Re: [CentOS] Logrotate base

[Fajar Priyanto]

On Thu, Feb 12, 2009 at 12:12 PM, muhammad panji  wrote:
> On Thu, Feb 12, 2009 at 11:05 AM, Fajar Priyanto  wrote:
>> Hi guys,
>> Logrotate is checked every day by cron.daily, right?
>> I notice in logrotate.conf by default it's weekly.
>> If I change it into monthly (now, on 12 of Feb), when will it do the
>> monthly rotation?
> AFAIK it is a default value to rotate the log file which could be
> override by individual configuration on /etc/logrotate.d/
> so if it the individual configuration doesn't specify the rotation
> period it will use the default which is weekly

My question is changing weekly to monthly.

Anyway, after googling2, I found this very good indepth article on
logrotate, thought I share it here:
http://www.softpanorama.org/Logs/Log_rotation/logrotate.shtml
One item that you didn't cover, is how logrotate knows when it is the
proper time to rotate a daily, weekly, or monthly file. Part of that
is controlled by the status file (/var/lib/logrotate.status on most
Linux system) which tracks when a particular file was last rotated.
The other part is that Monthly rotations are done with the first run
of logrotate that month, and Weekly's are run if the last run was
later in the previous week, or the last rotation was over 7 days prior
(Sunday=0 Saturday=6). So if you are running logrotate daily, then it
works itself out to the first day of the month, and Sunday's for the
weeklies.
So, it will be March 1st.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] logs such as messages, boot.log, and kernel contained 0 size

[Jay Leafey]

Frank Ling wrote:

Hi,

My both CentOS 5 servers have logging problems. Logs such as messages, 
boot.log, kernel, spooler, and tallylog in /var/log directory are all 0 
size.


The kernel is:  Linux 2.6.18-92.1.22.el5 #1 SMP.

Since the /var/log/messages contained no information it would be 
impossible to troubleshoot the problem.


I am very sure both systems have not been hacked by others.

Sincerely,

Frank Ling
--
-rw---  1 root root  0 Feb  8 04:02 messages
-rw---  1 root root  0 Feb  3 11:04 messages.1
-rw---  1 root root  0 Jan 25 04:02 messages.3
-rw---  1 root root  0 Jan 11 04:03 messages.4
-rw---  1 root root 10 Dec 27 13:00 messages.offset

-rwx--  1 root root  0 Feb 11 19:12 kernel
-rwx--  1 root root  0 Feb 11 16:53 kernel.1
-rwx--  1 root root  0 Jan 25 04:02 kernel.3
-rwx--  1 root root  0 Jan 11 04:03 kernel.4

-rw---  1 root root  0 Feb  8 04:02 spooler
-rw---  1 root root  0 Feb  3 07:51 spooler.1
-rw---  1 root root  0 Jan 25 04:02 spooler.3
-rw---  1 root root  0 Jan 11 04:03 spooler.4

-rw---  1 root root  0 Jun 24  2008 tallylog
--



I've had something similar happen a couple of times after an update.  In 
my case the /etc/services file got it's security context clobbered when 
some package tried to update it's contents.  When logrotate ran, the 
syslog daemon couldn't open /etc/services because of the error and I 
ended up with a bunch of empty log files.


The quickest way to check for this is the command:

restorecon -v /etc/services

If nothing prints out in response, that's not the problem.  If it DOES, 
that might explain it.  I have been checking the contexts occasionally 
to try and trap exactly when it happens.  I use:


restorecon -R -n -v /etc

which walks through the entire /etc tree looking for contexts to change 
but just reports any exceptions.


Just a thought!
--
Jay Leafey - Memphis, TN
jay.lea...@mindless.com


smime.p7s
Description: S/MIME Cryptographic Signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Logrotate base

[muhammad panji]

On Thu, Feb 12, 2009 at 11:05 AM, Fajar Priyanto  wrote:
> Hi guys,
> Logrotate is checked every day by cron.daily, right?
> I notice in logrotate.conf by default it's weekly.
> If I change it into monthly (now, on 12 of Feb), when will it do the
> monthly rotation?
AFAIK it is a default value to rotate the log file which could be
override by individual configuration on /etc/logrotate.d/
so if it the individual configuration doesn't specify the rotation
period it will use the default which is weekly

> a. On 12 of March or
> b. On 1st of March?
weekly use monday so I think it will be 1st of march. CMIIW
regards,



-- 
Muhammad Panji
http://sumodirjo.wordpress.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Logrotate base

[Fajar Priyanto]

Hi guys,
Logrotate is checked every day by cron.daily, right?
I notice in logrotate.conf by default it's weekly.
If I change it into monthly (now, on 12 of Feb), when will it do the
monthly rotation?
a. On 12 of March or
b. On 1st of March?

Thanks for any insight.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] tinydns/djbdns opinion poll

[Ian Forde]

On Wed, 2009-02-11 at 17:34 -0500, James B. Byrne wrote:
> With one very large caveat.
> 
> Be aware that updating bind via yum can result in your existing bind
> configuration files being renamed to something.rmpsave and your name
> server left in a dysfunctional state. I suggest that you consider
> excluding bind from normal updates and only update it when you are
> ready and able to check for possible configuration issues.

That's true of pretty much every rpm that has config files... it's part
of my standard updating routine:

yum update
updatedb
locate rpmsave
locate rpmnew
fix any config files...
restart services and/or reboot if necessary...

-I

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] logs such as messages, boot.log, and kernel contained 0 size

[Frank Ling]

Hi,

My both CentOS 5 servers have logging problems. Logs such as messages, 
boot.log, kernel, spooler, and tallylog in /var/log directory are all 0 size. 

The kernel is:  Linux 2.6.18-92.1.22.el5 #1 SMP.

Since the /var/log/messages contained no information it would be impossible to 
troubleshoot the problem.

I am very sure both systems have not been hacked by others. 

Sincerely,

Frank Ling
--
-rw---  1 root root  0 Feb  8 04:02 messages
-rw---  1 root root  0 Feb  3 11:04 messages.1
-rw---  1 root root  0 Jan 25 04:02 messages.3
-rw---  1 root root  0 Jan 11 04:03 messages.4
-rw---  1 root root 10 Dec 27 13:00 messages.offset

-rwx--  1 root root  0 Feb 11 19:12 kernel
-rwx--  1 root root  0 Feb 11 16:53 kernel.1
-rwx--  1 root root  0 Jan 25 04:02 kernel.3
-rwx--  1 root root  0 Jan 11 04:03 kernel.4

-rw---  1 root root  0 Feb  8 04:02 spooler
-rw---  1 root root  0 Feb  3 07:51 spooler.1
-rw---  1 root root  0 Jan 25 04:02 spooler.3
-rw---  1 root root  0 Jan 11 04:03 spooler.4

-rw---  1 root root  0 Jun 24  2008 tallylog
--


  ___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] httpd: "internal dummy connection"

[Scott Silva]

on 2-11-2009 3:07 PM Mike -- EMAIL IGNORED spake the following:
> On Wed, 11 Feb 2009 14:45:36 -0800, Florin Andrei wrote:
> 
>> Mike -- EMAIL IGNORED wrote:
>>>new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] "GET /
>>>   HTTP/1.0" 403 - "-" "Apache/2.2.3 (CentOS) (internal dummy
>>>   connection)"
>>>
>>> What is it?  Why do I have it now, and not before?
>> http://tinyurl.com/cnzaf6
> 
> If I click this on a FC7) Linux box, Firefox gets redirected
> to google, and automatically runs a search.  I wonder
> how that happens.

