scottl31

Q: Hosting too many sites on Yosemite Server?

On our yosemite server we are hosting about 17 low traffic wordpress sites which use MySql.

 

Lately I've been noticing "Error Establishing Database Connection" when logging in to some site back ends or just accessing the sites. Most of the time, just hitting refresh works. but this seems intermittent.

 

Also, I notice that the green lights next to some web sites in server app are  off. If I reboot the server, they all come back on.

 

So my question is, is this too many sites to host? Anything else I need to do?

 

Any help appreciated,

 

Thanks,

Scott

Mac mini, OS X Server

Posted on Jan 2, 2016 11:44 AM

Close

Q: Hosting too many sites on Yosemite Server?

  • All replies
  • Helpful answers

Previous Page 2 of 3 last Next
  • by MrHoffman,

    MrHoffman MrHoffman Jan 3, 2016 6:52 PM in response to scottl31
    Level 6 (15,612 points)
    Mac OS X
    Jan 3, 2016 6:52 PM in response to scottl31

    Please disable and remove the AV, and test.

     

    In general, I would encourage considering why you are — or are not — using antivirus and anti-malware tools, and to not simply assume that they are — or are not — necessary.  Also consider what the threats are, as those are different now than they were.  This just as OS X is different from Windows and is used and secured differently, and as servers are used and are managed differently than are client systems.

     

    For later consideration, here are some details to ponder but then your organizational decisions may differ. 

     

    But this particular case is not about whether or not to use an AV package or this particular AV package, but centrally about checking the reported issues with system performance and load and stability, and the possibility of some instability or other issues introduced by very complex add-on tools.

  • by etresoft,

    etresoft etresoft Jan 3, 2016 7:38 PM in response to scottl31
    Level 7 (29,051 points)
    Jan 3, 2016 7:38 PM in response to scottl31

    Hello again scottl31,

    I'm not complaining about Sophos in particular. Like any AV software, it is meant for a client machine, not a server. When running with a server directly connected to the internet 24x7 you have a wide array of very real security risks. Sophos isn't going to help with those risks. It is designed to scan e-mail for viruses and other silly stuff to make people feel better with their Macs. If someone discovers your wordpress site and decides to make a point to hack you on the next wordpress zero-day, no AV software in the world is going to help. And since you have cobbled together your own server, you are going to be exposed to that hack for far longer than anyone else.

     

    If your boss wants to do everything in-house, that's fine. But I strongly suspect that you are not adequately funded or staffed to maintain a server like that. It requires constant monitoring of security threats and patching your system. You will be hacked and you, personally, will be blamed. Your only security is in obscurity. I suggest you get your resume in order. Unfortunately, administering a Mac wordpress server isn't going to look very impressive on it.

     

    Ultimately, none of this really helps with your original question. But that is the reason for my response. You are running a one-man show here. Virtually no one else in the world, including Apple, hosts web servers from a Mac. At a practical level, it is career suicide. If something goes wrong, where are you going to go for help? There is no Mac web server community to speak of. All we can do is take guesses based on what we did a few years ago. Even then, you are running in an unusual setup. If you dumped Server and went 100% Homebrew then you would have a more standard setup and quicker access to patches on the server side. For OS-level patches, you will always be stuck on Apple's best-case 3-8 week security update schedule.

  • by MrHoffman,

    MrHoffman MrHoffman Jan 3, 2016 8:01 PM in response to etresoft
    Level 6 (15,612 points)
    Mac OS X
    Jan 3, 2016 8:01 PM in response to etresoft

    etresoft wrote:

     

    Virtually no one else in the world, including Apple, hosts web servers from a Mac.

     

     

    There might be very few, but I'm hosting web sites on OS X Server, and know of other sites doing the same.

     

    There is no Mac web server community to speak of. All we can do is take guesses based on what we did a few years ago. Even then, you are running in an unusual setup. If you dumped Server and went 100% Homebrew then you would have a more standard setup and quicker access to patches on the server side. For OS-level patches, you will always be stuck on Apple's best-case 3-8 week security update schedule.

     

     

    It's an Apache web server on a BSD-ish platform.   The largest likely issues here are probably secondary to keeping WordPress current and locked down, and probably not with Apache or the OS X platform.  The downside of CMS packages is that they're usually large and complex, and whether the breach can be extended, and which gets into the local network design, backups, and other details.

     

    Hosted services have their issues and limits and messes, and in-house does too.

