Apache httpd HIGH Memory

[JayaMedia]

Selamat pagi warga DWH,

Terimakasih atas bantuan warga DWH selama ini, saat ini saya mengalami kendala terkait proses apache httpd. Hal ini saya tidak tahu apakah ini karena DDOS atau memang ada proses yang salah atau memang memory saya kurang.

NOTE : Saya menggunakan vestacp, dengan httpd dan nginx, serta database mariadb.

1 bulan server berjalan lancar, namun pagi kemarin pukul 6 (kira-kira), memory melonjak drastis. Dari semula load hanya 0.x menjadi hampir 140.x. Dan tentunya webnya berat sekali hingga proses komputasi lambat malah timeout. Hanya saja proses ini hilang-muncul-hilang, setiap beberapa menit sekali (kurang dari 10 menit). Mungkin akan terlihat seperti gelombang,

Untuk lebih jelasnya mungkin berikut ada statistiknya

#Interval 4 jam

#interval 1 hari

#Load Usage interval 1 hari

Untuk proses yang berjalan

Mungkin dari warga DWH sendiri bisa memberikan solusi terkait permasalahan diatas.

Terimakasih banyak.

 

[GPLHosting]

ada kemungkinan memang ada DOS,
bisa dicoba cek access.log dan error.log pada httpd-nya.

kalau memang benar demikian, bisa dicoba dengan pasang module mod_limitipconn pada httpdnya.

 

[junior riau]

mod_limitipconn

baru denger, tekape dulu
biasanya itu kena dos, mungkin slowloris, cek di access_log biasanya ada IP yang itu ke itu saja yang akses dan requestnya cenderung sama

 

[GPLHosting]

baru denger, tekape dulu
biasanya itu kena dos, mungkin slowloris, cek di access_log biasanya ada IP yang itu ke itu saja yang akses dan requestnya cenderung sama

Udah lama ada, dari 2002.
Tapi gak tau kalau buat Litespeed, bisa masuk apa ngga. Blm pernah coba.

 

[junior riau]

Udah lama ada, dari 2002.
Tapi gak tau kalau buat Litespeed, bisa masuk apa ngga. Blm pernah coba.

masih ada server apache tan, billing juga pakai apache kok, sering di cium traffic ddos

 

[GPLHosting]

masih ada server apache tan, billing juga pakai apache kok, sering di cium traffic ddos

iyalah, apache blm bisa tergantikan dan masih tetap dibutuhkan

 

[junior riau]

wkwkw debes web serper ever

 

[JayaMedia]

ada kemungkinan memang ada DOS,
bisa dicoba cek access.log dan error.log pada httpd-nya.

kalau memang benar demikian, bisa dicoba dengan pasang module mod_limitipconn pada httpdnya.

Kalau yang access lognya keluarnya ini

127.0.0.1 - - [30/May/2017:14:00:13 +0700] "GET /server-status HTTP/1.0" 200 15511 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:05:03 +0700] "GET /server-status HTTP/1.0" 200 15326 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:10:11 +0700] "GET /server-status HTTP/1.0" 200 15513 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:15:03 +0700] "GET /server-status HTTP/1.0" 200 15267 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:20:05 +0700] "GET /server-status HTTP/1.0" 200 14845 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:25:13 +0700] "GET /server-status HTTP/1.0" 200 15847 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:30:02 +0700] "GET /server-status HTTP/1.0" 200 15246 "-" "Wget/1.12 ($