That is what it is supposed to do. It is the smartass way to suggest that you
try google before posting a question.
> 
> If I try to access it on a WinXP box, ZoneAlarm blocks
> it as a spy site.  I wonder why it thinks so.
> 
Couldn't say why that is.



-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] 5.2 x86_64 DVD

[Warren, Eucke]

From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
Behalf Of ward.p.fonte...@wellsfargo.com
Sent: Wednesday, February 11, 2009 3:17 PM
To: CentOS@centos.org
Subject: [CentOS] 5.2 x86_64 DVD

Paul Fontenot said:

> I've pulled this down with Firefox, wget, a bittorrent client and an
ftp client using Windows as well as Linux hosts. Is something wrong with
the
> distributed DVD image? It has failed an MD5 check every time I've
pulled it down.

I created my own as I needed it as I already had the CD's.  This site
http://www.electrictoolbox.com/save-time-bandwidth-dvd-from-cds/
actually does a good job of explaining how.

Eucke
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] tinydns/djbdns opinion poll

[Florin Andrei]

James B. Byrne wrote:
> 
> Be aware that updating bind via yum can result in your existing bind
> configuration files being renamed to something.rmpsave and your name
> server left in a dysfunctional state. I suggest that you consider
> excluding bind from normal updates and only update it when you are
> ready and able to check for possible configuration issues.

Or put those files under Cfengine or Puppet and have auto-yum work with 
the config management system.

But yeah, I agree, if the number of systems is small (so config 
management is not justified), avoid doing auto-updates to the critical 
components.

-- 
Florin Andrei

http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] 5.2 x86_64 DVD

[Ward.P.Fontenot]

I've pulled this down with Firefox, wget, a bittorrent client and an ftp
client using Windows as well as Linux hosts. Is something wrong with the
distributed DVD image? It has failed an MD5 check every time I've pulled
it down.

 

Paul Fontenot 

 

Wells Fargo

Public Key Infrastructure Team
Cryptography Services|IST|EIM|TES|TIG|Wells Fargo
Email: ward.p.fonte...@wellsfargo.com
 

Phone: (480) 437-7795



This message may contain confidential and/or privileged information. If
you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein. If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message. Thank you for your cooperation.

 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] httpd: "internal dummy connection"

[Mike -- EMAIL IGNORED]

On Wed, 11 Feb 2009 14:45:36 -0800, Florin Andrei wrote:

> Mike -- EMAIL IGNORED wrote:
>> 
>>new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] "GET /
>>   HTTP/1.0" 403 - "-" "Apache/2.2.3 (CentOS) (internal dummy
>>   connection)"
>> 
>> What is it?  Why do I have it now, and not before?
> 
> http://tinyurl.com/cnzaf6

If I click this on a FC7) Linux box, Firefox gets redirected
to google, and automatically runs a search.  I wonder
how that happens.

If I try to access it on a WinXP box, ZoneAlarm blocks
it as a spy site.  I wonder why it thinks so.

Mike.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] httpd: "internal dummy connection"

[Florin Andrei]

Mike -- EMAIL IGNORED wrote:
> 
>new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] "GET /
>   HTTP/1.0" 403 - "-" "Apache/2.2.3 (CentOS)
>   (internal dummy connection)"
> 
> What is it?  Why do I have it now, and not before?

http://tinyurl.com/cnzaf6

-- 
Florin Andrei

http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] tinydns/djbdns opinion poll

[James B. Byrne]

Message-ID: <4991e3b7.6090...@andrei.myip.org>

On: Tue, 10 Feb 2009 12:29:43 -0800, Florin Andrei
 wrote:

>Jake wrote:
>>
>> We're about to start moving our public DNS to in-house managed
>> servers. My first thought was "Linux + BIND" and we're done.
>> Someone in another business unit's IT dept. has suggested
>> tinydns be used.
>
> But things have changed. Nowadays Bind is solid enough. If
> you're still worried about security issues (you shouldn't,
> but I'm assuming the paranoid scenario) then CentOS has a
> good SELinux policy around it, so just install the latest
> CentOS, keep SELinux enabled, do a "yum update" every once
> in a while, and be at peace. By the way, this is also the
> most sweat-free solution from a sysadmining perspective.

With one very large caveat.

Be aware that updating bind via yum can result in your existing bind
configuration files being renamed to something.rmpsave and your name
server left in a dysfunctional state. I suggest that you consider
excluding bind from normal updates and only update it when you are
ready and able to check for possible configuration issues.


-- 
***  E-Mail is NOT a SECURE channel  ***
James B. Byrnemailto:byrn...@harte-lyne.ca
Harte & Lyne Limited  http://www.harte-lyne.ca
9 Brockley Drive  vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada  L8E 3C3

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] httpd: "internal dummy connection"

[Mike -- EMAIL IGNORED]

On my Centos 2.5 web server, in  /var/log/httpd/access_log,
I saw several occurrences of:

   new.mydomain.net - - [11/Feb/2009:14:34:58 -0500] "GET /
  HTTP/1.0" 403 - "-" "Apache/2.2.3 (CentOS)
  (internal dummy connection)"

I have never seen anything like this before over many
years of watching my logs.  I presume it failed because
my named virtual host does not have "new...", if for
no other reason.

What is it?  Why do I have it now, and not before?

Thanks for your advice.
Mike.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] mirroring centos servers

[Fabian Arrotin]

fabian dacunha wrote:
> Dear All,
> 
> I have 2 server with almost identical configuration nd would like to
> mirror them
> 
> bascillay i would like to use it as a firewall.
> 
> i was thinking of linux HA but could not really find clear examples if it
> could achive my purpose
> 
> apprecite if someone can help me of any site with examples on how to
> mirror 2 centos servers so i one fails the other works perfect
> 
> thanks and really apprecite
> 
> regards
> fabian
> 

I've already used Heartbeat between two centos machines acting as 
gateway/iptables firewall and it worked perfectly.
The only 'problem' is that iptables connection status is of course not 
shared between the two nodes.
Never used shorewall though.

