Litespeed Seems to Restart Alot

dlewis23

Active Member
#1
I'm having a somewhat annoying issue were litespeed seems to restart often. Usually the up time on the Real-Time Stats is no higher then an hour and 20 minutes or so.

This is kind of an annoying problem since I run a high end file host and people can be downloading files as large as 2 GB and that could be interrupted if Litespeed is restarting often.

Is there anything I can look into or change to stop this?

Thanks
 

NiteWave

Administrator
#2
adjust "Graceful Restart Timeout (secs)"
Server->General->Graceful Restart Timeout (secs):-1

"During graceful restart, the new server instance is up, while the old instance will continue to handle existing requests. This timeout defines how long the previous instance shall wait before exit. Default value is 300 seconds, -1 means wait forever, 0 means no wait and abort immediately."
 

dlewis23

Active Member
#3
Thanks for your reply. I set that to -1 and it still seems to restart about every hour or so. Is there any other settings I should look into?

Thanks
 

NiteWave

Administrator
#4
need check the error.log(or error_log) and/or stderr.log why it restart every hour.

if your website only serve static content, it's not likely to restart often. I managed a few high traffic websites, one is images only, another one has simple php, both of them don't restart for months/weeks, usually restart when I upgrade lsws version or do some configuration changes.
 

dlewis23

Active Member
#5
need check the error.log(or error_log) and/or stderr.log why it restart every hour.

if your website only serve static content, it's not likely to restart often. I managed a few high traffic websites, one is images only, another one has simple php, both of them don't restart for months/weeks, usually restart when I upgrade lsws version or do some configuration changes.
Most of what is being served is dynamic PHP content. From images to large file downloads its all done through PHP.

I will check the error.log right after it restarts next.
 

dlewis23

Active Member
#6
I was able to catch it right when it restarted, but there doesn't seem to be much in the error_log log. It just says when it restarted.

Here is a few lines before and after.


