Linux
Apache 正在啟動多個埠 80 和 443 偵聽器，直到伺服器崩潰
當我在我的 Amazon Linux 2 上啟動 httpd (Apache) 伺服器時，它會在埠 80 和 443 上創建大量重複的埠偵聽器。每隔幾分鐘它就會添加另一組。原來的 80 和 443 埠是 root 啟動的，其他的都是 apache 使用者啟動的。基本上，如果我讓它繼續執行，它會不斷添加偵聽器，直到資源完全不堪重負並且伺服器緩慢爬行。執行一晚後，它在埠 80 上有 256 個監聽器，在埠 443 上有 256 個監聽器。（伺服器執行良好，直到 2 天前 - 當我重新啟動伺服器或進行基本的 yum 更新時可能已經啟動。但我不確定是什麼否則要檢查。）這是正常行為嗎？（Apache新手，我的經驗主要是IIS）
我刪除了所有額外的站點配置（自定義標頭），但即使在重新啟動 httpd 後我得到：（每隔幾分鐘，最後兩行重複添加新的 pid 到正在執行的偵聽器）
我不知道是什麼導致了重複的聽眾。但每隔幾分鐘就會添加更多。
# sudo lsof -i -P -n | grep LISTEN rpcbind 2717 rpc 8u IPv4 17600 0t0 TCP *:111 (LISTEN) rpcbind 2717 rpc 11u IPv6 17603 0t0 TCP *:111 (LISTEN) vsftpd 3082 root 4u IPv6 18895 0t0 TCP *:21 (LISTEN) master 3176 root 13u IPv4 19485 0t0 TCP 127.0.0.1:25 (LISTEN) sshd 3339 root 3u IPv4 20872 0t0 TCP *:22 (LISTEN) sshd 3339 root 4u IPv6 20874 0t0 TCP *:22 (LISTEN) httpd 4731 root 4u IPv6 41913 0t0 TCP *:80 (LISTEN) httpd 4731 root 6u IPv6 41923 0t0 TCP *:443 (LISTEN) httpd 4732 apache 4u IPv6 41913 0t0 TCP *:80 (LISTEN) httpd 4732 apache 6u IPv6 41923 0t0 TCP *:443 (LISTEN) httpd 4733 apache 4u IPv6 41913 0t0 TCP *:80 (LISTEN) httpd 4733 apache 6u IPv6 41923 0t0 TCP *:443 (LISTEN) httpd 4734 apache 4u IPv6 41913 0t0 TCP *:80 (LISTEN) httpd 4734 apache 6u IPv6 41923 0t0 TCP *:443 (LISTEN) httpd 4735 apache 4u IPv6 41913 0t0 TCP *:80 (LISTEN) httpd 4735 apache 6u IPv6 41923 0t0 TCP *:443 (LISTEN) httpd 4736 apache 4u IPv6 41913 0t0 TCP *:80 (LISTEN) httpd 4736 apache 6u IPv6 41923 0t0 TCP *:443 (LISTEN)和
# ps -aux USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.4 125604 4656 ? Ss 19:39 0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22 root 2 0.0 0.0 0 0 ? S 19:39 0:00 [kthreadd] root 4 0.0 0.0 0 0 ? I< 19:39 0:00 [kworker/0:0H] ... more services... root 3764 0.0 1.4 325392 14632 ? Ss 19:52 0:00 php-fpm: master process (/etc/php-fpm.conf) apache 3765 0.3 7.5 463876 76388 ? S 19:52 0:12 php-fpm: pool www apache 3766 0.3 8.8 476208 89352 ? S 19:52 0:10 php-fpm: pool www apache 3767 0.7 6.2 449888 62856 ? S 19:52 0:25 php-fpm: pool www apache 3768 1.1 7.2 459748 72844 ? S 19:52 0:39 php-fpm: pool www apache 3769 0.6 8.0 468352 80712 ? S 19:52 0:20 php-fpm: pool www apache 3776 0.5 6.3 449896 63620 ? S 19:52 0:18 php-fpm: pool www apache 3828 0.4 7.8 466048 78588 ? S 19:52 0:16 php-fpm: pool www apache 3830 0.2 6.7 455328 67944 ? S 19:52 0:09 php-fpm: pool www apache 3831 0.9 7.6 463524 76724 ? S 19:52 0:31 php-fpm: pool www root 4396 0.0 0.0 0 0 ? I 20:24 0:00 [kworker/0:1] postfix 4685 0.0 0.5 81752 5672 ? S 20:36 0:00 pickup -l -t unix -u root 4713 0.0 0.0 0 0 ? I 20:41 0:00 [kworker/0:2] root 4722 0.0 0.0 0 0 ? I 20:46 0:00 [kworker/0:0] root 4795 0.4 1.5 278012 15268 ? Ss 20:49 0:00 /usr/sbin/httpd -DFOREGROUND apache 4796 0.0 1.0 319136 10276 ? Sl 20:49 0:00 /usr/sbin/httpd -DFOREGROUND apache 4797 0.0 1.0 319136 10276 ? Sl 20:49 0:00 /usr/sbin/httpd -DFOREGROUND apache 4798 0.0 1.0 515816 10288 ? Sl 20:49 0:00 /usr/sbin/httpd -DFOREGROUND apache 4799 0.0 1.0 319136 10276 ? Sl 20:49 0:00 /usr/sbin/httpd -DFOREGROUND apache 4800 0.0 1.0 319136 10276 ? Sl 20:49 0:00 /usr/sbin/httpd -DFOREGROUND ec2-user 4842 0.0 0.3 164364 3796 pts/0 R+ 20:49 0:00 ps -auxapache和pool的程序不斷添加…
apache 4800 0.0 1.0 319136 10276 ? Sl 20:49 0:00 /usr/sbin/httpd -DFOREGROUND apache 3831 0.9 7.6 463524 76724 ? S 19:52 0:31 php-fpm: pool www即使從啟用站點中刪除了我的所有網站 conf 文件，它仍然以執行這些額外的埠開始。
配置：基本上是一個 Amazon LAMP - 來自 amazon-linux-extras 的 MariaDB（禁用 maria db 並且 php 升級到 7.4。 - 我有一個單獨的 MySQL 伺服器） yum 安裝： php-cli php-pdo php-fpm php-json php- mysqlnd php-gd vsftpd epel certbot python2-certbot-apache php-pear-SOAP.noarch php-soap.x86_64 php-mbstring php-bcmath php-xml php-pclzip.noarch php-pecl-zip pcre-devel gcc zlib zlib-發展