-- 
--
Fabian Arrotin
  idea=`grep -i clue /dev/brain` ; test -z "$idea" && echo "sorry, init 
6 in progress" || sh ./answer.sh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] rt_cache leak in 2.6.18

[nate]

Hector Herrera wrote:
> Hello,
>
> This is a CentOS 5.2 box configured as a router for a network handling
> about 200-300 Mbps, routing traffic to/from the internet for about 6,000
> IPs.

> Therefore ... I'm at a loss as to where to go from here.  Certainly
> rebooting the server every day is not an option, and increasing the
> max_size will just delay it.


> Suggestions?

Use a real router or L3 switch to do the job instead of a PC? Or
run the newer patched kernel on the system. 300mbit is trivial.

Even modern good gigabit L3 switches can forward over 100 million
packets per second, which is tens of gigs of data. (not talking
cisco gear, it's astonishing how poor performing most cisco
gear is given their prices).

nate



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[Jure Pečar]

On Wed, 11 Feb 2009 11:50:34 -0800
Florin Andrei  wrote:

> I was just curious about performance comparisons between different types 
> of load balancers in general.

It's hard to say ... you usualy use load balancers to achieve higher
availability and put as little as possible in the way of traffic when you
want performance (save for the most expensive hw load balancers).

For Apache, I had great success with mod_backhand, available at
www.backhand.org iirc. It's one of the smartest balancers, but only
available for apache 1.3. I've heard 1.3 is still faster than 2.x in
many cases.

But I'm nginx only now for a few years now ;)


-- 

Jure Pečar
http://jure.pecar.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[Florin Andrei]

J Potter wrote:
> 
> It's hard to get very specific about what's best for your setup  
> without know the specifics of things like the data sync needs on the  
> apache nodes, so take all of this with a grain of salt -- or as a  
> default starting place.

I did not ask anything related to my setup. I already use a couple 
different load balancing technologies.

I was just curious about performance comparisons between different types 
of load balancers in general.

-- 
Florin Andrei

http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] rt_cache leak in 2.6.18

[Hector Herrera]

Hello,

This is a CentOS 5.2 box configured as a router for a network handling
about 200-300 Mbps, routing traffic to/from the internet for about 6,000
IPs.

After about 2-3 days, the kernel complains about "dst cache overflow" and
even thought it hasn't crashed, the network is
un-responsive.  All IP forwarding stops and the server cannot be reached
from any network interfaces.

After diagnosing the issue, it appears that there is a rt_cache leak in
the kernel.  At 5 minute intervals I collect the following two values:

`/sbin/ip -o route ls cache | wc -l`
`grep ip_dst_cache /proc/slabinfo | awk -F' ' '{ print $2; }'`

The first value represents the number of cached routes in the network
stack.  The second value represents the number of cached route objects the
kernel has allocated.

After collecting the data for 8 hours, I have seen the cached routes count
remain fairly constant, but the number of cached route objects increase
from about 220,000 objects to 410,000 objects.  The cached routes count
remains between 4,000 and 8,000 routes.

I posted a pretty graph at http://www.pier-pro.com/ip_dst_cache_leak.png
(the blue line is the value of ip_dst_cache, the green value represents
the count of cached routes).

Once the ip_dst_cache value reaches the value of
/proc/sys/net/ipv4/route/max_size then the network fails and the kernel
complains about 'dst cache overflow' whenever a packet arrives.

The only solution at that point is to perform a reboot.

Flushing the routing tables by `echo 1 > /proc/sys/net/ipv4/route/flush`
only clears the cached routes, however the value of ip_dst_cache does not
change.

According to
http://linux.derkeiler.com/Mailing-Lists/Fedora/2005-07/1175.html this is
a known bug that was fixed in 2.6.11, however, I'm running 2.6.18 (as
updated with `yum update`)

I downloaded the kernel sources, and indeed, the kernel source contains
the bug fix in the above article.

Therefore ... I'm at a loss as to where to go from here.  Certainly
rebooting the server every day is not an option, and increasing the
max_size will just delay it.

Suggestions?

Thank you,

Hector










___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] INIT: Id "snmp" respawning too fast: disabled for 5 minutes

[David Halik]

Thanks for the reply. I've tried both "init q" and "init u" without any 
luck, the message still appeared five minutes later. Init did post a 
message that it was reloaded, so the command worked, yet the process is 
still complaining about this "snmp" id.

Here's my inittab. It's fairly standard and I don't think any custom 
changes were made.

#
# inittab   This file describes how the INIT process should set up
#   the system in a certain run-level.
#
# Author:   Miquel van Smoorenburg, 
#   Modified for RHS Linux by Marc Ewing and Donnie Barnes
#

# Default runlevel. The runlevels used by RHS are:
#   0 - halt (Do NOT set initdefault to this)
#   1 - Single user mode
#   2 - Multiuser, without NFS (The same as 3, if you do not have 
networking)
#   3 - Full multiuser mode
#   4 - unused
#   5 - X11
#   6 - reboot (Do NOT set initdefault to this)
#
id:3:initdefault:

# System initialization.
si::sysinit:/etc/rc.d/rc.sysinit

l0:0:wait:/etc/rc.d/rc 0
l1:1:wait:/etc/rc.d/rc 1
l2:2:wait:/etc/rc.d/rc 2
l3:3:wait:/etc/rc.d/rc 3
l4:4:wait:/etc/rc.d/rc 4
l5:5:wait:/etc/rc.d/rc 5
l6:6:wait:/etc/rc.d/rc 6

# Trap CTRL-ALT-DELETE
ca::ctrlaltdel:/sbin/shutdown -t3 -r now

# When our UPS tells us power has failed, assume we have a few minutes
# of power left.  Schedule a shutdown for 2 minutes from now.
# This does, of course, assume you have powerd installed and your
# UPS connected and working correctly. 
pf::powerfail:/sbin/shutdown -f -h +2 "Power Failure; System Shutting Down"

# If power was restored before the shutdown kicked in, cancel it.
pr:12345:powerokwait:/sbin/shutdown -c "Power Restored; Shutdown Cancelled"


# Run gettys in standard runlevels
co:2345:respawn:/sbin/agetty ttyS0 9600 vt100-nav
1:2345:respawn:/sbin/mingetty tty1
2:2345:respawn:/sbin/mingetty tty2
3:2345:respawn:/sbin/mingetty tty3
4:2345:respawn:/sbin/mingetty tty4
5:2345:respawn:/sbin/mingetty tty5
6:2345:respawn:/sbin/mingetty tty6

