Kodi Apache2 imalephera kugwira ntchito pafupipafupi ndi HestiaCP? Onani malangizo owunikira ndi kuthetsa mavuto omwe amachitika zokha (ndi makonzedwe athunthu)

Kugwa kwa Apache2 pafupipafupi kapena kulephera kuyambitsanso kwa Monit kokha m'malo a HestiaCP ? Nkhaniyi ikupereka chitsogozo chothandiza chopewera mavuto omwe amapezeka nthawi zambiri mukamayang'anira Apache2 ndi Monit, kusanthula mozama mavuto omwe amapezeka nthawi zambiri monga kusalinganika bwino kwa njira ya PID ndi kuletsa chilolezo, komanso kupereka mafayilo okonza okha a Monit. Dziwani njira zosungira ma seva omwe alipo ambiri tsopano ndikukwaniritsa kuchira kwachiwiri kokha kuchokera ku zolephera!

Mavuto omwe ndinakumana nawo ndikugwiritsa ntchito Monit kuyang'anira Apache2

Lachisanu lapitali, seva inandipatsa chenjezo la Monit pakati pausiku.

Ndinayang'ana gululo modabwa, ndipo mu gawo la apache2 status, munali Timeout yofiira.

Ndaganizirapo pang'ono. Ndangowonjezera Monit monitoring ku seva masana, ndipo ndakopera ndikunama makonzedwe kuchokera pa phunziro la pa intaneti. Sipayenera kukhala mavuto aliwonse, eti?

Mmawa wotsatira, nthawi inathanso. Pambuyo pa nthawi yachitatu, Monitor inangosiya, ndipo gululo linawonetsa "Osayang'aniridwa".

Ine...

Ndikuvomereza, poyamba sindinazitenge mozama. Kuyang'anira Apache2? Mutha kupeza makonzedwe ambiri a template pa intaneti, ingokoperani ndikuyika. Koma njira yopakira imeneyo inandikwiyitsa kwambiri.

Chifukwa chachikulu cha mkangano pakati pa kapangidwe ka HestiaCP ndi madoko a Monit

Choyamba ndiloleni ndikuwonetseni kasinthidwe komwe kandibweretsera mavuto ambiri, kuti muwone ngati ndi kofanana ndendende ndi mtundu womwe mwawona.

check process apache2 with pidfile /var/run/apache2/apache2.pid
    start program = "/usr/sbin/service apache2 start"
    stop program  = "/usr/sbin/service apache2 stop"
    if failed host 127.0.0.1 port 80 protocol http then restart
    if 5 restarts within 5 cycles then timeout

Zikuoneka bwino, sichoncho? Imayang'ana doko 80, ndipo ngati yagwa, imayambiranso. Ngati ikagwabe ikayambiranso kasanu, imazima nthawi.

Vuto ndilakuti, Apache2 yanu sikugwira ntchito ngakhale pa doko 80.

Ichi ndi chinyengo cha HestiaCP, ndipo ndi chifukwa chachikulu chomwe anthu ambiri amagweramo. Kapangidwe ka HestiaCP kokhazikika ndi kofanana ndi Nginx + Apache2, komwe Nginx ili ndi madoko 80 ndi 443 kutsogolo, ndipo Apache2 ikuyenda pa doko lapafupi 8081 kumbuyo.

Ngati mupempha Monit kuti afufuze momwe Apache2 imagwirira ntchito pa doko 80, zili ngati kupita ku McDonald's kukapeza KFC. Seva imakuyang'anani mopanda chidwi, ndipo nonse awiri mumayang'anizana. Pamapeto pake, Monit amazindikira kuti mwakhumudwa ndipo akuyamba kuyambitsanso mwachangu.

Pambuyo poyambitsanso, doko limakhalabe 8081. Kenako Monit amayesa kufufuza doko 80, lomwe limalepheranso, kotero limayambiranso. Kuzungulira kumeneku kumabwerezabwereza mpaka Monit ataganiza kuti silingathe kukonzedwa ndipo nthawi yake yatha.

Pamene ndinakumana ndi izi koyamba, ndinadabwa kwambiri. Maphunziro asanu ndi anayi mwa khumi omwe ndidapeza pa intaneti adagwiritsa ntchito port 80. Ngati mudawatsatira, vuto silinali ndi inu, koma ndi komwe chidziwitsocho chidachokera.

