Run your servers headless with no gui. Try to segregate your services/servers onto different computers, with customized firewalls. Only load the minimum number of packages to get the job done.