# Run xdm in runlevel 5
x:5:respawn:/etc/X11/prefdm -nodaemon



Filipe Brandenburger wrote:
> Hi,
>
> On Tue, Feb 10, 2009 at 14:23, David Halik  wrote:
>   
>> INIT: Id "snmp" respawning too fast: disabled for 5 minutes
>> INIT: Id "snmp" respawning too fast: disabled for 5 minutes
>> INIT: Id "snmp" respawning too fast: disabled for 5 minutes
>> 
>
> What does "grep -i snmp /etc/inittab" say?
>
> If there is really nothing, try "init q" to see if init is still using
> old contents of that file. If that does not help, try "init u" as
> well.
>
> If it still does not fix it, please post the full contents of your
> inittab so that we can help you fix the problem.
>
> HTH,
> Filipe
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>   


-- 

David Halik
System Administrator
OIT-CSS Rutgers University
dha...@jla.rutgers.edu


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] smartd and 3ware 9xxx configs

[Jim Perrin]

On Wed, Feb 11, 2009 at 12:17 PM, Joshua Baker-LePain  wrote:

> Have you thought about tying tw_cli into nagios?  That's one of my
> round-tuit projects.  I'm sure there are already plugins for it, and it
> seems like you may get better info.

I actually did think about doing this, but this is for my home
network, and I'm a little too lazy/busy currently to set up nagios for
personal use. I might do that a bit later on if I'm feeling frisky,
but for now I was just looking for quick-fix type checking. There are
plugins for this already as you suggested, but I have no idea how well
they actually function.


-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache, using nginx

[nate]

Les Mikesell wrote:

> It may be, but I'd like to see some real-world  measurements.  Most of
> the discussions about more efficient approaches seem to use straw-man
> arguments that aren't realistic about the way apache works or timings of
> a few static pages under ideal conditions that don't match an internet
> web server.

In my experience apache has not been any kind of noticeable bottleneck.
At my last company we deployed a pair of apache reverse proxy nodes
that did:

- reverse proxy(188 rewrite rules)
- HTTP compression (compression level set to 9)
- mod_expires for some static content that we hosted on the front end
  proxy nodes
- SSL termination for the portion of the sites that needed SSL
- Header manipulation (had to remove some headers to work around
  IE browser issues with SSL)
- Serve up a "maintenance" page when we took the site down for
  software updates(this was on another dedicated apache instance)

traffic flow was:

internet->BigIP->proxy->BigIP->front end web servers->BigIP->back end apps
(utilizing BigIP's ability to transparently/effortlessly NAT
traffic internal to the network, and using HTTP headers to
communicate the originating IP addresses from the outside
world).

Each proxy node had 8 copies of apache going, 4 for HTTP and 4
for HTTPS, at the moment they seem to average about 125 workers
per proxy node, and an average of 80 idle workers per node.
CPU averages 3%, memory averages about 650MB(boxes have 3GB).
When I first started at the company they were trying to do this
via a low end F5 BigIP load balancer but it was not able to
provide the same level of service at low latency(and that was
when we had a dozen proxy rules). I love BigIPs but for proxies
I prefer apache. It wasn't until recently that F5 made their
code sudo multithreaded, until then even if you had a 4 CPU
load balancer, the proxy stuff could only use one of those
CPUs. Because of this limitation one large local customer F5
told me that they had to implement 5 layers of load balancers
due to their app design depended on the full proxy support in
the BigIPs to route traffic.

Systems were dual proc single core hyperthreaded. They proxied
requests for four dual proc quad core systems which seem to
average around 25-35% CPU usage and about 5GB of memory usage(8GB
total) a piece.

At the company before that we had our stuff split out per
customer, and had 3 proxy nodes in front and about 100 web servers
and application servers behind them for the biggest customers,
having 3 was just for N+1 redundancy, 1 was able to handle the
job. And those proxies were single processor.

At my current job 99% of the load is served directly by tomcat,
the application on the front end at least is simple by comparison
so there's no need for rewrite-type rules. Load balancing is
handled by F5 BigIPs, as is SSL termination. We don't do any
HTTP compression as far as I know.

I personally would not want to load balance using apache, I load
balance with BigIPs, and I do layer 7 proxying(URL inspection)
with apache. If I need to do deeper layer 7 inspection then I
may resort to F5 iRules, but the number of times I've had to
do that over the past several years I think is maybe two.
And even today with the latest version of code, our dual
processor BigIPs cannot run in multithreaded mode, it's not
supported on the platform, only on the latest & greatest(ours
is one generation back from the latest).

I use apache because I've been using it for so long and know it
so well, it's rock solid stable at least for me, and the fewer
different platforms I can use reduces complexity and improves
manageability for me.

If I was in a situation where apache couldn't scale to meet the
needs and something else was there that could handle say 5x the
load, then I might take a look. So far haven't come across that
yet.

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] smartd and 3ware 9xxx configs

[Jerry Franz]

Jim Perrin wrote:
> I'm looking to do a bit more monitoring of my 3ware 9550 with smartd,
> and wanted to see what others were doing with smart for monitoring
> 3ware hardware.
>
> Do you have the smartd.conf configured to test, or simply monitor health 
> status?
> Are you monitoring the drive as centos sees it (/dev/sdX) or are you
> using the 3ware /dev/twaX for monitoring?
>
> Opinions and discussions are welcome :-P
>
>   
I run smart tests weekly in a staggered fashion during off hours on my 
3ware arrays. Like this:

/dev/twa0 -d 3ware,0 -H -l selftest -l error -o on -S on -s 
(O/../../1/18|S/../../2/22|L/../../3/01) -m root
/dev/twa0 -d 3ware,1 -H -l selftest -l error -o on -S on -s 
(O/../../2/18|S/../../3/22|L/../../4/01) -m root

I've found that the smart monitors are pretty good about giving me at 
least some warning about imminent drive failures when I do this.

-- 
Benjamin Franz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache, using nginx

[Les Mikesell]

Sergej Kandyla wrote:
> 
> nginx http_proxy module is universal complex solution. Also apache 
> working in prefork mode (in general cases), I don't know does 
> mod_jk\mod_proxy_ajp works in the worker-MPM mode...
> 
> In the preforking mode apache create a child on each incoming request, 
> so it's too much expensive for resource usage.

Have you actually measured this?  Preforking apache doesn't fork per 
request, it forks enough instances to accept the concurrent connection 
count plus a few spares.  Each child would typically handle thousands of 
requests before exiting and requiring a new fork - the number is 
configurable.

> Also apache spend about 
> 15-30Kb mem for serving each tcp connection at this time nginx only 
> 1-1.5Kb. If you have, for example, abount 100 concurrent connections 
> from different IPs there is nearly 100 apache forks... it's too expensive.

A freshly forked child should have nearly 100% memory shared with its 
parent and other child instances.  As things change, this will decrease, 
but you are going to have to store the unique socket/buffer info 
somewhere whether it is a copy-on-write fork or allocated in an 
event-loop program.  If you run something like mod_perl, the shared 
memory effect degrades pretty quickly because of the way perl stores 
reference counts along with its variables, but I'd expect the base 
apache and most module code to be pretty good about retaining their 
inherited shared memory.