     


  • by Leopardus,

    Leopardus Leopardus Jan 4, 2016 1:45 AM in response to scottl31
    Level 4 (1,087 points)
    Desktops
    Jan 4, 2016 1:45 AM in response to scottl31

    etresoft wrote:

     

    Hello again scottl31,

    I'm not complaining about Sophos in particular. Like any AV software, it is meant for a client machine, not a server. When running with a server directly connected to the internet 24x7 you have a wide array of very real security risks. Sophos isn't going to help with those risks. It is designed to scan e-mail for viruses and other silly stuff to make people feel better with their Macs. If someone discovers your wordpress site and decides to make a point to hack you on the next wordpress zero-day, no AV software in the world is going to help....>   1

     

    If your boss wants to do everything in-house, that's fine..... It requires constant monitoring of security threats and patching your system. Your only security is in obscurity......>    2

     

    ...... Virtually no one else in the world, including Apple, hosts web servers from a Mac....>    3

    scottl31 wrote:

     

    You both seem to not be keen on sophos. Should I just ditch it altogether? I only have it set to do a scan every day at 2:00 am.

     

    I love to be able to manage a hosted dedicated server, but my boss just won't do it. Although he doesn't want to pay someone else, it's more that he wants it under his physical roof.

    Hi scottl31,

     

    1. I fully agree with MrHoffman and Etresoft on the AV issue. The thing is just clogging your Mac and slowing it down. Get rid of it, and you will see an immediate improvement in the performance of your server.
    2. Wrt to hosting a SME inhouse, your best security is obscurity. Server farms and hosting firms are much more subjected to attacks than SME's which do in-house hosting. You just had to follow the recent hacker conference held in Hamburg to realise that. The reason seems to be that the most can be gained from such breaches.
    3. On the issue of hosting on a Mac, there are more than a few that is hosted on Mac's, especially in the Education, SOHO and SME environments. One even finds nowadays enterprises like www.macminicolo.net which offers such services on a commercial basis. Here I side with MrHoffman, John Lockwood and the like.

     

    Leo

  • by MrHoffman,

    MrHoffman MrHoffman Jan 4, 2016 7:57 AM in response to Leopardus
    Level 6 (15,612 points)
    Mac OS X
    Jan 4, 2016 7:57 AM in response to Leopardus

    Leopardus wrote:

    1. Wrt to hosting a SME inhouse, your best security is obscurity. Server farms and hosting firms are much more subjected to attacks than SME's which do in-house hosting. You just had to follow the recent hacker conference held in Hamburg to realise that. The reason seems to be that the most can be gained from such breaches.

     

    Don't bet on that.  Server farms are higher-value, but the botnets have way, way, way, way, way too many computers, and they're brute-force scanning the whole of the active IPv4 address space effectively continuously.   (I've seen brand-new network services on existing computers with existing IPv4 addresses very quickly detected and targeted, too.)


    Given a large enough network pipe, tools like Masscan can scan the whole active IPv4 address space in several minutes.   The botnets have far higher aggregate network bandwidth and far more computing resources than Masscan needs or uses for its scans, too.   FWIW, some folks apparently at the 32C3 conference — the cited conference — left a poem in the web server logs of most of the web servers around the 'net, as an example of this access.

     

    In short, expect to get targeted.

  • by scottl31,

    scottl31 scottl31 Jan 4, 2016 1:37 PM in response to Leopardus
    Level 1 (13 points)
    Servers Enterprise
    Jan 4, 2016 1:37 PM in response to Leopardus

    So are you saying that sophos is slowing down the mac just being installed, even when it's not scanning? It's found a few things in the past, but I put it on mainly to make the boss feel happy.

     

    I guess I'll remove it and see what happens and then run another test.

  • by MrHoffman,

    MrHoffman MrHoffman Jan 4, 2016 1:44 PM in response to scottl31
    Level 6 (15,612 points)
    Mac OS X
    Jan 4, 2016 1:44 PM in response to scottl31

    Nobody here knows if Sophos is the problem.   Or if it's an innocent bystander.   Not until it gets removed, and the configuration is re-tested.

    In general, AV and AM tools do have a long history of issues, and on any platform.

    Which is why testing without Sophos installed has been suggested.

    As for performance and load, your earlier posting showed a component of Sophos — "49% InterCheck" — was quite active.

    I'd be curious to know what Sophos found, too — whether it was an issue, or a false of some sort.

