Apache2 - zwieszanie

[Pitu 160]

W innym temacie opisywałem problem dotyczący load, tym razem mam problem z zawieszającym się Apachem.

 

Proszę o poradę co może być nie tak, poniżej daje wycinki z logów z momentów, w którym apache pada.

 

[sat Jan 15 12:15:14 2011] [error] [client 85.119.154.13] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[sat Jan 15 12:39:12 2011] [error] [client 77.185.218.50] File does not exist: /var/www/vhosts/default/htdocs/smf, referer: http://www.tolkienforum.de/index.php?showtopic=7861
[sat Jan 15 12:39:12 2011] [error] [client 77.185.218.50] File does not exist: /var/www/vhosts/default/htdocs/smf, referer: http://www.tolkienforum.de/index.php?showtopic=7861
[sat Jan 15 12:39:21 2011] [error] [client 77.185.218.50] File does not exist: /var/www/vhosts/default/htdocs/smf, referer: http://www.tolkienforum.de/index.php?showtopic=7861
[sat Jan 15 12:39:21 2011] [error] [client 77.185.218.50] File does not exist: /var/www/vhosts/default/htdocs/smf, referer: http://www.tolkienforum.de/index.php?showtopic=7861
[sat Jan 15 12:50:07 2011] [error] [client 193.107.16.87] File does not exist: /var/www/vhosts/default/htdocs/SWRPG, referer: http://web3.s094.silver.fastwebserver.de/SWRPG/index.php
[sat Jan 15 13:04:45 2011] [error] [client 67.195.115.38] File does not exist: /var/www/vhosts/default/htdocs/robots.txt
[sat Jan 15 13:14:23 2011] [error] [client 74.55.6.210] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[sat Jan 15 13:17:49 2011] [error] [client 173.244.219.89] File does not exist: /var/www/vhosts/default/htdocs/webdav
[sat Jan 15 13:33:19 2011] [notice] caught SIGTERM, shutting down

 

[sun Jan 16 22:41:01 2011] [error] [client 93.174.93.199] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[sun Jan 16 22:49:13 2011] [error] [client 83.5.116.29] Invalid URI in request engine/ajax/mchat.php HTTP/1.1
[sun Jan 16 22:51:37 2011] [error] [client 93.174.93.204] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[sun Jan 16 23:01:51 2011] [error] server reached MaxClients setting, consider raising the MaxClients setting
[sun Jan 16 23:13:38 2011] [error] [client 83.23.27.142] Invalid URI in request engine/ajax/mchat.php HTTP/1.1
[sun Jan 16 23:31:56 2011] [error] [client 66.249.66.148] File does not exist: /var/www/vhosts/default/htdocs/galerie
[Mon Jan 17 00:26:23 2011] [warn] child process 17750 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:23 2011] [warn] child process 17785 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:23 2011] [warn] child process 17789 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:23 2011] [warn] child process 17839 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:23 2011] [warn] child process 17618 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:23 2011] [warn] child process 17798 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:23 2011] [warn] child process 17846 still did not exit, sending a SIGTERM
[Mon Jan 17 00:26:25 2011] [notice] caught SIGTERM, shutting down

 

[Mon Jan 17 02:27:58 2011] [error] [client 89.248.174.76] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[Mon Jan 17 02:50:32 2011] [error] [client 93.174.93.204] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[Mon Jan 17 03:24:51 2011] [error] [client 74.55.6.210] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[Mon Jan 17 03:25:57 2011] [error] [client 93.174.93.199] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[Mon Jan 17 03:30:48 2011] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Mon Jan 17 07:39:46 2011] [notice] caught SIGTERM, shutting down
[Mon Jan 17 07:39:47 2011] [warn] No JkShmFile defined in httpd.conf. Using default /var/log/apache2/jk-runtime-status
[Mon Jan 17 07:39:47 2011] [warn] RSA server certificate CommonName (CN) `Parallels Panel' does NOT match server name!?
[Mon Jan 17 07:39:47 2011] [warn] RSA server certificate CommonName (CN) `Parallels Panel' does NOT match server name!?