Fayilo ya Apache2 PID yoonongeka inapangitsa kuti Monit azindikire molakwika kuti njirayi siilipo.

Pambuyo posintha doko kuchokera pa 80 kupita ku 8081, Monit ayenera kukhala wokhoza kulizindikira, sichoncho?

Komabe, kwenikweni, nthawi zina imanenabe kuti "Kuchita kwalephera ".

Pambuyo povutikira kwa nthawi yayitali, potsiriza ndinapeza chifukwa chake chinali chosavuta: fayilo ya PID inali itawonongeka.

Taganizirani izi, Monit anali kuyambitsanso Apache2 mwachangu, nthawi iliyonse akuipha ndikuyiyambitsanso mwamphamvu, akupita mobwerezabwereza kangapo. Panthawiyi, fayilo /var/run/apache2/apache2.pid ikhoza kukhala 0 bytes.

Mwa kuyankhula kwina, fayiloyo ikadalipo, koma ilibe kanthu.

Monit akawerenga fayilo iyi, sapeza chilichonse. Sazindikira Apache2 yanu, ngakhale Apache2 yanu ikuyenda bwino kumbuyo; Monit sakuganiza kuti njirayi ilipo.

Nditaona izi, ndinasowa chonena kwa kanthawi.

Iyi ndi nthawi yolephera. Monit imalephera kuzindikira Apache 2 instance, imayambiranso Apache2, imawononga fayilo ya PID panthawi yoyambitsanso, imalephera kuzindikira kotsatira, ndikuyambiranso. Kuzungulira kumeneku kumapitirira mpaka nthawi yomaliza itachitika.

Njira Zothetsera Mavuto ndi Kukonza Zowunikira Apache2 mu HestiaCP Environment

Kunena zoona, njira yofufuzira si yovuta, koma muyenera kudziwa komwe mungafufuze.

Gawo loyamba ndikudziwa doko lomwe Apache2 yanu ikumvera. Ingolembani lamulo mu terminal.

netstat -tulpn | grep apache2

Kapenanso, mungagwiritse ntchito lamulo la `ss`; zotsatira zake ndi zomwezo.

ss -tulpn | grep apache2

Mudzawona zotsatira zofanana ndi izi.

tcp  0  0 127.0.0.1:8081       0.0.0.0:*  LISTEN  2942372/apache2

Yatsimikizika kuti ndi 8081, osati 80. Umenewo ndiye muzu wa vutoli.

Gawo lachiwiri ndikukonza fayilo ya PID yomwe yawonongeka. Izi n'zosavuta.

monit unmonitor apache2
systemctl restart apache2
cat /var/run/apache2/apache2.pid

Choyamba, siyani kuyang'anira kwa Monit kuti isasokoneze pamene mukukonza zinthu. Kenako, yambaninso Apache2 kuti ilole kuti ilembenso PID yoyera. Pomaliza, gwiritsani ntchito `cat` kuti muwone zomwe zili mu fayilo; iyenera kukhala ndi manambala angapo, osati chingwe chopanda kanthu.

Gawo ili likamalizidwa, vutoli limathetsedwa.

Kusanthula Koyerekeza kwa Makonzedwe Oteteza Okhazikika ndi Okhazikika a Monit

Maphunziro apaintaneti okhudza kukonza Apache2 ndi Monit nthawi zambiri amagawidwa m'magulu awiri.

Mtundu umodzi ndi "mtundu wachikhalidwe wosinthira," womwe umagwiritsa ntchito lamulo la `service` kuyang'anira mautumiki ndikuyang'ana madoko am'deralo popanda kuwonjezera zoletsa zambiri zovuta. Kapangidwe kameneka kangagwiritsidwe ntchito pa HestiaCP pongosintha doko, ndipo ndi kokhazikika.

Njira ina ndi njira ya "chitetezo chankhanza", yomwe imagwiritsa ntchito systemctl kuyang'anira mautumiki, imawonjezera zoletsa za njira za ana, komanso imagwiritsa ntchito njira yowunikira yokhwima. Imawoneka bwino, koma ili ndi vuto lalikulu: lamulo loletsa lomwe limagwiritsidwa ntchito ndi `killall -9`.

Kodi `killall -9` imatanthauza chiyani? Zimatanthauza kupha chipangizocho mokakamiza mosasamala kanthu za zomwe chikuchita. Ntchito ya brute-force iyi imatha kusiya mafayilo a PID owonongeka mosavuta, lomwe ndi vuto lomwe ndangotchula kumene.

