voshka

Active Member
Apr 4, 2010
30
0
56
re: a feature to secure against symlink attacks vulnerabilities in apache

I did
there was about 2 day ticketing and too many reply
they attempted to fix it but finally their final answer was that I have too much mysql queries that crash the server
but I reverted every things back to Centos and every things fixed
our server is highly customized
we have 240Gig mushkin ssd and it coudl handle a load of 800 without being down that one the other of our server is so
but this server would go down with the load of 50

Thanks
 

monarobase

Well-Known Member
PartnerNOC
Jan 26, 2010
529
21
68
France
cPanel Access Level
Root Administrator
re: a feature to secure against symlink attacks vulnerabilities in apache

we have 240Gig mushkin ssd and it coudl handle a load of 800 without being down
If you are talking about the server load in the top command, then I'm not sure I've ever seen a load of 800 before… (I mean not able to access a server with this sort of load…) such a load means that there is a huge bottleneck somewhere… !

Maybe you could add some more ram or configure mysql to use more memory thus using the hard drives less…

- - - Updated - - -

+1 for the secure links patch for apache for people who don't use CloudLinux :)

If I'm not mistaken Cloudlinux will soon be doing this on a kernel level but are currently doing this in their apache module, so cPanel should be able to either create a module to do this or just patch all vulnerable apache versions.
 
Last edited:

voshka

Active Member
Apr 4, 2010
30
0
56
Re: a feature to secure against symlink attacks vulnerabilities in apache

Hi
the server I used for patching the kernel with cloud linux at peak time had a load of 10 some times 20
all the requests are normal and it is highly customized

I mentioned that I have another serve with the same configureation that even can handle the load of 800 and all the websites can be able to run and start so fast

but by having cloud linux the server load would go so high and unreachable
maybe their kernel is not compatible with such custom server that uses isolated SSD just for the Operation System and mysql
but what i figured out that the main Centos kernel is highis more stable than the patched one in term of security
I even patched the server kernel with ASL and results wre, unstablity, unability to mount other hard drives

I also entitle you do not belive that a server can handle such high load
It is the Power of a SSD and apache and mysql configuration and optimization

Thanks
 

voshka

Active Member
Apr 4, 2010
30
0
56
Re: a feature to secure against symlink attacks vulnerabilities in apache

the current apache requests
and
also attached the htop
every thing is also normal


Apache server status for server.moviearena.org

Server Version: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_bwlimited/1.4 mod_fcgid/2.3.6
Server Built: Sep 6 2012 06:21:22

Current Time: Thursday, 06-Sep-2012 13:55:32 EDT
Restart Time: Thursday, 06-Sep-2012 06:47:40 EDT
Parent Server Generation: 2
Server uptime: 7 hours 7 minutes 52 seconds
Total accesses: 1381670 - Total Traffic: 17988.4 GB
CPU Usage: u289.98 s520.37 cu0 cs0 - 3.16% CPU load
53.8 requests/sec - 0.7 GB/second - 13.3 MB/request
6758 requests currently being processed, 639 idle workers
 

Attachments

monarobase

Well-Known Member
PartnerNOC
Jan 26, 2010
529
21
68
France
cPanel Access Level
Root Administrator
maybe their kernel is not compatible with such custom server that uses isolated SSD just for the Operation System and mysql
We use SSD's for our operating system and mysql and normal hard drives for the rest but we never get that sort of load we rarely go over a load of half of our CPUs.

A load of 1 means that you have a wait of 1CPU cycle, a load of 900 means you have a wait of 900 CPU cycles, there is defenitly something that is queueing up…