHE+AES256:ECDHE+AES128:DHE+AES256:DHE+AES128:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK',
+]);
+
+$rateLimiter = new Rately();
+$log->info('Namingo EPP server starting on ' . $c['epp_host'] . ':' . $c['epp_port']);
+
+$server->on('Connect', function(\Swoole\Server $serv, int $fd) use ($log, $eppExtensionsTable) {
+    $info = $serv->getClientInfo($fd);
+    $log->info("client #{$fd} connected from {$info['remote_ip']}");
+
+    $conn = new class($serv, $fd) {
+        private $serv, $fd;
+        public function __construct($serv, $fd) { $this->serv = $serv; $this->fd = $fd; }
+        public function send($data) { return $this->serv->send($this->fd, $data); }
+        public function close()     { return $this->serv->close($this->fd); }
+        public function exportSocket() { return $this->serv->getClientInfo($this->fd); }
+    };
+
+    sendGreeting($conn, $eppExtensionsTable);
+});
+
+$server->on('Receive', function(\Swoole\Server $serv, int $fd, int $reactorId, string $data) use ($table, $eppExtensionsTable, $pool, $c, $log, $permittedIPsTable, $rateLimiter) {
+    $conn = new class($serv, $fd) {
+        private $serv; private $fd;
+        public function __construct($serv, $fd) { $this->serv = $serv; $this->fd = $fd; }
+        public function send($data) { return $this->serv->send($this->fd, $data); }
+        public function close() { return $this->serv->close($this->fd); }
+        public function exportSocket() { return $this->serv->getClientInfo($this->fd); }
+    };
+
+    // Get the client information
+    $clientInfo = $serv->getClientInfo($fd);
+    $clientIP = isset($clientInfo['remote_ip'])
+        ? (strpos($clientInfo['remote_ip'], '::ffff:') === 0
+            ? substr($clientInfo['remote_ip'], 7)
+            : $clientInfo['remote_ip'])
+        : '';
+    if (isIPv6($clientIP)) {
+        $clientIP = expandIPv6($clientIP);
+    }
+
+    // Check if the IP is in the permitted list
+/*     if (!$permittedIPsTable->exist($clientIP)) {
+        $allowed = false;
+        foreach ($permittedIPsTable as $row) {
+            if (strpos($row['addr'], '/') !== false && ipMatches($clientIP, $row['addr'])) {
+                $allowed = true;
+                break;
+            }
+        }
+        if (!$allowed) {
+            $log->warning('Access denied. The IP address ' . $clientIP . ' is not authorized for this service.');
+            $conn->close();
+            return;
+        }
+    }
+ */
+    if (($c['rately'] == true) && ($rateLimiter->isRateLimited('epp', $clientIP, $c['limit'], $c['period']))) {
+        $log->error('rate limit exceeded for ' . $clientIP);
+        $conn->close();
+        return;
+    }
+
+    static $buffers = [];
+    $buffers[$fd] = ($buffers[$fd] ?? '') . $data;
+
+    try {
+        $pdo = $pool->get();
+        if (!$pdo) {
+            $conn->close();
+            unset($buffers[$fd]);
+            return;
+        }
+    } catch (\Throwable $e) {
+        $conn->close();
+        unset($buffers[$fd]);
+        return;
+    }
+
+    try {
+        $connId = $fd;
+        $buffer =& $buffers[$fd];
+
+        while (strlen($buffer) >= 4) {
+            $len = unpack('N', substr($buffer, 0, 4))[1];
+            if ($len < 5) {
+                sendEppError($conn, $pdo, 2000, 'Invalid frame length');
+                $conn->close();
+                unset($buffers[$fd]);
+                $pool->put($pdo);
+                return;
+            }
+            if (strlen($buffer) < $len) {
+                // not a full message yet
+                break;
+            }
+
+            // extract one complete EPP XML payload
+            $xmlData = substr($buffer, 4, $len - 4);
+            $buffer  = substr($buffer, $len);
+
+            // If you're using PHP < 8.0
+            libxml_disable_entity_loader(true);
+            libxml_use_internal_errors(true);
+
+            $xml = simplexml_load_string($xmlData);
+            if ($xml === false) {
+                sendEppError($conn, $pdo, 2001, 'Invalid XML syntax');
+                return;
+            }
+
+            $xml->registerXPathNamespace('e', 'urn:ietf:params:xml:ns:epp-1.0');
+            $xml->registerXPathNamespace('xsi', 'http://www.w3.org/2001/XMLSchema-instance');
+            $xml->registerXPathNamespace('domain', 'urn:ietf:params:xml:ns:domain-1.0');
+            $xml->registerXPathNamespace('contact', 'urn:ietf:params:xml:ns:contact-1.0');
+            $xml->registerXPathNamespace('host', 'urn:ietf:params:xml:ns:host-1.0');
+            $xml->registerXPathNamespace('rgp', 'urn:ietf:params:xml:ns:rgp-1.0');
+            $xml->registerXPathNamespace('secDNS', 'urn:ietf:params:xml:ns:secDNS-1.1');
+            $xml->registerXPathNamespace('launch', 'urn:ietf:params:xml:ns:launch-1.0');
+            $xml->registerXPathNamespace('fee', 'urn:ietf:params:xml:ns:epp:fee-1.0');
+            $xml->registerXPathNamespace('mark', 'urn:ietf:params:xml:ns:mark-1.0');
+            $xml->registerXPathNamespace('allocationToken', 'urn:ietf:params:xml:ns:allocationToken-1.0');
+            $xml->registerXPathNamespace('loginSec', 'urn:ietf:params:xml:ns:epp:loginSec-1.0');
+            $xml->registerXPathNamespace('identica', 'https://namingo.org/epp/identica-1.0');
+