#sudo apachectl -M Loaded Modules: core_module (static) so_module (static) http_module (static) access_compat_module (shared) actions_module (shared) alias_module (shared) allowmethods_module (shared) auth_basic_module (shared) auth_digest_module (shared) authn_anon_module (shared) authn_core_module (shared) authn_dbd_module (shared) authn_dbm_module (shared) authn_file_module (shared) authn_socache_module (shared) authz_core_module (shared) authz_dbd_module (shared) authz_dbm_module (shared) authz_groupfile_module (shared) authz_host_module (shared) authz_owner_module (shared) authz_user_module (shared) autoindex_module (shared) cache_module (shared) cache_disk_module (shared) cache_socache_module (shared) data_module (shared) dbd_module (shared) deflate_module (shared) dir_module (shared) dumpio_module (shared) echo_module (shared) env_module (shared) expires_module (shared) ext_filter_module (shared) filter_module (shared) headers_module (shared) include_module (shared) info_module (shared) log_config_module (shared) logio_module (shared) macro_module (shared) mime_magic_module (shared) mime_module (shared) negotiation_module (shared) remoteip_module (shared) reqtimeout_module (shared) request_module (shared) rewrite_module (shared) setenvif_module (shared) slotmem_plain_module (shared) slotmem_shm_module (shared) socache_dbm_module (shared) socache_memcache_module (shared) socache_shmcb_module (shared) status_module (shared) substitute_module (shared) suexec_module (shared) unique_id_module (shared) unixd_module (shared) userdir_module (shared) version_module (shared) vhost_alias_module (shared) watchdog_module (shared) dav_module (shared) dav_fs_module (shared) dav_lock_module (shared) lua_module (shared) mpm_prefork_module (shared) proxy_module (shared) lbmethod_bybusyness_module (shared) lbmethod_byrequests_module (shared) lbmethod_bytraffic_module (shared) lbmethod_heartbeat_module (shared) proxy_ajp_module (shared) proxy_balancer_module (shared) proxy_connect_module (shared) proxy_express_module (shared) proxy_fcgi_module (shared) proxy_fdpass_module (shared) proxy_ftp_module (shared) proxy_http_module (shared) proxy_hcheck_module (shared) proxy_scgi_module (shared) proxy_uwsgi_module (shared) proxy_wstunnel_module (shared) ssl_module (shared) systemd_module (shared) cgi_module (shared) http2_module (shared) proxy_http2_module (shared)httpd.conf 是預設的，但有 2 個例外：我更改了 DocumentRoot 並添加了指向我的站點 conf 文件的路徑：
IncludeOptional sites-enabled/*.conf最後是 /etc/php-fpm.d 下的 www.conf（我刪掉了這篇文章的一些評論）
; Start a new pool named 'www'. ; the variable $pool can we used in any directive and will be replaced by the ; pool name ('www' here) [www] ; Per pool prefix ; It only applies on the following directives: ; - 'access.log' ; - 'slowlog' ; - 'listen' (unixsocket) ; - 'chroot' ; - 'chdir' ; - 'php_values' ; - 'php_admin_values' ; When not set, the global prefix (or @php_fpm_prefix@) applies instead. ; Note: This directive can also be relative to the global prefix. ; Default Value: none ;prefix = /path/to/pools/$pool ; Unix user/group of processes ; Note: The user is mandatory. If the group is not set, the default user's group ; will be used. ; RPM: apache user chosen to provide access to the same directories as httpd user = apache ; RPM: Keep a group allowed to write in log dir. group = apache ; The address on which to accept FastCGI requests. listen = /run/php-fpm/www.sock ; Set listen(2) backlog. ; Default Value: 511 ;listen.backlog = 511 ; Set permissions for unix