osdir.com


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug 61551] Event MPM workers stuck in Gracefully Finishing with no connections left


https://bz.apache.org/bugzilla/show_bug.cgi?id=61551

--- Comment #16 from Nic Jansma <nic@xxxxxxxx> ---
Unfortunately no [errors] in the error_log.

Now I do have mod_security2 installed, and the problem is possibly correlated
with getting Slow Loris-style attacked.

Some of the times that I'm seeing processes stuck happen after an attack such
as:

[Tue Sep 26 18:25:46.367095 2017] [:warn] [pid 17763:tid 140504981088000]
[client 204.12.234.170:63613] ModSecurity: Access denied with code 400. Too
many threads [51] of 50 allowed in WRITE state from x.x.x.x - Possible DoS
Consumption Attack [Rejected]

Here's the latest thread dump of a process (pid 27258) stuck in "yes (old gen)"
since yesterday:

https://pastebin.com/9Pda9wG9

Scoreboard at the time:

Slot    PID     Stopping        Connections     Threads Async connections
total   accepting       busy    idle    writing keep-alive      closing
0       27258   yes (old gen)   47      no      0       0       0       0      
0
1       25666   yes (old gen)   18      no      0       0       0       0      
0
2       2346    yes (old gen)   17      no      0       0       0       0      
0
3       28733   no      59      yes     7       57      0       39      12
4       17763   yes (old gen)   4       no      0       0       0       0      
0
5       20520   yes (old gen)   6       no      0       0       0       0      
0
6       25471   no      3       yes     0       64      0       3       0
Sum     7       5       154             7       121     0       42      12
G.GGG.GGG.GGGGGG.GG.GG.GGGG.GG.GG..GG.GGG.GGGG..G..GG.GGGGGGGGGG
GG.G..............G.GGGGG......GG.....GGG.G.............G.G.G...
..........G....G.G......GGGG.GG.......G.......GG...G.GG...G....G
_____W_______R_________R_______R______R__R____________R_________
..............................................G........G.GG.....
.....GG..............G.........GG...........................G...
________________________________________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Not sure if ModSecurity could play a role here.  I could temporarily disable it
if you think that would help debugging things.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: bugs-help@xxxxxxxxxxxxxxxx