Zomwe ndakumana nazo ndi zakuti kuchepetsa kuchuluka kwa njira za ana mu kasinthidwe koopsa n'kothandiza kwambiri. Pamene Apache2 yanu yagonjetsedwa ndi CC attack, kuchepetsa kuchuluka kwa njira za ana kungalepheretse seva kutha kukumbukira. Komabe, njira ya `killall -9` ndi yosagwiritsidwa ntchito kwenikweni.

Kotero pamapeto pake ndinasiya ndikuphatikiza ubwino wa makonzedwe onse awiri.

HestiaCP Apache2 Monit Best Practice Configuration

Sinthani fayilo /etc/monit/conf.d/apache2 ndi zomwe zili pansipa.

check process apache2 with pidfile /var/run/apache2/apache2.pid
    start program = "/bin/systemctl start apache2"
    stop program  = "/bin/systemctl stop apache2"
    if children > 120 for 2 cycles then restart
    if failed host 127.0.0.1 port 8081 protocol http for 2 cycles then restart
    if 5 restarts within 10 cycles then timeout

Ndiloleni ndifotokoze mwachidule mfundo zomwe zili kumbuyo kwa mizere ingapo iyi ya kasinthidwe.

Lembani doko 8081 kuti ligwirizane ndendende ndi kapangidwe ka HestiaCP ka proxy; siyani kulemba doko 80 mopusa.

Gwiritsani ntchito lamulo la `systemctl stop` m'malo mwa `killall -9` kuti muyimitse fayilo ya PID, kuti isaiwononge.

Malire a njira ya ana awonjezedwa: ngati chiwerengero cha ana chipitirira 120, njirayo idzayambiranso pambuyo pa maulendo awiri otsatizana kuti apewe kuukira kwa CC, koma sikoopsa kwambiri.

Nzeru yodziwira kulephera yasinthidwa kuti igwiritse ntchito njira ya "for 2 cycles", kutanthauza kuti kuyambitsanso kumayamba kokha pambuyo pa kulephera kawiri motsatizana, zomwe zimachepetsa zabwino zabodza. Kapangidwe kakale, komwe kanayambiranso pambuyo pongozindikira kamodzi kokha, kunali koopsa pang'ono.

Nthawi yomaliza yotha ntchito imachepetsedwa kufika pa 5 restarts mkati mwa 10 cycles, zomwe zimasiya kulekerera kokwanira kwa zolakwika.

HestiaCP Monit kuwunikaChidule cha Mavuto a Kakonzedwe ndi Kugawana Zomwe Mukukumana Nazo

Nditasintha kasinthidwe, ndinayang'anira apache2, ndipo pamapeto pake gululo linawonetsa chizindikiro chobiriwira cha "Chabwino".

Kodi ndingafotokoze bwanji momwe ndimamvera panthawiyo? Zinali ngati ndikukhala masiku awiri ndikulimbana ndi kachilomboka, koma ndinapeza kuti chifukwa chake chinali mzere umodzi wolakwika. Zinali zokhumudwitsa komanso zoseketsa.

Monit ndi chinthu chabwino chokha, ndipo kuyang'anira ma daemons ndi chinthu chomwe seva iliyonse iyenera kuchita. Koma vuto ndilakuti maphunziro ambiri apaintaneti amachokera pa lingaliro lakuti "Apache2 imagwiritsa ntchito doko 80 lokha," pomwe HestiaCP imagwiritsa ntchito reverse proxy, zomwe zikutanthauza kuti lingaliro ili silili loona.

Ngati mutsatira malangizo, vuto si inu; ndi lakuti phunziroli likugwira ntchito pazochitika zosiyana ndi zanu.

Kotero ngati mukugwiritsanso ntchito HestiaCP ndikusewera ndi Monit kuti muwone Apache2, ingokumbukirani zinthu ziwiri: Sinthani doko kukhala 8081, ndikugwiritsa ntchito lamulo la `systemctl` kuti muyimitse, osati `killall -9`. Ngati muchita zinthu ziwirizi, muyenera kupewa mavuto ena.

Popeza mwawerenga mpaka pano, ngati mwapeza kuti n’zothandiza, chonde kondani ndikugawana. Ngati mukufuna kulandira zosintha kaye, mutha kunditsatira!

Zikomo powerenga nkhani yanga. Tionananso nthawi ina.