Recommendation - http timeouts and ERR_CONNECTION_TIMED_OUT

**fulltilt** · May 2nd 2017

- IMSCP: 1.3.16 (Build: 20170107)
- Distribution: Debian 8.6
- Proftpd
- PHP FCGID
- MariaDB 10.0
- Courier
- Roundcube
- Pydio
- Plugins:
PanelRedirect 1.1.5, PMA Captcha 1.1.1, RoundCubePlugins 1.2.6, SpamAssassin 1.1.1 , LetsEncrypt 3.0.0

For many years I just used the standard mpm_worker settings.
Now there are problems with timeouts and many ERR_CONNECTION_TIMED_OUT w/ https.

Intel Quad-Core
32 GB DDR3 RAM
2x 500 GB SSD RAID1
Domains 240
Subdomains 108
Domain aliases 102

Yesterday I have changed the worker settings and it has improved slightly ... are these settings recommended with the standard fcgid settings or should I use smaller values?
Recommendation?

Timeout 5
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 5
HostnameLookups Off

Code

mpm_worker.conf
<IfModule mpm_worker_module>
StartServers 2
MinSpareThreads 64
MaxSpareThreads 256
ThreadLimit 64
ThreadsPerChild 25
MaxRequestWorkers 300
MaxConnectionsPerChild 0
</IfModule>
fcgid_imscp.conf
<IfModule fcgid_module>
AddHandler fcgid-script .php .php3 .php4 .php5 .php7 .pht .phtml
FcgidConnectTimeout 20
FcgidMaxRequestsPerProcess 900
FcgidMaxRequestLen 1073741824
FcgidPassHeader AUTHORIZATION
FcgidFixPathinfo 1
FcgidIOTimeout 600
FcgidBusyTimeout 7200
FcgidBusyScanInterval 240
FcgidIdleScanInterval 120
FcgidIdleTimeout 240
FcgidProcessLifeTime 3600
FcgidMaxProcesses 1000
FcgidMaxProcessesPerClass 6
FcgidMinProcessesPerClass 0
</IfModule>
default php-fcgi-starter
umask 027
export PHPRC=/var/www/fcgi/afrodisax.com/php5
export PHP_FCGI_MAX_REQUESTS=1000
export PHP_FCGI_CHILDREN=0
export TMPDIR=/var/www/virtual/afrodisax.com/phptmp
exec /usr/bin/php5-cgi "$@"

Display More

**fulltilt** · May 2nd 2017

I guess I need some help here ... still issues with blank pages - Monit can not acccess port 80 on localhost and restarts apache.

Code

[Tue May 2 11:05:17 2017] [notice] vlogger: caught TERM, shutting down
[Tue May 2 11:05:17 2017] [notice] vlogger: DBI usage tracker dump interval set to 30 seconds
[Tue May 2 11:05:17 2017] [notice] vlogger: started CustomLog Handler -- resuming normal operations
[Tue May 02 11:05:18.010451 2017] [mpm_worker:notice] [pid 16172:tid 140025542162304] AH00292: Apache/2.4.10 (Debian) OpenSSL/1.0.1t mod_fcgid/2.3.9 configured -- resuming normal operations
[Tue May 02 11:05:18.010476 2017] [core:notice] [pid 16172:tid 140025542162304] AH00094: Command line: '/usr/sbin/apache2'
[Tue May 02 11:06:23.581994 2017] [mpm_worker:notice] [pid 16172:tid 140025542162304] AH00295: caught SIGTERM, shutting down
[Tue May 2 11:06:23 2017] [notice] vlogger: caught TERM, shutting down
[Tue May 2 11:06:24 2017] [notice] vlogger: DBI usage tracker dump interval set to 30 seconds
[Tue May 2 11:06:24 2017] [notice] vlogger: started CustomLog Handler -- resuming normal operations
[Tue May 02 11:06:25.005622 2017] [:notice] [pid 16517:tid 139798887270272] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[Tue May 02 11:06:25.005658 2017] [:notice] [pid 16517:tid 139798887270272] ModSecurity: APR compiled version="1.5.1"; loaded version="1.5.1"
[Tue May 02 11:06:25.005661 2017] [:notice] [pid 16517:tid 139798887270272] ModSecurity: PCRE compiled version="8.35 "; loaded version="8.35 2014-04-04"
[Tue May 02 11:06:25.005664 2017] [:notice] [pid 16517:tid 139798887270272] ModSecurity: LUA compiled version="Lua 5.1"
[Tue May 02 11:06:25.005666 2017] [:notice] [pid 16517:tid 139798887270272] ModSecurity: LIBXML compiled version="2.9.1"
[Tue May 02 11:06:25.005668 2017] [:notice] [pid 16517:tid 139798887270272] Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Tue May 02 11:06:25.005910 2017] [suexec:notice] [pid 16517:tid 139798887270272] AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Tue May 2 11:06:25 2017] [notice] vlogger: caught TERM, shutting down
[Tue May 2 11:06:25 2017] [notice] vlogger: DBI usage tracker dump interval set to 30 seconds
[Tue May 2 11:06:25 2017] [notice] vlogger: started CustomLog Handler -- resuming normal operations
[Tue May 02 11:06:26.010497 2017] [mpm_worker:notice] [pid 16522:tid 139798887270272] AH00292: Apache/2.4.10 (Debian) OpenSSL/1.0.1t mod_fcgid/2.3.9 configured -- resuming normal operations