> If you don't need full power of apache flexibility as server for dynamic 
> applications, why use it for simple job such as proxing ?
> So, I think nginx is great as light frontend server.

It may be, but I'd like to see some real-world  measurements.  Most of 
the discussions about more efficient approaches seem to use straw-man 
arguments that aren't realistic about the way apache works or timings of 
a few static pages under ideal conditions that don't match an internet 
web server.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Possible CentsOS licensing issue

[Kai Schaetzl]

John wrote on Wed, 11 Feb 2009 16:45:46 +0100:

> I have no idea why it in previous post failed and now worked.

That is certainly somewhat better, thanks :-)

> > It normally does, but the orriginal message is in HTML, so when the reply 
> > was ready, OE complained that the message was in HTML and recomended to 
> > convert it to text format, what I did. There the > went lost. I missed 
> > that.

You have to tell your OE to *not* answer in the format of the message, but 
always reply in plain text. Then you won't get this problem. I think.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] smartd and 3ware 9xxx configs

[Ray Van Dolson]

On Wed, Feb 11, 2009 at 12:17:09PM -0500, Joshua Baker-LePain wrote:
> On Tue, 10 Feb 2009 at 9:42pm, Jim Perrin wrote
> 
> > I'm looking to do a bit more monitoring of my 3ware 9550 with smartd,
> > and wanted to see what others were doing with smart for monitoring
> > 3ware hardware.
> >
> > Do you have the smartd.conf configured to test, or simply monitor health 
> > status?
> > Are you monitoring the drive as centos sees it (/dev/sdX) or are you
> > using the 3ware /dev/twaX for monitoring?
> >
> > Opinions and discussions are welcome :-P
> 
> Have you thought about tying tw_cli into nagios?  That's one of my 
> round-tuit projects.  I'm sure there are already plugins for it, and it 
> seems like you may get better info.

On a somewhat related note.  I haven't yet looked into what 3ware does
on the SNMP side.  Does it include a MIB file?  Anyone generating traps
on bad disk events?

Not hard to set up your own OID to run a shell script to check disk
status, but traps are cooler. :)

Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] smartd and 3ware 9xxx configs

[Joshua Baker-LePain]

On Tue, 10 Feb 2009 at 9:42pm, Jim Perrin wrote

> I'm looking to do a bit more monitoring of my 3ware 9550 with smartd,
> and wanted to see what others were doing with smart for monitoring
> 3ware hardware.
>
> Do you have the smartd.conf configured to test, or simply monitor health 
> status?
> Are you monitoring the drive as centos sees it (/dev/sdX) or are you
> using the 3ware /dev/twaX for monitoring?
>
> Opinions and discussions are welcome :-P

Have you thought about tying tw_cli into nagios?  That's one of my 
round-tuit projects.  I'm sure there are already plugins for it, and it 
seems like you may get better info.

-- 
Joshua Baker-LePain
QB3 Shared Cluster Sysadmin
UCSF
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vsftpd virtual users

[dnk]

On 11-Feb-09, at 7:05 AM, Alain Reguera Delgado wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> dnk wrote:
> ...
>> I just need to have the option to have a "read only" account able to
>> access another users directory. There is no main directory that all
>> users work out of.
>
> Don't know how possible that could be. Remember that each user is in a
> chrooted environment, each user is confined into its own directory.
>
> Best Regards,
> - --
> Alain Reguera Delgado 

Well as far as I have made it, it is possible to share a directory by  
using a "per user" config option. It is geting hte different  
permissions I am having to deal with. Part of me thinks this would be  
easier using a real system account so I can restrict permissions using  
tools like chmod, etc. But I hate the idea of using system accounts  
for FTP.

d




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[J Potter]

Look at pound: http://www.apsis.ch/pound/

If you are concerned about traffic volume, you might consider running  
squid as a transparent proxy in front of pound. I.e.:

request -> squid -> pound -> apache

Where squid will return the response for everything marked as  
cacheable and still fresh; and pound will take care of load balancing  
to apache. (Pound can inspect/insert cookies to send visitors to the  
same back-end node on subsequent requests.) On some of our setups,  
squid responds to 98% of the requests coming in, and is able to  
respond to an extremely insane high volume of requests. Other list  
users might be able to provide good stats as to what sort of volume  
they can support. (I'd be curious to hear what others have seen...)

For HA:
- 2 instances of squid, active/standby or active/active (i.e. two IP  
address in DNS for the public hostname, and have each squid instance  
pick up the others during failure).
- 2 instances of pound, active/standby
- N instances of apache

Re: replication of content on your apache nodes, another poster  
suggested drbd. From my understanding, I do not think this is  
possible, since only one node can mount the drbd volume at a time. If  
you have shared data that needs to be seen across apache nodes, either  
stick it in SQL or mount an NFS volume across the nodes. (But then you  
have NFS in the picture, which might not be so good.)

If your apache code is constant, then have a master apache node and  
write a shell script that runs rsync to push code changes out to the  
other instances.

It's hard to get very specific about what's best for your setup  
without know the specifics of things like the data sync needs on the  
apache nodes, so take all of this with a grain of salt -- or as a  
default starting place.

best,
Jeff
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Possible CentsOS licensing issue

[John]

> It would be very helpful if you could tell your OE to use quoting (">")
> instead of just clutching your reply below the original without any
> distinction. I know that it can do this.
>
> Kai

> It normally does, but the orriginal message is in HTML, so when the reply 
> was ready, OE complained that the message was in HTML and recomended to 
> convert it to text format, what I did. There the > went lost. I missed 
> that.
>
> John
>
I have no idea why it in previous post failed and now worked.





> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Possible CentsOS licensing issue

[John]

"Kai Schaetzl"  schreef 
in bericht news:va.36b6.012f5...@news.conactive.com...
It would be very helpful if you could tell your OE to use quoting (">")
instead of just clutching your reply below the original without any
distinction. I know that it can do this.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com

It normally does, but the orriginal message is in HTML, so when the reply 
was ready, OE complained that the message was in HTML and recomended to 
convert it to text format, what I did. There the > went lost. I missed that.

John



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vsftpd virtual users

[Alain Reguera Delgado]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

dnk wrote:
...
> I just need to have the option to have a "read only" account able to  
> access another users directory. There is no main directory that all  
> users work out of.

Don't know how possible that could be. Remember that each user is in a
chrooted environment, each user is confined into its own directory.