 

[Mon Jan 17 07:39:48 2011] [notice] Apache/2.2.9 (Debian) mod_fcgid/2.3.5 mod_jk/1.2.26 mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0 configured -- resuming normal operations
sh: ../backup/Forum-2011-01-17-full-backup.sql: Permission denied
chmod: cannot access `../backup/Forum-2011-01-17-full-backup.sql': No such file or directory
[Mon Jan 17 08:14:44 2011] [error] [client 93.174.93.199] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[Mon Jan 17 08:19:38 2011] [error] [client 89.248.174.76] File does not exist: /var/www/vhosts/default/htdocs/SWRPG-Neu, referer: http://web3.s094.silver.fastwebserver.de/SWRPG-Neu/index.php
[Mon Jan 17 08:25:36 2011] [error] [client 66.249.66.148] File does not exist: /var/www/vhosts/default/htdocs/galerie
[Mon Jan 17 08:55:36 2011] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Mon Jan 17 12:06:01 2011] [notice] caught SIGTERM, shutting down

 

[Mon Jan 17 12:06:03 2011] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Mon Jan 17 12:06:03 2011] [notice] Apache/2.2.9 (Debian) mod_fcgid/2.3.5 mod_jk/1.2.26 mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0 configured -- resuming normal operations
[Mon Jan 17 12:07:48 2011] [error] [client 83.65.13.242] File does not exist: /var/www/vhosts/default/htdocs/smf, referer: http://www.tolkienforum.de/index.php?showtopic=7861
[Mon Jan 17 12:07:48 2011] [error] [client 83.65.13.242] File does not exist: /var/www/vhosts/default/htdocs/smf, referer: http://www.tolkienforum.de/index.php?showtopic=7861
[Mon Jan 17 12:34:37 2011] [error] server reached MaxClients setting, consider raising the MaxClients setting
[Mon Jan 17 13:40:01 2011] [notice] caught SIGTERM, shutting down

 

W każdym z momentów przed padem są błędy o nieznalezionych URL, często są to te same url. Czy mogą to być skany? Czy może wina może leżeć po stronie zmiennej "MaxClients"?

[Gość hdmagc]

Z tych logów wynika, ze przydałoby się trochę popracować nad maszyną.

 

MaxClient najwyżej przyblokuje ale nie wyłączy.

 

 

Szkoda, że nie sprawdziłeś co to za procesy

 

[Mon Jan 17 00:26:23 2011] [warn] child process 17785 still did not exit, sending a SIGTERM

[Mon Jan 17 00:26:23 2011] [warn] child process 17789 still did not exit, sending a SIGTERM

[Mon Jan 17 00:26:23 2011] [warn] child process 17839 still did not exit, sending a SIGTERM

[Mon Jan 17 00:26:23 2011] [warn] child process 17618 still did not exit, sending a SIGTERM

[Mon Jan 17 00:26:23 2011] [warn] child process 17798 still did not exit, sending a SIGTERM

[Pitu 160]

...

MaxClient najwyżej przyblokuje ale nie wyłączy.

...

 

 

Apache jest ciągle w procesach lecz nie odpowiada.

[pasero 41]

Apache jest ciągle w procesach lecz nie odpowiada.

Co to znaczy "nie odpowiada"? Jeśli przekroczony jest MaxClients, to nie będziesz w stanie nawiązać żadnego nowego połączenia do serwera. Najprościej podbić MaxClients, ale musisz uważać na zużycie pamięci. Nie wiem, jaki profil ma serwis którym administrujesz - może warto pomyśleć nad przerzuceniem części treści statycznych (np obrazki, filmy itp..) na jakiś lekki serwer www?

Zainteresuj się też poniższymi wpisami w Twojej konfiguracji i spróbuj je zmienić tak żeby pasowały do Twoich potrzeb:

 

MaxKeepAliveRequests 100
KeepAliveTimeout 15
TImeout 300
KeepAlive on

 

Pozdrawiam