  • by scottl31,

    scottl31 scottl31 Jan 4, 2016 4:52 PM in response to MrHoffman
    Level 1 (13 points)
    Servers Enterprise
    Jan 4, 2016 4:52 PM in response to MrHoffman

    So even with sophos removed, I still get sites with the green dot going off and on seemingly randomly. But even with the dot off, the site is still accessible over the internet:

    greenlightoff.png

     

    Here is the latest test without sophos:

     

    EtreCheck version: 2.6.6 (226)

    Report generated 1/4/16, 4:44 PM

    Runtime 1:34

    Download EtreCheck from http://etrecheck.com

     

    Click the [Click for support] links for help with non-Apple products.

    Click the [Click for details] links for more information about that line.

     

    Hardware Information: (What does this mean?)

        Mac mini (Late 2014)

        [Click for Technical Specifications]

        [Click for User Guide]

        Mac mini - model: Macmini7,1

        1 2.6 GHz Intel Core i5 CPU: 2-core

        16 GB RAM Not upgradeable

                BANK 0/DIMM0

                8 GB DDR3 1600 MHz ok

            BANK 1/DIMM0

                8 GB DDR3 1600 MHz ok

        Bluetooth: Good - Handoff/Airdrop2 supported

        Wireless:  en1: 802.11 a/b/g/n/ac

     

    Video Information: (What does this mean?)

        Intel Iris

            Display 1280 x 1024 @ 60 Hz

     

    System Software: (What does this mean?)

        OS X Yosemite 10.10.5 (14F1509) - Time since boot: about one hour

     

    Disk Information: (What does this mean?)

        APPLE SSD SM0256F disk0 : (251 GB) (Solid State - TRIM: Yes)

            EFI (disk0s1) <not mounted> : 210 MB

            Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

            [redacted] (disk1) / : 249.78 GB (198.06 GB free)

                Core Storage: disk0s2 250.14 GB Online

     

    USB Information: (What does this mean?)

        Seagate BUP Slim Mac SL 1 TB

            EFI (disk2s1) <not mounted> : 210 MB

            S3_Backup (disk2s2) /Volumes/S3_Backup : 999.86 GB (692.32 GB free)

        ASIX Elec. AX88179

        Apple, Inc. IR Receiver

        Apple Inc. BRCM20702 Hub

            Apple Inc. Bluetooth USB Host Controller

     

    Thunderbolt Information: (What does this mean?)

        Apple Inc. thunderbolt_bus

     

    Gatekeeper: (What does this mean?)

        Mac App Store and identified developers

     

    Kernel Extensions: (What does this mean?)

            /Library/Extensions

        [loaded]    com.asix.driver.ax88179-178a (1.2.0 - SDK 10.9) [Click for support]

        [not loaded]    com.asix.driver.ax88772 (1.3.0 - SDK 10.9) [Click for support]

     

    Startup Items: (What does this mean?)

        MySQLCOM: Path: /Library/StartupItems/MySQLCOM

        Startup items are obsolete in OS X Yosemite

     

    Launch Daemons: (What does this mean?)

        [loaded]    com.adobe.fpsaud.plist [Click for support]

        [loaded]    com.bombich.ccchelper.plist [Click for support]

        [running]    com.mysql.mysql.plist [Click for support]

        [loaded]    homebrew.mxcl.php56.plist [Click for support]

     

    User Launch Agents: (What does this mean?)

        [loaded]    com.google.keystone.agent.plist [Click for support]

     

    User Login Items: (What does this mean?)

        iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

        X-Assist    Application Hidden (/Applications/X-Assist/X-Assist.app)

     

    Other Apps: (What does this mean?)

        [running]    com.apple.DeviceManagement.postgres - No signature!

        [loaded]    com.apple.collabd.expire - No signature!

        [loaded]    com.apple.disks.smart.status - No signature!

        [loaded]    com.apple.salearn - No signature!

        [loaded]    com.apple.saupdate - No signature!

        [running]    com.apple.server.httpd - No signature!

        [loaded]    com.apple.server.v2.stats - No signature!

        [running]    com.apple.xpc.launchd.oneshot.0x10000000.Server - Invalid signature!

        [running]    com.etresoft.EtreCheck.121584

        [running]    com.ortabe.xassist.41496

        [running]    org.amavis.amavisd

        [loaded]    org.amavis.amavisd_cleanup

        [loaded]    org.calendarserver.agent

        [loaded]    org.calendarserver.archive

        [running]    org.calendarserver.calendarserver

        [loaded]    org.calendarserver.relocate

        [running]    org.clamav.clamd

        [running]    org.clamav.freshclam

        [running]    org.dovecot.dovecotd

        [loaded]    org.dovecot.fts.update

        [running]    org.isc.named

        [running]    org.postfix.master.active

     

    Internet Plug-ins: (What does this mean?)

