Every two nights more or less the website doesn't respond

Keywords: LAMP/MAMP/WAMP - AWS - Technical issue - Services (Apache, MariaDB, MySQL…)

bndiagnostic ID: bd271ce4-2015-645d-b323-a09bb26e6df3

bndiagnostic output:

? Apache: Found possible issues
? Resources: Found possible issues
https://docs.bitnami.com/general/apps/wordpress/troubleshooting/debug-errors-apache/

bndiagnostic failure reason: The suggested guides are not related with my issue

Description:
On the machine all seems working properly. The server is listening, cpu is ok, I can connect to it by SSH. Apache and MariaDb services are running. Only the website load infinitely (http or https). The php app is simple and we have very few users.
In the access log there are entries but not so much. We have others same machine with no problems.

In the error log these are the last lines:

[Wed Mar 16 05:09:48.008475 2022] [ssl:info] [pid 15674:tid 140639794468608] [client 86.57.45.167:24806] AH01998: Connection closed to child 38 with abortive shutdown (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.176008 2022] [ssl:info] [pid 15674:tid 140639744112384] [client 2.182.73.87:43915] AH01964: Connection to child 44 established (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.176089 2022] [ssl:info] [pid 15674:tid 140639744112384] [client 2.182.73.87:43915] AH02008: SSL library error 1 in handshake (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.176109 2022] [ssl:info] [pid 15674:tid 140639744112384] SSL Library Error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
[Wed Mar 16 05:09:48.176116 2022] [ssl:info] [pid 15674:tid 140639744112384] [client 2.182.73.87:43915] AH01998: Connection closed to child 44 with abortive shutdown (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.207067 2022] [ssl:info] [pid 15674:tid 140639668578048] [client 5.213.247.52:48137] AH01964: Connection to child 53 established (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.207143 2022] [ssl:info] [pid 15674:tid 140639668578048] [client 5.213.247.52:48137] AH02008: SSL library error 1 in handshake (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.207177 2022] [ssl:info] [pid 15674:tid 140639668578048] SSL Library Error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
[Wed Mar 16 05:09:48.207184 2022] [ssl:info] [pid 15674:tid 140639668578048] [client 5.213.247.52:48137] AH01998: Connection closed to child 53 with abortive shutdown (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.361696 2022] [ssl:info] [pid 15674:tid 140639928751872] [client 86.57.45.167:24808] AH01964: Connection to child 22 established (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.361773 2022] [ssl:info] [pid 15674:tid 140639928751872] [client 86.57.45.167:24808] AH02008: SSL library error 1 in handshake (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.361798 2022] [ssl:info] [pid 15674:tid 140639928751872] SSL Library Error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
[Wed Mar 16 05:09:48.361804 2022] [ssl:info] [pid 15674:tid 140639928751872] [client 86.57.45.167:24808] AH01998: Connection closed to child 22 with abortive shutdown (server gvsa.eiconlab.com:443)
[Wed Mar 16 05:09:48.361874 2022] [mpm_event:debug] [pid 15674:tid 140639576258304] event.c(571): wake up listener
[Wed Mar 16 05:09:48.363874 2022] [http2:debug] [pid 15674:tid 140640741288832] h2_workers.c(328): h2_workers: cleanup 64 workers idling
[Wed Mar 16 05:09:48.364878 2022] [http2:debug] [pid 15674:tid 140640741288832] h2_workers.c(356): h2_workers: cleanup all workers terminated
[Wed Mar 16 05:09:48.365256 2022] [http2:debug] [pid 15674:tid 140640741288832] h2_workers.c(359): h2_workers: cleanup zombie workers joined
[Wed Mar 16 05:09:48.377331 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 1 children that are shutting down
[Wed Mar 16 05:09:49.378400 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 0 children that are shutting down
[Wed Mar 16 05:09:50.379513 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 0 children that are shutting down
[Wed Mar 16 05:09:51.380583 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 0 children that are shutting down
[Wed Mar 16 05:09:52.381669 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 0 children that are shutting down
[Wed Mar 16 05:09:53.382764 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 0 children that are shutting down

Hi @dan.car ,

You have a 512MB instance and its performance is really poor. I suggest you increase the resources of the machine for it to work properly. I also suggest you check this guide about bots and attackers just in case you are receiving those malicious requests

https://docs.bitnami.com/aws/infrastructure/lamp/troubleshooting/deny-connections-bots-apache/

Thank you Jota. But we have a lot of others machine with 512MB and a lot more users and we have not problems. I checked the guide but we don’t have attackers (less then 100 connections per ip).

Hi @dan.car,

Having less than 100 connections per IP doesn’t mean that they are not bots. Maybe different IPs are accessing your site at different moments. Apache is reaching the limits and that’s something to evaluate

[Wed Mar 16 05:09:48.377331 2022] [mpm_event:info] [pid 18193:tid 140640741288832] AH00486: server seems busy, (you may need to increase StartServers, ThreadsPerChild or Min/MaxSpareThreads), spawning 0 children, there are around 0 idle threads, 4 active children, and 1 children that are shutting down

and the instance is already using SWAP memory so that means that it’s running out of RAM memory.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.