socket, if one is used. In Linux, read/write ; permissions must be set in order to allow connections from a web server. ; Default Values: user and group are set as the running user ; mode is set to 0660 ;listen.owner = nobody ;listen.group = nobody ;listen.mode = 0660 ; When POSIX Access Control Lists are supported you can set them using ; these options, value is a comma separated list of user/group names. ; When set, listen.owner and listen.group are ignored listen.acl_users = apache,nginx ;listen.acl_groups = ; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. ; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original ; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address ; must be separated by a comma. If this value is left blank, connections will be ; accepted from any ip address. ; Default Value: any listen.allowed_clients = 127.0.0.1 ; Choose how the process manager will control the number of child processes. pm = dynamic ; The number of child processes to be created when pm is set to 'static' and the ; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. ; This value sets the limit on the number of simultaneous requests that will be ; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. ; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP ; CGI. The below defaults are based on a server without much resources. Don't ; forget to tweak pm.* to fit your needs. ; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' ; Note: This value is mandatory. pm.max_children = 50 ; The number of child processes created on startup. ; Note: Used only when pm is set to 'dynamic' ; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2 pm.start_servers = 5 ; The desired minimum number of idle server processes. ; Note: Used only when pm is set to 'dynamic' ; Note: Mandatory when pm is set to 'dynamic' pm.min_spare_servers = 5 ; The desired maximum number of idle server processes. ; Note: Used only when pm is set to 'dynamic' ; Note: Mandatory when pm is set to 'dynamic' pm.max_spare_servers = 35 ; The number of seconds after which an idle process will be killed. ; Note: Used only when pm is set to 'ondemand' ; Default Value: 10s ;pm.process_idle_timeout = 10s; ; The number of requests each child process should execute before respawning. ; This can be useful to work around memory leaks in 3rd party libraries. For ; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. ; Default Value: 0 ;pm.max_requests = 500 ; The access log format. ; The following syntax is allowed ; %%: the '%' character ; %C: %CPU used by the request ; it can accept the following format: ; - %{user}C for user CPU only ; - %{system}C for system CPU only ; - %{total}C for user + system CPU (default) ; %d: time taken to serve the request ; it can accept the following format: ; - %{seconds}d (default) ; - %{miliseconds}d ; - %{mili}d ; - %{microseconds}d ; - %{micro}d ; %e: an environment variable (same as $_ENV or $_SERVER) ; it must be associated with embraces to specify the name of the env ; variable. Some exemples: ; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e ; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e ; %f: script filename ; %l: content-length of the request (for POST request only) ; %m: request method ; %M: peak of memory allocated by PHP ; it can accept the following format: ; - %{bytes}M (default) ; - %{kilobytes}M ; - %{kilo}M ; - %{megabytes}M ; - %{mega}M ; %n: pool name ; %o: output header ; it must be associated with embraces to specify the name of the header: ; - %{Content-Type}o ; - %{X-Powered-By}o ; - %{Transfert-Encoding}o ; - .... ; %p: PID of the child that serviced the request ; %P: PID of the parent of the child that serviced the request ; %q: the query string ; %Q: the '?' character if query string exists ; %r: the request URI (without the query string, see %q and %Q) ; %R: remote IP address ; %s: status (response code) ; %t: server time the request was received ; it can accept a strftime(3) format: ; %d/%b/%Y:%H:%M:%S %z (default) ; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag ; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t ; %T: time the log has been written (the request has finished) ; it can accept a strftime(3) format: ; %d/%b/%Y:%H:%M:%S %z (default) ; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag ; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t ; %u: remote user ; ; Default: "%R - %u %t \"%m %r\" %s" ;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%" ; The log file for slow requests ; Default Value: not set ; Note: slowlog is mandatory if request_slowlog_timeout is set slowlog = /var/log/php-fpm/www-slow.log ; The timeout for serving a single request after which a PHP backtrace will be ; dumped to the 'slowlog' file. A value of '0s' means 'off'. ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) ; Default Value: 0 ;request_slowlog_timeout = 0 ; The timeout for serving a single request after which the worker process will ; be killed. This option should be used when the 'max_execution_time' ini option ; does not stop script execution for some reason. A value of '0' means 'off'. ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) ; Default Value: 0 ;request_terminate_timeout = 0 ; Set open file descriptor rlimit. ; Default Value: system defined value ;rlimit_files = 1024 ; Set max core size rlimit. ; Possible Values: 'unlimited' or an integer greater or equal to 0 ; Default Value: system defined value ;rlimit_core = 0 ; Chroot to this directory at the start. This value must be defined as an ; absolute path. When this value is not set, chroot is not used. ; Note: you can prefix with '$prefix' to chroot to the pool prefix or one ; of its subdirectories. If the pool prefix is not set, the global prefix ; will be used instead. ; Note: chrooting is a great security feature and should be used whenever ; possible. However, all PHP paths will be relative to the chroot ; (error_log, sessions.save_path, ...). ; Default Value: not set ;chroot = ; Chdir to this directory at the start. ; Note: relative path can be used. ; Default Value: current directory or / when chroot ;chdir = /var/www ; Redirect worker stdout and stderr into main error log. If not set, stdout and ; stderr will be redirected to /dev/null according to FastCGI specs. ; Note: on highloaded environement, this can cause some delay in the page ; process time (several ms). ; Default Value: no ;catch_workers_output = yes ; Clear environment in FPM workers ; Prevents arbitrary environment variables from reaching FPM worker processes ; by clearing the environment in workers before env vars specified in this ; pool configuration are added. ; Setting to "no" will make all environment variables available to PHP code ; via getenv(), $_ENV and $_SERVER. ; Default Value: yes ;clear_env = no ; Limits the extensions of the main script FPM will allow to parse. This can ; prevent configuration mistakes on the web server side. You should only limit ; FPM to .php extensions to prevent malicious users to use other extensions to ; exectute php code. ; Note: set an empty value to allow all extensions. ; Default Value: .php ;security.limit_extensions = .php .php3 .php4 .php5 .php7 ; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from ; the current environment. ; Default Value: clean env ;env[HOSTNAME] = $HOSTNAME ;env[PATH] = /usr/local/bin:/usr/bin:/bin ;env[TMP] = /tmp ;env[TMPDIR] = /tmp ;env[TEMP] = /tmp ; Additional php.ini defines, specific to this pool of workers. These settings ; overwrite the values previously defined in the php.ini. The directives are the ; same as the PHP SAPI: ; php_value/php_flag - you can set classic ini defines which can ; be overwritten from PHP call 'ini_set'. ; php_admin_value/php_admin_flag - these directives won't be overwritten by ; PHP call 'ini_set' ; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. ; Defining 'extension' will load the corresponding shared extension from ; extension_dir. Defining 'disable_functions' or 'disable_classes' will not ; overwrite previously defined php.ini values, but will append the new value ; instead. ; Note: path INI options can be relative and will be expanded with the prefix ; (pool, global or @prefix@) ; Default Value: nothing is defined by default except the values in php.ini and ; specified at startup with the -d argument ;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com ;php_flag[display_errors] = off php_admin_value[error_log] = /var/log/php-fpm/www-error.log php_admin_flag[log_errors] = on ;php_admin_value[memory_limit] = 128M ; Set the following data paths to directories owned by the FPM process user. ; ; Do not change the ownership of existing system directories, if the process ; user does not have write permission, create dedicated directories for this ; purpose. ; ; See warning about choosing the location of these directories on your system ; at http://php.net/session.save-path php_value[session.save_handler] = files php_value[session.save_path] = /var/lib/php/session php_value[soap.wsdl_cache_dir] = /var/lib/php/wsdlcache ;php_value[opcache.file_cache] = /var/lib/php/opcache我發現的唯一錯誤資訊是：
ssl_error_log [Tue Jun 09 21:19:06.680548 2020] [proxy_fcgi:error] [pid 4877] [client ###.###.###.###:56480] AH01071: Got error 'Primary script unknown' error_log (repeated entries for the following) [Tue Jun 09 20:49:20.046026 2020] [mpm_prefork:notice] [pid 4731] AH00170: caught SIGWINCH, shutting down gracefully [Tue Jun 09 20:49:21.126867 2020] [suexec:notice] [pid 4795] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Tue Jun 09 20:49:21.168981 2020] [lbmethod_heartbeat:notice] [pid 4795] AH02282: No slotmem from mod_heartmonitor [Tue Jun 09 20:49:21.169053 2020] [http2:warn] [pid 4795] AH10034: The mpm module (prefork.c) is not supported by mod_http2. The mpm determines how things are processed in your server. HTTP/2 has more demands in this regard and the currently selected mpm will just not do. This is an advisory warning. Your server will continue to work, but the HTTP/2 protocol will be inactive. [Tue Jun 09 20:49:21.171476 2020] [mpm_prefork:notice] [pid 4795] AH00163: Apache/2.4.43 () OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Jun 09 20:49:21.171494 2020] [core:notice] [pid 4795] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
Apache 伺服器通過創建子程序來處理請求來工作。如何管理這些子程序取決於所使用的 MPM 或多處理模組。
MaxRequestWorkers您可以使用配置指令，例如ThreadsPerChild和ServerLimit來控制用於服務請求的子程序和執行緒的數量。有關 MPM 的更多資訊，請參閱Apache 文件。該
php-fpm模組以類似的方式工作。根據您顯示的配置，您已設置pm = dynamic和pm.max_children = 50。這允許模組一次最多有 50 個子程序來處理請求。您可以在此處找到 php-fpm 模組的配置文件：https ://www.php.net/manual/en/install.fpm.configuration.php使用該
ps命令，您可以驗證程序計數是否僅在指定限制之間變化。您可能還想使用不同的視圖（例如-e）來突出顯示每個程序的父 PID。關於 的使用
lsof，您應該知道lsof顯示打開的文件描述符。這包括套接字，但每個子程序也繼承相同的文件描述符。這就是同一個socket對應的重複條目的原因。在網路/介面級別，不可能有多個程序同時綁定到同一個埠號。