        FlashPlayer-10.6: Version: 20.0.0.267 - SDK 10.6 [Click for support]

        QuickTime Plugin: Version: 7.7.3

        Flash Player: Version: 20.0.0.267 - SDK 10.6 [Click for support]

        Default Browser: Version: 600 - SDK 10.10

     

    3rd Party Preference Panes: (What does this mean?)

        Flash Player  [Click for support]

        MySQL  [Click for support]

     

    Time Machine: (What does this mean?)

        Skip System Files: NO

        Auto backup: YES

        Volumes being backed up:

            Server3: Disk size: 249.78 GB Disk used: 51.72 GB

        Destinations:

            Seagate Backup Plus Drive [Local]

            Total size: 999.86 GB

            Total number of backups: 83

            Oldest backup: 5/8/15, 4:17 PM

            Last backup: 1/4/16, 4:03 PM

            Size of backup disk: Excellent

                Backup size 999.86 GB > (Disk size 249.78 GB X 3)

     

     

    Top Processes by CPU: (What does this mean?)

           121%    mdworker(2)

             5%    WindowServer

             3%    fontd

             1%    kernel_task

             1%    ScreensharingAgent

     

     

    Top Processes by Memory: (What does this mean?)

        1012 MB    kernel_task

        492 MB    mysqld

        328 MB    clamd

        180 MB    mds_stores

        115 MB    amavisd (master)

     

    Virtual Memory Information: (What does this mean?)

        7.35 GB    Free RAM

        8.65 GB    Used RAM (4.88 GB Cached)

        0 B    Swap Used

     

    Diagnostics Information: (What does this mean?)

        Jan 4, 2016, 03:21:23 PM    Self test - passed

     

    -----

    That was run a while ago, but the time at the bottom is not the time of the test. I ran it again and the time is the same in that test. But this was different:

     

    Top Processes by CPU: (What does this mean?)

             5%    WindowServer

             3%    fontd

             1%    ScreensharingAgent

             1%    kernel_task

             1%    screensharingd

     

    Thankls!

  • by MrHoffman,

    MrHoffman MrHoffman Jan 4, 2016 5:23 PM in response to scottl31
    Level 6 (15,612 points)
    Mac OS X
    Jan 4, 2016 5:23 PM in response to scottl31

    What's in the Console.app logs for the system?  Any blocks of repeating errors?  (Please don't dump more than maybe a hundred lines of error messages in total, and please don't dump multiple copies of repeating blocks of errors.)

     

    How many network connections does this box have?  There's Wi-Fi around, there's a wired USB network adapter of some sort, is wired networking also in use?   I'd expect one network connection with a typical OS X Server configuration, and that' usually gigabit wired.

     

    It looks like Sophos might not be involved.   While testing, I'd still leave that disabled.

  • by Leopardus,

    Leopardus Leopardus Jan 4, 2016 8:31 PM in response to scottl31
    Level 4 (1,087 points)
    Desktops
    Jan 4, 2016 8:31 PM in response to scottl31

    Hi scottl31,

     

    One thing that I did notice, and which could explain some of the extra connections that you saw earlier was the Google keystone agent which was launched under the User launch agents.. You could have a look at this blog: how to remove Google’s secret update software from your mac | to read more about it.

     

    Leo

  • by scottl31,

    scottl31 scottl31 Jan 4, 2016 10:38 PM in response to Leopardus
    Level 1 (13 points)
    Servers Enterprise
    Jan 4, 2016 10:38 PM in response to Leopardus

    mrHoffman,

    Wifi is off on this box and it has an extra gigabit ethernet usb adapter. As for the console, in access, bing bot seems to be really hammering. They seem to like this calendar we have. There's a ton of this:

     

    norfolkpress.com "norfolkpress.com" 207.46.13.81 - - [04/Jan/2016:22:02:35 -0800] "GET /calendar/action~agenda/cat_ids~12,14/tag_ids~323,205/request_format~html/ HTTP/1.1" 200 162804 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"

    norfolkpress.com "norfolkpress.com" 207.46.13.81 - - [04/Jan/2016:22:02:36 -0800] "GET /calendar/action~agenda/cat_ids~12/tag_ids~180,197,501/request_format~html/ HTTP/1.1" 200 158582 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"

    norfolkpress.com "norfolkpress.com" 207.46.13.81 - - [04/Jan/2016:22:02:38 -0800] "GET /calendar/action~agenda/cat_ids~12/tag_ids~161,228,253/request_format~html/ HTTP/1.1" 200 158582 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"