Kalau error lognya sih berikut ini

[Tue May 30 14:34:59 2017] [warn] child process 18908 still did not exit, sending a SIGTERM
[Tue May 30 14:35:01 2017] [warn] child process 18908 still did not exit, sending a SIGTERM
[Tue May 30 14:35:03 2017] [warn] child process 18908 still did not exit, sending a SIGTERM
[Tue May 30 14:35:05 2017] [error] child process 18908 still did not exit, sending a SIGKILL
[Tue May 30 14:35:06 2017] [notice] caught SIGTERM, shutting down
[Tue May 30 14:35:06 2017] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue May 30 14:35:06 2017] [warn] Init: Name-based SSL virtual hosts only work for clients with TLS$
[Tue May 30 14:35:06 2017] [warn] module ruid2_module is already loaded, skipping
[Tue May 30 14:35:06 2017] [notice] Digest: generating secret for digest authentication ...
[Tue May 30 14:35:06 2017] [notice] Digest: done
[Tue May 30 14:35:06 2017] [notice] mod_ruid2/0.9.8 enabled
[Tue May 30 14:35:06 2017] [warn] Init: Name-based SSL virtual hosts only work for clients with TLS$
[Tue May 30 14:35:07 2017] [notice] Apache/2.2.15 (Unix) DAV/2 mod_fcgid/2.3.9 PHP/5.6.30 mod_ssl/2$
[Tue May 30 14:35:15 2017] [error] server reached MaxClients setting, consider raising the MaxClien$

Itu bagaimana ya ?

 

[GPLHosting]

Kalau yang access lognya keluarnya ini

127.0.0.1 - - [30/May/2017:14:00:13 +0700] "GET /server-status HTTP/1.0" 200 15511 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:05:03 +0700] "GET /server-status HTTP/1.0" 200 15326 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:10:11 +0700] "GET /server-status HTTP/1.0" 200 15513 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:15:03 +0700] "GET /server-status HTTP/1.0" 200 15267 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:20:05 +0700] "GET /server-status HTTP/1.0" 200 14845 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:25:13 +0700] "GET /server-status HTTP/1.0" 200 15847 "-" "Wget/1.12 ($
127.0.0.1 - - [30/May/2017:14:30:02 +0700] "GET /server-status HTTP/1.0" 200 15246 "-" "Wget/1.12 ($

Kalau error lognya sih berikut ini

[Tue May 30 14:34:59 2017] [warn] child process 18908 still did not exit, sending a SIGTERM
[Tue May 30 14:35:01 2017] [warn] child process 18908 still did not exit, sending a SIGTERM
[Tue May 30 14:35:03 2017] [warn] child process 18908 still did not exit, sending a SIGTERM
[Tue May 30 14:35:05 2017] [error] child process 18908 still did not exit, sending a SIGKILL
[Tue May 30 14:35:06 2017] [notice] caught SIGTERM, shutting down
[Tue May 30 14:35:06 2017] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue May 30 14:35:06 2017] [warn] Init: Name-based SSL virtual hosts only work for clients with TLS$
[Tue May 30 14:35:06 2017] [warn] module ruid2_module is already loaded, skipping
[Tue May 30 14:35:06 2017] [notice] Digest: generating secret for digest authentication ...
[Tue May 30 14:35:06 2017] [notice] Digest: done
[Tue May 30 14:35:06 2017] [notice] mod_ruid2/0.9.8 enabled
[Tue May 30 14:35:06 2017] [warn] Init: Name-based SSL virtual hosts only work for clients with TLS$
[Tue May 30 14:35:07 2017] [notice] Apache/2.2.15 (Unix) DAV/2 mod_fcgid/2.3.9 PHP/5.6.30 mod_ssl/2$
[Tue May 30 14:35:15 2017] [error] server reached MaxClients setting, consider raising the MaxClien$

Itu bagaimana ya ?

wah, saya lupa kl ada nginx disitu ya... pengakses httpd nya ya pasti 127.0.0.1

bisa di cek access log nya dari nginx ?

 

[JayaMedia]

wah, saya lupa kl ada nginx disitu ya... pengakses httpd nya ya pasti 127.0.0.1

bisa di cek access log nya dari nginx ?

Kok di nginx lognya ga ada ya ? Disini bukan /var/log/nginx

sizenya sih 0 0 semua.