Code:
[Sun Mar 13 11:03:14 2011] [error] [client 125.71.231.82] ModSecurity: Access denied with code 406, [Rule: 'REQUEST_FILENAME|ARGS|ARGS_NAMES' '(?:\b(?:(?:type\b\W*?\b(?:text\b\W*?\b(?:j(?:ava)?|ecma|vb)|application\b\W*?\bx-(?:java|vb))script|c(?:opyparentfolder|reatetextrange)|get(?:special|parent)folder|iframe\b.{0,100}?\bsrc)\b|on(?:(?:mo(?:use(?:o(?:ver|ut)|down|move|up)|ve)|key(?:press|down|up)|c(?:hange|lick)|s(?:elec|ubmi)t|(?:un)?load|dragdrop|resize|focus|blur)\b\W*?=|abort\b)|(?:l(?:owsrc\b\W*?\b(?:(?:java|vb)script|shell|http)|ivescript)|(?:href|url)\b\W*?\b(?:(?:java|vb)script|shell)|background-image|mocha):|s(?:(?:tyle\b\W*=.*\bexpression\b\W*|ettimeout\b\W*?)\(|rc\b\W*?\b(?:(?:java|vb)script|shell|http):)|a(?:ctivexobject\b|lert\b\W*?\(|sfunction:))|<(?:(?:body\b.*?\b(?:backgroun|onloa)d|input\b.*?\btype\b\W*?\bimage)\b| ?(?:(?:script|meta)\b|iframe)|!\[cdata\[)|(?:\.(?:(?:execscrip|addimpor)t|(?:fromcharcod|cooki)e|innerhtml)|\@import)\b)']
 [ID: 950004] [Msg: Cross-site Scripting (XSS) Attack]
2011-03-13 11:03:14.200 [NOTICE] [125.71.231.82:40684-1#APVH_uploadingit.com] Content len: 0, Request line: 'GET /file/gundmke6gkcz8m38/%E9%8F%82%E6%9D%BF%E7%BC%93%E9%8F%82%E5%9B%A6%E6%AC%A2%E6%BE%B6%3C/div%3E%3C/div%3E%3C/td%3E%20%20%20%20%20%20%20%20%20%20%20%20%3C/tr%3E%20%20%20%20%3C/table%3E%3CBR%3E%20%20%3CDIV%20class=pagea%3E%E4%B8%8A%E4%B8%80%E7%AF%87%EF%BC%9A%3Ca%20href='/tttppp/37736.html'%3E%E7%BE%8E%E4%B9%B3%E5%B0%91%E5%A5%B3%E9%85%92%E5%BA%97%E6%BF%80%E6%83%85[30P]%3C/a%3E%20%20%20%C2%A0%C2%A0%C2%A0%C2%A0%E4%B8%8B%E4%B8%80%E7%AF%87%EF%BC%9A%3Ca%20href='/tttppp/37738.html'%3E%E6%83%85%E7%A5%9E%E6%80%A1%E7%84%B6%E8%87%AA%E8%8B%A5%E7%9A%84%E6%97%A5%E6%9C%AC%E7%BE%8E%E5%A5%B3[10P]%3C/a%3E%20%3C/DIV%3E%3C/DIV%3E%3Cscript%20type= HTTP/1.1'
2011-03-13 11:03:14.200 [NOTICE] [125.71.231.82:40684-1#APVH_uploadingit.com] Redirect: #1, URL: /file.php
2011-03-13 11:03:14.200 [INFO] [125.71.231.82:40684-1#APVH_uploadingit.com] File not found [/home/uploadin/public_html/406.shtml] 
2011-03-13 11:03:16.629 [INFO] [173.70.142.251:56673-0#APVH_uploadingit.com] File not found [/home/uploadin/public_html/redirect/] 
2011-03-13 11:03:16.632 [INFO] Remove pid: 18276
2011-03-13 11:03:22.791 [INFO] Remove pid: 18236
2011-03-13 11:03:22.791 [INFO] Remove pid: 18237
2011-03-13 11:03:22.799 [INFO] Remove pid: 18325
2011-03-13 11:03:22.803 [INFO] Remove pid: 18348
2011-03-13 11:03:22.803 [INFO] Remove pid: 18178
2011-03-13 11:03:22.806 [INFO] Remove pid: 18346
2011-03-13 11:03:22.806 [INFO] Remove pid: 18339
2011-03-13 11:03:22.809 [INFO] Remove pid: 17873
2011-03-13 11:03:22.812 [INFO] Remove pid: 18351
2011-03-13 11:03:22.816 [INFO] Remove pid: 18239
2011-03-13 11:03:22.817 [INFO] Remove pid: 18256
2011-03-13 11:03:22.826 [INFO] Remove pid: 18322
2011-03-13 11:03:24.001 [NOTICE] Server Restart Request via Signal...
2011-03-13 11:03:24.001 [NOTICE] [25437] Graceful Restart... 
2011-03-13 11:03:24.002 [NOTICE] [PID: 25437]: start cgid: 18473, /usr/local/lsws/bin/lscgid
2011-03-13 11:03:24.002 [INFO] Pass listener 127.0.0.1:443.
2011-03-13 11:03:24.002 [INFO] Pass listener 127.0.0.1:80.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.210:443.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.210:80.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.211:443.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.211:80.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.212:443.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.212:80.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.213:443.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.213:80.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.214:443.
2011-03-13 11:03:24.002 [INFO] Pass listener 69.163.39.214:80.
2011-03-13 11:03:24.002 [INFO] Pass listener *:7080.
 

NiteWave

Administrator
#7
Most of what is being served is dynamic PHP content. From images to large file downloads its all done through PHP.
can you explain more about large file download through php?
if it's possible, try serve large static file through "X-LiteSpeed-Location
 

NiteWave

Administrator
#8
Most of what is being served is dynamic PHP content. From images to large file downloads its all done through PHP.
can you explain more about large file download through php?
if it's possible, try serve large static file through "X-LiteSpeed-Location"
http://www.litespeedtech.com/support/wiki/doku.php?id=litespeed:wiki:feature:internal_redirect
that will improve the overall performance, reduce the memory usage of php a lot.

I guess this issue is related to memory usage of php.

also you can try 4.1RC4 to see if any difference.
 
Top