Display More

**Nuxwin** · May 2nd 2017

First please, update your distro and update i-MSCP to latest version. You won't receive support for older series.

**fulltilt** · May 3rd 2017

### Note ###
I will not be able to do the update until the weekend ...
But I recognized that a certain error message appears in the daemon logs before it freezes:

Access denied for user 'web757'@'localhost' (using password: YES)

after that I see also a DBI connection error for the imscp_user connection
and mostly the panel is also frozen so I have to restart nginx, panel and apache.

The system has been running smoothly for about 5 months without any problems, so it could be caused by a customer script ...
above database connection access for web757'@'localhost') was set to % by the customer

**Nuxwin** · May 3rd 2017

@fulltilt

Check that you have not any apache or vlogger zombie process that take all memory or CPU.

**fulltilt** · May 3rd 2017

CPU load looks good ... no zombies and nothing special in our error logs, v3.16 was always very reliable so far ...

for testing I have set a higher value for fs.file-max = 4097152 and reduced open-files limits in my.cnf
there were no problems at night, but I guess it starts over when customers working on their applications

### edit ###
yep, have to update - looks like the vlogger issue

Code

[Wed May 03 08:37:23.925425 2017] [mpm_worker:notice] [pid 24236:tid 140630988191616] AH00295: caught SIGTERM, shutting down
[Wed May 3 08:37:23 2017] [notice] vlogger: caught TERM, shutting down
[Wed May 3 08:37:25 2017] [notice] vlogger: DBI usage tracker dump interval set to 30 seconds
[Wed May 3 08:37:25 2017] [notice] vlogger: started CustomLog Handler -- resuming normal operations

**fulltilt** · May 3rd 2017

it seems sometimes there are conflicts w/ nginx and or php5-fpm, if I restart nginx and php5-fpm, apache2 is also back online ...

and sometimes an nginx restart shows this error message:

Code

● nginx.service - A high performance web server and a reverse proxy server
Loaded: loaded (/lib/systemd/system/nginx.service; enabled)
Active: failed (Result: exit-code) since Wed 2017-05-03 11:41:58 CEST; 21s ago
Process: 27052 ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid (code=exited, status=1/FAILURE)
Process: 5855 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=1/FAILURE)
Process: 5851 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Main PID: 24339 (code=exited, status=0/SUCCESS)
May 03 11:41:57 host2 nginx[5855]: nginx: [emerg] bind() to xx.xx.xxx.xx:8443 failed (98: Address already in use)
May 03 11:41:57 host2 nginx[5855]: nginx: [emerg] bind() to [::]:8443 failed (98: Address already in use)
May 03 11:41:57 host2 nginx[5855]: nginx: [emerg] bind() to xx.xx.xxx.xx:8880 failed (98: Address already in use)
May 03 11:41:57 host2 nginx[5855]: nginx: [emerg] bind() to [::]:8880 failed (98: Address already in use)
May 03 11:41:57 host2 nginx[5855]: nginx: [emerg] bind() to xx.xx.xxx.xx:8443 failed (98: Address already in use)
May 03 11:41:57 host2 nginx[5855]: nginx: [emerg] bind() to [::]:8443 failed (98: Address already in use)
May 03 11:41:58 host2 nginx[5855]: nginx: [emerg] still could not bind()
May 03 11:41:58 host2 systemd[1]: nginx.service: control process exited, code=exited status=1
May 03 11:41:58 host2 systemd[1]: Failed to start A high performance web server and a reverse proxy server.
May 03 11:41:58 host2 systemd[1]: Unit nginx.service entered failed state.

Display More

**Nuxwin** · May 3rd 2017

@fulltilt

Such error shouldn't occurs because Apache shouldn't listens on the 8880 and 8443 ports.

ANYWAY PLEASE, UPDATE TO latest version. Once done, report the bug if any.

Thread closed.

Recommendation - http timeouts and ERR_CONNECTION_TIMED_OUT

Share

Daily visitors