     

    In the error access, I find a lot of this:

     

    [Mon Jan 04 22:14:23.608724 2016] [env:warn] [pid 14499] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Mon Jan 04 22:14:23.690814 2016] [env:warn] [pid 14486] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Mon Jan 04 22:14:23.787383 2016] [env:warn] [pid 14513] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Mon Jan 04 22:14:32.507570 2016] [env:warn] [pid 14486] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Mon Jan 04 22:14:32.507611 2016] [env:warn] [pid 14513] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Mon Jan 04 22:14:32.713832 2016] [env:warn] [pid 14486] AH01506: PassEnv variable MODSEC_ENABLE was undefined

     

    As for system messages, there is a lot of this:

     

    1/4/16 10:22:33.211 PM servermgr_caching[14670]: validating connection from 0 : 100000

    1/4/16 10:22:33.221 PM servermgr_caching[14670]: Connected to the Notify Service

    1/4/16 10:22:33.241 PM serveradmin[14774]: Connected to the Notify Service

    1/4/16 10:22:33.242 PM servermgr_devicemgr[14672]: validating connection from 0 : 100000

    1/4/16 10:22:33.261 PM serveradmin[14775]: Connected to the Notify Service

    1/4/16 10:22:33.262 PM servermgr_devicemgr[14672]: validating connection from 0 : 100000

    1/4/16 10:22:33.282 PM serveradmin[14776]: Connected to the Notify Service

    1/4/16 10:22:33.283 PM servermgr_dirserv[14680]: validating connection from 0 : 100000

    1/4/16 10:22:33.332 PM serveradmin[14781]: Connected to the Notify Service

    1/4/16 10:22:33.333 PM servermgr_dirserv[14680]: validating connection from 0 : 100000

    1/4/16 10:22:33.334 PM servermgr_dirserv[14680]: Connected to the Notify Service

    1/4/16 10:22:33.352 PM serveradmin[14782]: Connected to the Notify Service

    1/4/16 10:22:33.353 PM servermgr_dns[14686]: validating connection from 0 : 100000

    1/4/16 10:22:33.374 PM serveradmin[14783]: Connected to the Notify Service

    1/4/16 10:22:33.375 PM servermgr_dns[14686]: validating connection from 0 : 100000

    1/4/16 10:22:33.377 PM servermgr_dns[14686]: Connected to the Notify Service

    1/4/16 10:22:33.394 PM serveradmin[14784]: Connected to the Notify Service

    1/4/16 10:22:33.396 PM servermgr_ftp[14688]: validating connection from 0 : 100000

    1/4/16 10:22:33.409 PM serveradmin[14785]: Connected to the Notify Service

    1/4/16 10:22:33.411 PM servermgr_ftp[14688]: validating connection from 0 : 100000

    1/4/16 10:22:33.420 PM servermgr_ftp[14688]: Connected to the Notify Service

    1/4/16 10:22:33.438 PM serveradmin[14786]: Connected to the Notify Service

    1/4/16 10:22:33.439 PM servermgr_info[14690]: validating connection from 0 : 100000

    1/4/16 10:22:33.459 PM serveradmin[14787]: Connected to the Notify Service

    1/4/16 10:22:33.460 PM servermgr_info[14690]: validating connection from 0 : 100000

    1/4/16 10:22:33.461 PM servermgr_certs[494]: validating connection from 0 : 100000

    1/4/16 10:22:33.494 PM serveradmin[14788]: Connected to the Notify Service

    1/4/16 10:22:33.495 PM servermgr_jabber[14692]: validating connection from 0 : 100000

    1/4/16 10:22:33.525 PM serveradmin[14790]: Connected to the Notify Service

    1/4/16 10:22:33.526 PM servermgr_jabber[14692]: validating connection from 0 : 100000

    1/4/16 10:22:33.535 PM servermgr_jabber[14692]: Connected to the Notify Service

  • by scottl31,

    scottl31 scottl31 Jan 4, 2016 10:40 PM in response to Leopardus
    Level 1 (13 points)
    Servers Enterprise
    Jan 4, 2016 10:40 PM in response to Leopardus

    Leo,

     

    While finding the above, I did see a lot of that google update keystone activity. I rarely have ever even used chrome on this. I guess I'll follow those instructions for removal. Thanks!

