...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>
(847) 467-6674
From: "Muggeridge, Matt"
Reply-To: "users@httpd.apache.org"
Date: Thursday, March 28, 2019 at 1:36 PM
To: "users@httpd.apache.org"
Subject: RE: [users@httpd] Re: Apache web server devouring
"Rose, John B"
Reply-To: "users@httpd.apache.org"
Date: Thursday, March 28, 2019 at 12:57 PM
To: "users@httpd.apache.org"
Subject: Re: [users@httpd] Re: Apache web server devouring resources
I don't think the TCP buffer would be clear if there was a continuing flo
Subject: Re: [users@httpd] Re: Apache web server devouring resources
I don't think the TCP buffer would be clear if there was a continuing flow of
http requests during that time, whether the web server software was down, or
maxed out
But maybe I am wrong
To: users@httpd.apache.org
Subject: Re: [users@httpd] Re: Apache web server devouring resources
No PHP on the system at all. The web server was down for 15-20 minutes so
anything in the queue should have cleared, right?
Darryl Baker (he/him/his)
Sr. System Administrator
Distributed
.
Suite 6-600 – Box #39
Evanston, IL 60201-3715
darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>
(847) 467-6674
From: Daniel Ferradal
Reply-To: "users@httpd.apache.org"
Date: Thursday, March 28, 2019 at 12:02 PM
To: ""
Subject: Re: [users@ht
60201-3715
darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>
(847) 467-6674
From: "Rose, John B"
Reply-To: "users@httpd.apache.org"
Date: Thursday, March 28, 2019 at 11:32 AM
To: "users@httpd.apache.org"
Subject: [users@httpd] Re: A
Have you tried mod_status? That would clearly tell you which threads eat
resources for you.
You can share the mpm you are using ,the values you have configured for
then, also the list of modules you load, and the actual load you receive.
That alone can give great hints about a likely culprit.
Regarding the "load increasing quickly after restarting the daemons" ...
I do not believe just restarting the daemons clears the TCP queue. Nor does it
prevent new TCP requests. If it is an attack, then the load would ramp back up
immediately. That is why you have to reboot I am guessing.
Do
