Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: apache freezing after some minutes |
|
Author |
|
redmonk
Joined: 16 Oct 2017 Posts: 3
|
Posted: Mon 16 Oct '17 15:06 Post subject: apache freezing after some minutes |
|
|
so i have a website running on a fat dedicated server
32gigs ram, 1gbps, 8 cores.
now i have a reverse proxy setup (on nginx) which filters all ddos attacks etc and keeps the origin safe.
the website works fine but sometimes in case of attacks i think the filter passes some traffic to apache and then apache starts to respond very slow, or sometimes just freezes completely.
thing is when i restart apache, website starts to run fast for a few minutes until this starts happening again
from my understanding, this apache default config gets stomped with multiple connections which makes it slow. after restart it starts to function again until that connection limit is hit again.
i want to know how i can make use of the hardware I have because I have no problem increasing the amount of connections/sockets that remain open for apache. i want to maximise the use of the hardware.
thanks guys |
|
Back to top |
|
redmonk
Joined: 16 Oct 2017 Posts: 3
|
Posted: Mon 16 Oct '17 16:10 Post subject: |
|
|
i think i found the issue in /var/log/ error file
server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting
so I increased this to 4000.
now I can see apache using 11GB RAM with the server having 3000 processes running. I can see it's going up every minute. Is it possible to control this while making sure website stays navigational? |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7371 Location: Germany, Next to Hamburg
|
Posted: Tue 31 Oct '17 18:01 Post subject: |
|
|
I use fail2ban to block some of those attacks. If those attacker IPs are mostly the same you should permanently block them on with iptables. |
|
Back to top |
|
|
|
|
|
|