  • by John Lockwood,

    John Lockwood John Lockwood Jan 5, 2016 2:43 AM in response to scottl31
    Level 6 (9,215 points)
    Servers Enterprise
    Jan 5, 2016 2:43 AM in response to scottl31

    I have seen nothing so far in this thread that confirms any of the following but here are few things to consider and check.

     

    It is possible to configure a limit on the maximum number of simultaneous connections to the MySQL server, see https://dev.mysql.com/doc/refman/5.5/en/too-many-connections.html with multiple sites and potential multiple users on each of those sites this may need increasing. Similarly Apache also has a setting for the maximum number of connections http://httpd.apache.org/docs/2.2/mod/mpm_common.html#maxclients

     

    However I think the error messages would have made hitting such limits more obvious if this was happening to you.

     

    When you find some sites apparently disabled in Server.app are they the same ones each time? If they are the same ones them it maybe something specific to those sites.

     

    I presume you are confident your DNS settings are all correct in that you obviously have many CNAME i.e. aliases pointing to the same single server. Remember if you are running an internal DNS server you need to do this on that as well as any external DNS server.

     

    OS X from Yosemite onwards will aggressively try and use all physical memory for caching for user processes, this can mean other processes can unexpectedly be starved of memory. As per other suggestions increasing the cache etc. settings for MySQL and/or Apache may help them grab memory before OS X steals it all.

     

    For what its worth I run my MySQL in a virtual Linux system, it makes updating much easier than with OS X.

     

    Kernel Extensions are drivers to support hardware. The ASIX entry suggests you may have a USB Ethernet adapter connected. I use on one server a USB Ethernet adapter as well. You might want to see if there is an updated driver as El Capitan in particular is fussy about such drivers.

     

    Note: A lot of people prefer using Apple's Thunderbolt to Ethernet adapter instead of a USB to Ethernet adapter.

     

    You seem to be running quite a few processes on this single server, i.e. not just Apache and MySQL and PHP, but also the Apple Calendar and Mail services. You might want to consider moving them to a separate server. I have no reason to believe your work/traffic level would overly strain a single server but Macs are not that expensive and it avoids having all your eggs in one basket and would spread the load if that was a problem. By load we are not just talking about CPU load but also maximum number of connections and maximum number of files open at once.

  • by scottl31,

    scottl31 scottl31 Jan 5, 2016 2:49 PM in response to John Lockwood
    Level 1 (13 points)
    Servers Enterprise
    Jan 5, 2016 2:49 PM in response to John Lockwood

    John.

     

    Well, we have an SL server and when we got the Yosemite server, I started moving all the sites over from that. Some have mail service, but most don't. Every time I moved a site, I'd test pretty well, including the mail if it applied. These are all very low traffic sites. I think they get more SE bot and hacker bot attempts than human traffic.

     

    Anyway, I'm still not finished moving. The database connection errors and the off/on green dots seemed to start after I moved a particularly bulky site that has lots of high res images as a slide show. The site folder is about 700-800 MB. The database for the site seems small though at under 3 MB. But I don't know why it would slow down this server and not the SL one. So I don't know if this is the cause or just a coincidence.

     

    There doesn't seem to be a pattern as to the green dots on/off indicating the sites being enabled. Some are on, then off, then on again later. But even when they are off, the sites I've checked at random are accessible.

     

    As for services, I turned off calendar. But I didn't think of putting some on another server because I had always assumed it was best to keep all services related to a domain all together on the same server.

     

    Regarding the max mysql connection and maxClients, do you know if there is a way to see how many there are of each at any given time?

  • by scottl31,

    scottl31 scottl31 Feb 23, 2016 2:46 PM in response to scottl31
    Level 1 (13 points)
    Servers Enterprise
    Feb 23, 2016 2:46 PM in response to scottl31

    Not sure if any of you guys are still out there, but my problem persists. I think I may have narrowed it down to the fact that a newer install of mysql was done soon after the first one and maybe some components of each are being used in a mixed fashion. Need to figure out how to uninstall all traces and install a new version.

     

    Anyway something always in the error log is this:

     

    [Tue Feb 23 01:00:55.370036 2016] [env:warn] [pid 20961] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Tue Feb 23 01:00:55.524636 2016] [env:warn] [pid 20957] AH01506: PassEnv variable MODSEC_ENABLE was undefined

    [Tue Feb 23 01:00:55.551752 2016] [env:warn] [pid 20958] AH01506: PassEnv variable MODSEC_ENABLE was undefined

     

    Anybody know what this might be?

     

    Thanks,

    Scott

Previous Page 2 of 3 last Next