Best Regards,
- --
Alain Reguera Delgado 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFJkuk2yXxCQEoXDZARAosxAKCHwOcqaR9VvXqG7I3PvuuofvRkrQCfc3JI
yLaTrIuQhGjQ9+jhKKkaLy8=
=Hn+R
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clamAV problem

[Anne Wilson]

On Friday 06 February 2009 10:31, Kai Schaetzl wrote:
> Anne Wilson wrote on Fri, 6 Feb 2009 07:50:58 +:
> > WARNING: Clamd was NOT notified: Can't connect to clamd through
> > /tmp/clamd.socket
>
> well, is it started, does the socket exist?
>
> Kai

First, thanks and apologies to all who responded.  I've been away a few days 
and there's always a lot of catching up to be done when I get back.

Checking Olaf's list, I realised that clamav was installed and I had falsely 
believed that clamd would be installed at the same time.  Since there was an 
old config and log file, I hadn't noticed.

I've now installed it, chkconfig'd it, touched the socket, and I'll wait to 
see what is reported in the morning.

Thanks again

Anne
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache, using nginx

[Sergej Kandyla]

Les Mikesell пишет:
> Sergej Kandyla wrote:
>   
>>
>> No, nginx could serve any kind of content via ngx_http_proxy_module 
>> module http://wiki.codemongers.com/NginxHttpProxyModule
>> For example I'm using nginx as reverse proxy for tomcat 
>> servers\applications.
>> 
>
> Is there some advantage to this over apache with mod_jk?
>
>   
afaik mod_jk is only available for RHEL4\Centos4 i.e apache 2.0 (of 
course you could compile it manually for apache 2.2 coming with centos5)
So, recommended way for centos5 (apache 2.2) is using mod_proxy 
(mod_proxy_ajp)

nginx http_proxy module is universal complex solution. Also apache 
working in prefork mode (in general cases), I don't know does 
mod_jk\mod_proxy_ajp works in the worker-MPM mode...

In the preforking mode apache create a child on each incoming request, 
so it's too much expensive for resource usage. Also apache spend about 
15-30Kb mem for serving each tcp connection at this time nginx only 
1-1.5Kb. If you have, for example, abount 100 concurrent connections 
from different IPs there is nearly 100 apache forks... it's too expensive.

If you don't need full power of apache flexibility as server for dynamic 
applications, why use it for simple job such as proxing ?
So, I think nginx is great as light frontend server.

example config for proxing to tomcat backend:

location / {
rewrite ^/$ /tomcatapp/ redirect;
}

location /tomcatapp {
proxy_pass http://localhost:8080/tomcatapp;

proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_connect_timeout 120;
proxy_send_timeout 120;
proxy_read_timeout 180;

}

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] installation needs libpng but rpm is there

[John Doe]

From: Kai Schaetzl 
> Ann kok wrote on Wed, 11 Feb 2009 05:15:33 -0800 (PST):
> > configure: error: png library not found. please install libpng
> This signals that you are not using an rpm. Get an rpm version of what you 
> want to install.

Or just install libpng-devel as suggested...

JD


  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] INIT: Id "snmp" respawning too fast: disabled for 5 minutes

[Filipe Brandenburger]

Hi,

On Tue, Feb 10, 2009 at 14:23, David Halik  wrote:
> INIT: Id "snmp" respawning too fast: disabled for 5 minutes
> INIT: Id "snmp" respawning too fast: disabled for 5 minutes
> INIT: Id "snmp" respawning too fast: disabled for 5 minutes

What does "grep -i snmp /etc/inittab" say?

If there is really nothing, try "init q" to see if init is still using
old contents of that file. If that does not help, try "init u" as
well.

If it still does not fix it, please post the full contents of your
inittab so that we can help you fix the problem.

HTH,
Filipe
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] installation needs libpng but rpm is there

[Kai Schaetzl]

Ann kok wrote on Wed, 11 Feb 2009 05:15:33 -0800 (PST):

> configure: error: png library not found. please install libpng

This signals that you are not using an rpm. Get an rpm version of what you 
want to install.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache, using nginx

[Les Mikesell]

Sergej Kandyla wrote:
>
> No, nginx could serve any kind of content via ngx_http_proxy_module 
> module http://wiki.codemongers.com/NginxHttpProxyModule
> For example I'm using nginx as reverse proxy for tomcat 
> servers\applications.

Is there some advantage to this over apache with mod_jk?

-- 
   Les Mikesell
lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] gnome-sound-recorder or similar?

[Renato de Oliveira Diogo]

If you like a console text tool, you can use the "arecord". A tool of alsa's
project.

[]s

Renato de Oliveira Diogo

Bacharel em Ciência da Computação
UNESP - Bauru

LPIC1 - Linux Professional Institute Certification - Nível 1

renato.di...@gmail.com
renato.di...@yahoo.com.br


On Wed, Feb 11, 2009 at 11:26, Robert Moskowitz  wrote:

> I have gnome-sound-recorder on my FC10 system, but cannot find it for
> Centos.
>
> Is there a way to get it for Centos or a similar package?
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Possible CentsOS licensing issue

[Kai Schaetzl]

It would be very helpful if you could tell your OE to use quoting (">") 
instead of just clutching your reply below the original without any 
distinction. I know that it can do this.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] gnome-sound-recorder or similar?

[Robert Moskowitz]

I have gnome-sound-recorder on my FC10 system, but cannot find it for 
Centos.

Is there a way to get it for Centos or a similar package?


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] installation needs libpng but rpm is there

[Pintér Tibor]

> configure: error: png library not found. please install libpng
> 
> but I check rpm is installed
> 
> libpng-1.2.10-7.1.el5_0.1
> 
> How can I do?

what do you install?
libpng-devel?

t
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] installation needs libpng but rpm is there

[ann kok]

Hi 

I got an error

configure: error: png library not found. please install libpng

but I check rpm is installed

libpng-1.2.10-7.1.el5_0.1

How can I do?

Thank you



  __
Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark your 
favourite sites. Download it now at
http://ca.toolbar.yahoo.com.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Possible CentsOS licensing issue

[John]

"Puneet Goel"  
schreef in bericht 
news:4b08f1290902110258i53788379gdfc266c2359a7...@mail.gmail.com...
Dear Friends,
I have few questions.
1. I have a device on which I have installed CentOS 5.2 as an operating 
system. Now I want to sell this device. Will there be any issue ?
points to keep in mind:
a. There are no changes in OS. (it is just a stripped down image of original 
OS)
b. I have installed few generic user space applications of my own installed 
in that OS.

I do not want to violate GPL or any other licenses. That's why to make sure 
I want to confim from you folks.
Thanks
Puneet



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Hi,


IMHO, if I understand the GPL lic correctly, in general you may ask what you 
want, but you MUST provide ALL sources including your modified and or added 
applications, and include no other lic restrictions than the GPL lic itself.

If you want to keep you apps closed source, than you should consult a GPL 
specialist layer. It makes a difference how the application is build and or 
linked against other libs.