+            if ($xml->getName() != 'epp') {
+                sendEppError($conn, $pdo, 2001, 'Root element must be <epp>');
+                return;
+            }
+
+            switch (true) {
+                case isset($xml->command->login):
+                {
+                    $clID = (string) $xml->command->login->clID;
+                    $pw = (string) $xml->command->login->pw;
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $clID);
+                    if (!$clid) {
+                        sendEppError($conn, $pdo, 2201, 'Unknown client identifier', $clTRID);
+                        return;
+                    }
+                    $loginSec = $xml->xpath('//e:extension/loginSec:loginSec')[0] ?? null;
+
+                    $loginSecPw = null;
+                    $loginSecNewPw = null;
+
+                    if ($loginSec) {
+                        if (isset($loginSec->pw)) {
+                            $loginSecPw = (string) $loginSec->pw;
+                        }
+                        if (isset($loginSec->newPW)) {
+                            $loginSecNewPw = (string) $loginSec->newPW;
+                        }
+                    }
+
+                    if ($pw === '[LOGIN-SECURITY]' && $loginSecPw) {
+                        $pw = $loginSecPw;
+                    }
+
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+
+                    $fingerprint = getClientFingerprint($serv, $fd);
+
+                    if (!$fingerprint) {
+                        sendEppError($conn, $pdo, 2201, 'Client certificate authentication failed: no certificate provided', $clTRID);
+                        return;
+                    }
+
+                    $storedFingerprint = getFingerprint($pdo, $clid);
+
+                    if (!$storedFingerprint || strcasecmp($fingerprint, $storedFingerprint) !== 0) {
+                        sendEppError($conn, $pdo, 2201, 'Client certificate authentication failed: incorrect certificate', $clTRID);
+                        return;
+                    }
+
+                    if (checkLogin($pdo, $clID, $pw)) {
+                        if (isset($xml->command->login->newPW)) {
+                            $newPW = (string) $xml->command->login->newPW;
+                            if ($newPW === '[LOGIN-SECURITY]' && $loginSecNewPw) {
+                                $newPW = $loginSecNewPw;
+                            }
+                            $options = [
+                                'memory_cost' => 1024 * 128,
+                                'time_cost'   => 6,
+                                'threads'     => 4,
+                            ];
+                            $hashedPassword = password_hash($newPW, PASSWORD_ARGON2ID, $options);
+                            try {
+                                $stmt = $pdo->prepare("UPDATE registrar SET pw = :newPW WHERE clid = :clID");
+                                $stmt->bindParam(':newPW', $hashedPassword);
+                                $stmt->bindParam(':clID', $clID);
+                                $stmt->execute();
+                            } catch (PDOException $e) {
+                                sendEppError($conn, $pdo, 2400, 'Password could not be changed', $clTRID);
+                            }
+
+                            $svTRID = generateSvTRID();
+                            $response = [
+                                'command' => 'login',
+                                'resultCode' => 1000,
+                                'lang' => 'en-US',
+                                'clTRID' => $clTRID,
+                                'svTRID' => $svTRID,
+                                'msg' => 'Password changed successfully. Session will be terminated'
+                            ];
+
+                            $epp = new EPP\EppWriter();
+                            $xml = $epp->epp_writer($response);
+                            updateTransaction($pdo, 'login', null, null, 1000, 'Password changed successfully. Session will be terminated', $svTRID, $xml, $trans);
+                            sendEppResponse($conn, $xml);
+                            $conn->close();
+                            return;
+                        }
+                        
+                        $table->set($connId, ['clid' => $clID, 'logged_in' => 1]);
+                        $svTRID = generateSvTRID();
+                        $response = [
+                            'command' => 'login',
+                            'resultCode' => 1000,
+                            'lang' => 'en-US',
+                            'clTRID' => $clTRID,
+                            'svTRID' => $svTRID,
+                        ];
+
+                        $epp = new EPP\EppWriter();
+                        $xml = $epp->epp_writer($response);
+                        $log->info("registrar {$clID} logged in (clTRID={$clTRID})");
+                        updateTransaction($pdo, 'login', null, null, 1000, 'Command completed successfully', $svTRID, $xml, $trans);
+                        sendEppResponse($conn, $xml);
+                    } else {
+                        sendEppError($conn, $pdo, 2200, 'Authentication error', $clTRID);
+                    }
+                    return;
