Monit wuxuu kormeeraa boggaga firfircoon ee mareegaha wuxuuna ogaadaa in koodka xaaladiisu aanu ahayn 200, oo si toos ah ayuu dib u bilaabo php8.3-fpm

🚀 Marka bogga firfircoon ee mareegaha uu si lama filaan ah u yeesho kood xaalad aan 200 ahayn, sidee PHP8.3-FPM isku bogsiin kartaa ilbidhiqsiyo gudahood?

🔥 PHP90-FPM qaabaynta nafta-badbaadinta ee 8.3% hawlwadeenadu aanay garanayn! Waxbarid wax ku ool ah oo ah nidaamka is-bogsiinta bogga firfircoon ee Monit.

Ma kula tahay la socodka badbaadada habka PHP-FPM inay ku filan tahay? Gebi ahaanba khalad!
Marka PHP-FPM ee server-ka si lama filaan ah u dhaco haywire, si fudud u eegida badbaadada nidaamka waxay la mid tahay isticmaalka heerkulbeeg si loo cabbiro kansarka - gabi ahaanba ma qabato dhibaatada dilaaga ah.

Waxaan arkay dad aad u badan oo ilaalinayaphp-fpm.sockDabagalku waxa uu ahaa mid aan raali ka ahayn, taasina waxa ay keentay in mareegtu ay muddo dheer noqotay 404 xabaalood. Maanta waxaan rabaa in aan kala gooyo qalliinkan iyo dhalanteedka dayactirka oo aan ku tuso runta dhiiga leh: hab nololeed ≠ adeeg caadi ah.

🌪️ Xaalad burbur ah: Socket waa ku xiran yahay, laakiin mareegaha waa dhintay

hubaal ahGanacsiga E-ganacsigaKormeerka shabakada ayaa muujisay in habka PHP-FPM uu si caadi ah u socdo, laakiin isticmaalayaashu waxay ka cabanayeen lacag bixin la'aan.

Baadhitaan dheer ka dib, waxaan ogaaday in xusuusta ka soo daatay maktabadda qolo saddexaad ay sababtay in habka PHP uu noolaado laakiin gebi ahaanba aan awoodin in uu socodsiiyo codsiyada.

Waqtigan xaadirka ah, ku tiirsanaanta oo keliya ogaanshaha godka waxay la mid tahay hubinta garaaca maskaxda - ma heli kartid maskaxda gabi ahaanbageeri.

💥 Xalka dabagalka laba-dilka ah ee ka leexiya garashada

Tuur la socodka hal-geesoodka ah ee duugoobay! Khubarada ugu fiican dhamaantood waxay adeegsadaan istiraatiijiyada ceejin labajibbaaran ee lakabka habka + lakabka ganacsiga.

Qaabeynta soo socota ayaa u oggolaan doonta server-kaagu inuu iskiis u bogsado si ka dhakhso badan inta ay hawl-wadeennada dayactirku ka kici karaan sariirta marka dhibaatooyinku dhacaan:

check process php8.3-fpm with pidfile /run/php/php8.3-fpm.pid
    start program = "/usr/sbin/service php8.3-fpm start"
    stop program  = "/usr/sbin/service php8.3-fpm stop"
    if failed unixsocket /run/php/php8.3-fpm.sock then restart
    if failed 
        host www.chenweiliang.com 
        port 443
        protocol https
        request "/wp-login.php"
        status = 200
        hostheader www.chenweiliang.com
        for 3 cycles
    then restart
    if 5 restarts within 5 cycles then exec "/usr/bin/systemctl restart hestia"

🔍 Faahfaahinta dilaaga ah ee ku qarsoon xuduudaha

• hostheaderHalbeegyadu waa talismans naf-badbaadin ah oo ku jira CDN/xaaladaha isu dheelli-tiran. Iyaga la'aantood, waxay la mid tahay raadinta dagaalyahan qarsoodi ah oo leh muraayadaha aragga habeenkii - ma qabsan kartid gobolka hakadka ah ee uu sababay madaxa martigeliyaha maqan.

• for 3 cyclesNaqshadeynta muddada xaddidan waxay si fiican uga fogaataa wanaagga beenta ah ee ay keento shabkada. Waxay la mid tahay in lagu rakibo qalabka shoogga ah ee nidaamka ilaalinta si looga hortago gariirta in ay kiciso badhanka nukliyeerka.

• Ugu dambaynexec "/usr/bin/systemctl restart hestia"Waa tallaabada ugu dambeysa ee dilaaga ah. Markii PHP-FPM ay ku guuldareysatay inay soo noolaato 5 jeer oo isku xigta, waxaan rogay miiska oo dib u bilaabay dhammaan guddiga martigelinta. Tani waa khiyaamo aan ka xaday habka wareegga wareegga ee nidaamka ganacsiga Wall Street.

🚨 Duruusta laga bartay xanuunka iyo rafaadka: 3 dabin oo kaa dhigi kara fashil

1. Khiyaanada shahaadada SSL: casriyaynta kadib,protocol httpsQorin la'aantu waxay keentaa in kormeerku had iyo jeer u qiimeeyo sida caadiga ah. Ka dib waxaan ogaaday in noocii hore ee Monit uusan si toos ah u xaqiijin shahaadada, taasoo iga dhigtay inaan waayo gunnadayda dhamaadka sanadka.
2. Gelitaanka bogga 401 dabinka: illow inaad ku darto markaad la socoto bogga galitaankaBasic AuthenticationNatiijo ahaan, imtixaan kastaa wuxuu kiciyaa dib u bilow. Waxay la mid tahay waraabinta beer leh biyo-mareenka dabka - xoog ku filan laakiin gebi ahaanba khaldan
3. Log Black Hole: Hal mar/var/log/monit.logMarkii cabbirku cirka isku shareeray oo gaadhay 50G, waxaanu ogaanay in nacasyada qaar ay dejiyeen muddada ogaanshaha 1 ilbiriqsi. Xusuusnow, diiwaanka la socodka laftiisa waa shayga u baahan in la kormeero!

💡 Xaqiijinta iyo talaabooyinka ka saarida

1. Hubinta habaynta:

   monit -t
   

2. Qaabaynta culeyska xad dhaafka ah:

   monit reload

Imtixaanka u dambeeya

1. Tijaabada Is-dilitaanka: Toos ahkill -9Dila nidaamka PHP-FPM oo eeg diiwaanada sarakicidda ee ku jirta log-ka kormeerka. Waxay u egtahay daawashada filim zombie ah!
2. Cirbad sun ah: Si ula kac ah wax uga beddel bogga gelitaanka si aad u soo celiso koodka xaaladda 503 oo aad ilaaliso in nidaamka la socodka uu si sax ah u weerari karo. Habkan waxaan ugu yeeraa "tallaalka dhijitaalka ah" - ka hor inta aan la gelin qadar yar oo fayras ah nidaamka si looga saaro jawaabta difaaca ee nidaamka kormeerka. Marka qaylo dhaanta ay si ba'an u iftiimaan oo adeegyadu is bogsadaan, waxaad arki doontaa doonista ugu galmoodka badan si ay ugu badbaadaan koodhka adduunka oo gubanaya!