Can anyone confirm or improve the above 2 liner statement?

Recent GPL lic disputes all boilled down to not providing the (modified) 
sources

John 



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problems with mysql multi-master after update.

[Alessandro Ren]

On 2/11/2009 12:46 AM, Jim Perrin wrote:

On Mon, Feb 9, 2009 at 7:33 AM, Alessandro Ren
  wrote:
e incremental.01 on
   

the master and this causes the problem.
 In 5.0.22 this would not happen, this does not happen as I have
servers running this version and after the reboot, it starts syncing on
the right incremental.
 Any idea?
 



While I haven't seen this going from 0.22 to 0.45, did you run
mysql_upgrade following your upgrade?
Last I had this issue my table structure wasn't quite what the server
was expecting, and running mysql_upgrade was the solution.

   

I tried it , but it did't help.
I just rebooted one of the nodes and I am getting this error in the 
logs.
090211  9:07:41 [ERROR] Failed to open the relay log 
'/var/run/mysqld/mysqld-relay-bin.12' (relay_log_pos 358860475)
090211  9:07:41 [ERROR] Could not find target log during relay log 
initialization

090211  9:07:41 [ERROR] Failed to initialize the master info structure
090211  9:07:41 [Note] /usr/libexec/mysqld: ready for connections.
Version: '5.0.45-log'  socket: '/var/lib/mysql/mysql.sock'  port: 3306  
Source distribution



Afeter deleting master.info and relay-log.ingo I get the 
incremental error:


090211  9:23:23 [ERROR] Error reading packet from server: File 
'./incremental.03' not found (Errcode: 2) ( server_errno=29)
090211  9:23:23 [Note] Slave I/O thread: Failed reading log event, 
reconnecting to retry, log 'FIRST' position 4
090211  9:23:23 [Note] Slave: connected to master 
'r...@192.168.10.207:3306',replication resumed in log 'FIRST' at position 4
090211  9:23:23 [ERROR] Error reading packet from server: File 
'./incremental.03' not found (Errcode: 2) ( server_errno=29)



After fixing de inc-index on the master en restarting, abd 
restarting the slave, it workis fine:


Version: '5.0.45-log'  socket: '/var/lib/mysql/mysql.sock'  port: 3306  
Source distribution
090211  9:26:14 [Note] Slave SQL thread initialized, starting 
replication in log 'FIRST' at position 0, relay log 
'/var/run/mysqld/mysqld-relay-bin.05' position: 98
090211  9:26:14 [Note] Slave I/O thread: connected to master 
'r...@192.168.10.207:3306',  replication started in log 'FIRST' at 
position 4



Any tips? On 5.0.22 I never had this problem.

Tks.




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[Sergej Kandyla]

Florin Andrei пишет:
> Sergej Kandyla wrote:
>   
>> apache is good as backend server for dynamic applications.
>> You could use something like nginx, haproxy as frontend for balancing 
>> multiple backend servers.
>> I'm using nginx. This light web server could serve many thousand 
>> concurrent connections! It works great!
>> 
>
> In addition to the user-space solutions mentioned above, there are also 
> kernel-level solutions, such as Linux Virtual Server, or LVS:
>
> http://www.linuxvirtualserver.org/
>   

IMHO it's not right compare light web server with Virtual servers.

Look at http://www.linuxvirtualserver.org/whatis.html
In this scheme you could naturally use nginx as loadbalancer on the Load 
Balancer Linux Box.

Also "The mission of the project is to build a high-performance and 
highly available server for Linux using clustering 
 technology, which 
provides good scalability, reliability and serviceability."

If you need high-availability you could also use XEN\KVM or OpenVZ. 
These technologies are actively developing... XEN\KVM are supported 
natively in the RHEL\Centos kernel.
I'm prefer OpenVZ as light-weight virtualization.
http://wiki.openvz.org/HA_cluster_with_DRBD_and_Heartbeat

> I am under the impression that, speaking in general, user-space 
> balancers provide more features (are smarter), while the kernel-space 
> ones are faster (provide more in terms of raw speed and max load). I 
> could be wrong.
>
> Can anybody provide a performance comparison between, say, nginx and 
> LVS? (max connections, max new connections rate, max bandwidth, max 
> packets per second, etc.)
>
>   

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Possible CentsOS licensing issue

[Puneet Goel]

Dear Friends,

I have few questions.

1. I have a device on which I have installed CentOS 5.2 as an operating
system. Now I want to sell this device. Will there be any issue ?

points to keep in mind:

a. There are no changes in OS. (it is just a stripped down image of original
OS)
b. I have installed few generic user space applications of my own installed
in that OS.


I do not want to violate GPL or any other licenses. That's why to make sure
I want to confim from you folks.

Thanks
Puneet
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache, using nginx

[Sergej Kandyla]

Rainer Duffner пишет:
> Sergej Kandyla schrieb:
>   
>> Hi,
>> apache is good as backend server for dynamic applications.
>> You could use something like nginx, haproxy as frontend for balancing 
>> multiple backend servers.
>> I'm using nginx. This light web server could serve many thousand 
>> concurrent connections! It works great!
>>
>> look at
>> http://wiki.codemongers.com/NginxLoadBalanceExample
>> http://blog.kovyrin.net/2006/08/25/haproxy-load-balancer/lang/en/
>> http://blog.kovyrin.net/2006/05/18/nginx-as-reverse-proxy/lang/en/
>> and http://highscalability.com/
>>
>>   
>> 
>
> Yup. NGINX is probably the fastest way to serve content nowadays.
> But content has to be static and be available as a file (AFAIK) directly
> to NGINX.
>   
No, nginx could serve any kind of content via ngx_http_proxy_module 
module http://wiki.codemongers.com/NginxHttpProxyModule
For example I'm using nginx as reverse proxy for tomcat 
servers\applications.
Also I've wrote some article about using nginx in shared hosting sphere. 
Look at http://directadmin.com/forum/showthread.php?t=27344

When content located on the some server (or via NAS\SAN) nginx could 
serve this content directly using some efficient mechanisms like sendfile
http://wiki.codemongers.com/NginxHttpCoreModule#sendfile

For serving static content nginx even more times efficient than ftp!!
On some servers with low-power hardware like celeron\sempron processors 
and 512M ram I have upload rate nearly 100mbit, It's not limit for 
nginx, its a limit of sata disks and chanel to that servers :)

As for load-balancing:
http://wiki.codemongers.com/NginxHttpUpstreamModule
http://barry.wordpress.com/2008/04/28/load-balancer-update/

> There's also "varnish", if you can't meet the above provision easily.
>
>
>   

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problems with mysql multi-master after update.