+                }
+
+                case isset($xml->command->logout):
+                {
+                    $data = $table->get($connId);
+                    $clid = getClid($pdo, $data['clid']);
+                    $table->del($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    $svTRID = generateSvTRID();
+                    $response = [
+                        'command' => 'logout',
+                        'resultCode' => 1500,
+                        'lang' => 'en-US',
+                        'clTRID' => $clTRID,
+                        'svTRID' => $svTRID,
+                    ];
+
+                    $epp = new EPP\EppWriter();
+                    $xml = $epp->epp_writer($response);
+                    $log->info("registrar {$data['clid']} logged out (clTRID={$clTRID})");
+                    updateTransaction($pdo, 'logout', null, null, 1500, 'Command completed successfully; ending session', $svTRID, $xml, $trans);
+                    sendEppResponse($conn, $xml);
+                    $conn->close();
+                    return;
+                }
+                    
+                case isset($xml->hello):
+                {
+                    sendGreeting($conn, $eppExtensionsTable);
+                    return;
+                }
+                    
+                case isset($xml->command->poll):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processPoll($conn, $pdo, $xml, $data['clid'], $trans);
+                    return;
+                }
+              
+                case isset($xml->command->check) && isset($xml->command->check->children('urn:ietf:params:xml:ns:contact-1.0')->check):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    if ($c['minimum_data']) {
+                        sendEppError($conn, $pdo, 2101, 'Contact commands are not supported in minimum data mode', $clTRID);
+                        $conn->close();
+                    }
+                    processContactCheck($conn, $pdo, $xml, $trans);
+                    return;
+                }
+              
+                case isset($xml->command->create) && isset($xml->command->create->children('urn:ietf:params:xml:ns:contact-1.0')->create):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    if ($c['minimum_data']) {
+                        sendEppError($conn, $pdo, 2101, 'Contact commands are not supported in minimum data mode', $clTRID);
+                        $conn->close();
+                    }
+                    processContactCreate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+              
+                case isset($xml->command->info) && isset($xml->command->info->children('urn:ietf:params:xml:ns:contact-1.0')->info):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    if ($c['minimum_data']) {
+                        sendEppError($conn, $pdo, 2101, 'Contact commands are not supported in minimum data mode', $clTRID);
+                        $conn->close();
+                    }
+                    processContactInfo($conn, $pdo, $xml, $data['clid'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->update) && isset($xml->command->update->children('urn:ietf:params:xml:ns:contact-1.0')->update):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    if ($c['minimum_data']) {
+                        sendEppError($conn, $pdo, 2101, 'Contact commands are not supported in minimum data mode', $clTRID);
+                        $conn->close();
+                    }
+                    processContactUpdate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->delete) && isset($xml->command->delete->children('urn:ietf:params:xml:ns:contact-1.0')->delete):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    if ($c['minimum_data']) {
+                        sendEppError($conn, $pdo, 2101, 'Contact commands are not supported in minimum data mode', $clTRID);
+                        $conn->close();
+                    }
+                    processContactDelete($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->transfer) && isset($xml->command->transfer->children('urn:ietf:params:xml:ns:contact-1.0')->transfer):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    if ($c['minimum_data']) {
+                        sendEppError($conn, $pdo, 2101, 'Contact commands are not supported in minimum data mode', $clTRID);
+                        $conn->close();
+                    }
+                    processContactTransfer($conn, $pdo, $xml, $data['clid'], $c, $trans);
+                    return;
+                }
+                
+                case isset($xml->command->check) && isset($xml->command->check->children('urn:ietf:params:xml:ns:domain-1.0')->check):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainCheck($conn, $pdo, $xml, $trans, $data['clid']);
+                    return;
+                }
+
+                case isset($xml->command->info) && isset($xml->command->info->children('urn:ietf:params:xml:ns:domain-1.0')->info):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainInfo($conn, $pdo, $xml, $clid, $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->update) && isset($xml->command->update->children('urn:ietf:params:xml:ns:domain-1.0')->update):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainUpdate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->create) && isset($xml->command->create->children('urn:ietf:params:xml:ns:domain-1.0')->create):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainCreate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans, $c['minimum_data']);
+                    return;
+                }
+                    
+                case isset($xml->command->delete) && isset($xml->command->delete->children('urn:ietf:params:xml:ns:domain-1.0')->delete):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainDelete($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->transfer) && isset($xml->command->transfer->children('urn:ietf:params:xml:ns:domain-1.0')->transfer):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainTransfer($conn, $pdo, $xml, $data['clid'], $c, $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->check) && isset($xml->command->check->children('urn:ietf:params:xml:ns:host-1.0')->check):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processHostCheck($conn, $pdo, $xml, $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->create) && isset($xml->command->create->children('urn:ietf:params:xml:ns:host-1.0')->create):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processHostCreate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->info) && isset($xml->command->info->children('urn:ietf:params:xml:ns:host-1.0')->info):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processHostInfo($conn, $pdo, $xml, $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->update) && isset($xml->command->update->children('urn:ietf:params:xml:ns:host-1.0')->update):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processHostUpdate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->delete) && isset($xml->command->delete->children('urn:ietf:params:xml:ns:host-1.0')->delete):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processHostDelete($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->info) && isset($xml->command->info->children('https://namingo.org/epp/funds-1.0')->info):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processFundsInfo($conn, $pdo, $xml, $data['clid'], $trans);
+                    return;
+                }
+                    
+                case isset($xml->command->renew) && isset($xml->command->renew->children('urn:ietf:params:xml:ns:domain-1.0')->renew):
+                {
+                    $data = $table->get($connId);
+                    $clTRID = (string) $xml->command->clTRID;
+                    $clid = getClid($pdo, $data['clid']);
+                    $xmlString = $xml->asXML();
+                    $trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
+                    if (!$data || $data['logged_in'] !== 1) {
+                        sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
+                        $conn->close();
+                    }
+                    processDomainRenew($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
+                    return;
+                }
+              
+                default:
+                {
+                    sendEppError($conn, $pdo, 2000, 'Unrecognized command');
+                    $conn->close();
+                    return;
+                }
+            }
+        }
+    } catch (PDOException $e) {
+        // Handle database exceptions
+        $log->alert('Database error: ' . $e->getMessage());
+
+        // Here we only retry if it's a *connection* failure.
+        // Common MySQL connection error codes: 2002 (Can't connect), 2006 (Gone away), 2013 (Lost connection).
+        if (in_array($e->getCode(), [2002, 2006, 2013])) {
+            try {
+                // Attempt a reconnect
+                $pdo = $pool->get();
+                $log->info('Reconnected successfully to the DB');
+                sendEppError($conn, $pdo, 2400, 'Temporary DB error: please retry this command shortly');
+                return;
+            } catch (Throwable $e2) {
+                // If reconnect also fails, log and close
+                $log->error('Failed to reconnect to DB: ' . $e2->getMessage());
+                sendEppError($conn, null, 2500, 'Error connecting to the EPP database');
+                $conn->close();
+                return;
+            }
+        } else {
+            // Non-connection errors (e.g. syntax error, constraint violation) => no reconnect attempt
+            sendEppError($conn, $pdo, 2500, 'DB error: ' . $e->getMessage());
+            $conn->close();
+            return;
+        }
+    } catch (Throwable $e) {
+        // Catch any other exceptions or errors
+        $log->error('General Error: ' . $e->getMessage());
+        sendEppError($conn, $pdo, 2500, 'General error');
+        $conn->close();
+        return;
+    } finally {
+        // Return the connection to the pool
+        $pool->put($pdo);
+    }
+
+});
+
+$server->on('Close', function(\Swoole\Server $serv, int $fd) use ($log, $table) {
+    $table->del($fd);
+    $log->info("client #{$fd} disconnected");
+});
+
+Timer::tick(300000, function() use ($pool, $permittedIPsTable) {
+    updatePermittedIPs($pool, $permittedIPsTable);
+});
+
+$server->start();
\ No newline at end of file