[Alessandro Ren]

On 2/10/2009 10:28 PM, J Potter wrote:

For what it's worth, I haven't seen this on any systems I manage when
going from 5.0.22->5.0.45, which include permutations of master-slave
and master-master.

Is there anything useful in /var/log/mysqld.log?


   

Just that I cant't read the incremental that does exist anymore.

   []s.



after I updated from mysql-5.0.22 CentOS 5.0 to mysqld-5.0.45 in
CentOS
5.2, mysql looses master-slave sync after one node reboots.
 I've noticed that the slave doest not respect the informantion on
master.info, instead, it tries to read the informantion from the
master
server file inc-index.index
 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[Rainer Duffner]

John R Pierce schrieb:
> Anto Marky wrote:
>   
>> If I have my content in a centralised system like amazon s3, will I 
>> have problem syncronizing?
>> 
>
> s3 is an example of a DE-centralized distributed cloud system.
>
> by the simple fact that you're asking such a vague and generic question, 
> I'd hazard to guess, yes, you will have problems with synchronization 
> whatever it is you're doing, depending on your expectations and 
> experience, of course.
>   


Hm. He could try reverse-proxying his content locally ;-)




Rainer
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[John R Pierce]

Anto Marky wrote:
> If I have my content in a centralised system like amazon s3, will I 
> have problem syncronizing?

s3 is an example of a DE-centralized distributed cloud system.

by the simple fact that you're asking such a vague and generic question, 
I'd hazard to guess, yes, you will have problems with synchronization 
whatever it is you're doing, depending on your expectations and 
experience, of course.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] clustering and load balancing Apache

[Anto Marky]

Hi,

Thanks for your reply,

If I have my content in a centralised system like amazon s3, will I have
problem syncronizing?


Thanks and Regards
Marky

On Tue, Feb 10, 2009 at 3:38 PM, Sergej Kandyla  wrote:

> Anto Marky пишет:
>  > Hi,
> > I am new to clustering and loadbalancing in apache, What is best way
> > of doing it? How do I do the clustering and what tools do I need to
> > use? Do I have those tools, I use CentOS , Do i have any tools in
> > CenOs which comes default in it? And how do I do apache load
> > balancing? should I rely on apache forums or mailing list or is there
> > any way or tool I can use in CentOS? Can any throw some vague Idea on
> > how to do it so that I start reading documents before I do it?
> >
> Hi,
> apache is good as backend server for dynamic applications.
> You could use something like nginx, haproxy as frontend for balancing
> multiple backend servers.
> I'm using nginx. This light web server could serve many thousand
> concurrent connections! It works great!
>
> look at
> http://wiki.codemongers.com/NginxLoadBalanceExample
> http://blog.kovyrin.net/2006/08/25/haproxy-load-balancer/lang/en/
> http://blog.kovyrin.net/2006/05/18/nginx-as-reverse-proxy/lang/en/
> and http://highscalability.com/
>
>
> Another issue is keeping content synchronizing between apache servers.
> There are several solutions: NAS\SAN or programbased DRBD
> http://en.wikipedia.org/wiki/DRBD.
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] smartd and 3ware 9xxx configs

[Peter Kjellstrom]

On Wednesday 11 February 2009, Jim Perrin wrote:
> I'm looking to do a bit more monitoring of my 3ware 9550 with smartd,
> and wanted to see what others were doing with smart for monitoring
> 3ware hardware.
>
> Do you have the smartd.conf configured to test, or simply monitor health
> status? Are you monitoring the drive as centos sees it (/dev/sdX) or are
> you using the 3ware /dev/twaX for monitoring?

I don't use smartd against them but I do run smartctl from time to time. I 
have had issues with using /dev/sdX and now only use /dev/twaX (but I can't 
really remember what bit me...).

/Peter

> Opinions and discussions are welcome :-P


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What is the System Event Log?

[Peter Kjellstrom]

On Tuesday 10 February 2009, Timothy Murphy wrote:
> Peter Kjellstrom wrote:
> > However, with or without /dev/ipmi0 you can access the BMC remotely with
> > (assuming you have an IP configured etc.).
>
> I'd never heard of BMC (I am not an expert in this area, to put it mildly)

BMC, on-board baseboard management controller, IPMI-controller, service 
processor, ...

The piece of hardware that runs independently from the main part of the server 
and that typically does things like:

* keep the SEL
* perform power controll
* monitor temperatures and fan speeds
* provide serial port over LAN functionality

> but on googling for "dell bmc" I found
> 
> where I learnt that
> "The on-board baseboard management controller (BMC)
> is a powerful and flexible device that can be used to effectively manage
> eighth-generation Dell servers such as the
> PowerEdge 1850, PowerEdge 2800, and PowerEdge 2850."
>
> This suggests to me that my modest PowerEdge T105 probably
> does not support this service.

Googling a bit it does seem that the T105 lacks a BMC :-(

Earlier cheap servers from dell (sc1435 for example) did have it...

> How would I access it if it were available?
> I see a large number of BMC-related ports in /etc/services ,
> but none of them seem to be active on my server.

The BMC is independent from the OS, think a small separate server inside your 
real server.

If a server has one you access it in one of the following ways:

* service ipmi start, local access (requires OpenIPMI kernel driver support)
* via LAN to a dedicated management ethernet port on the server
* via LAN to a shared ethernet port on the server

The LAN access way depends on the BMC having a connection to an ethernet port 
and a working TCP/IP configuration.

/Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What is the System Event Log?

[Peter Kjellstrom]

On Wednesday 11 February 2009, Bill Campbell wrote:
> On Tue, Feb 10, 2009, nate wrote:
> >Timothy Murphy wrote:
>
> ...
>
> >> How would I access it if it were available?
> >
> >You have to configure it first, how you do that depends, sometimes
> >you can configure it via openipmi.
>
> I just installed the OpenIPMI-tools package with yum yesterday on
> a Supermicro box that seems to be having overheating or fan
> problems.  This is my first time looking into IPMI monitoring,
> but looking at the contents of the OpenIPMI-tools rpm package, it
> seems to be missing some of the configuration files necessary to
> run things like the ipmievd daemon (e.g. no /etc/init.d/ipmievd
> script, only /usr/share/ipmitool/ipmievd.init.redhat

Yes, ipmievd is lacking a proper init.d script and if you want to run it the 
file you found above is probably the way to go (copy it to /etc/init.d/..., 
chkconfig, etc.).

But evd is not needed to talk to the 
IPMI-controller/BMC/service-processor/whatever. To talk locally the only 
thing needed is to start the ipmi service (init.d-file from the OpenIPMI 
package) and then, for example, "ipmitool sel list". 

/Peter

> , and the 
> so sample of the /etc/sysconfig/ipmievd file).
>
> Any suggestions on documentation covering configuration on CentOS
> systems?  I have no problems with RTFM, if only I know where to
> find TFM.
>
> Bill


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos