cpsrvd Failed. Think i no what causes it

[logikstudios]

Hey people. Every now and again i get the cpsrvd failed email. I only get this if i am/users are uploading and using cpanel and whm at the excact same time. Its like if by uploading/using cpanel at the exact same time is overloading it. My specs for my server is Dual 2.8Ghz, 1GIG RAM. 4 x 750GB. They are in 2 pairs of raid

 

[logikstudios]

I have attempted to repeat this happening and it keeps failling when there is alot of activity in cpanel and FTP

Thanks,
Nathaniel

 

[rhysmcmurdo]

This is an interesting theory... I have tried replicating this on our test server, but cannot seem to do it. However, I have noticed that during the times that cpsrvd fails there does appear to be quite a bit of FTP activity (It could be coincidental too). The last couple of times it has failed the FTP activity hasn't been upload traffic though, it has been failed authentication traffic from one of the many millions of script kiddies out there, which throws the load theory out the window.

I have noticed lately that a few of our servers have been subjected to DDOS attacks against port 80. We have implemented scripts that will detect this and block the IP address that is causing this. When we were first seeing this we noticed a lot of httpd restarts, but now none at all. Is it possible that we are experiencing DDOS attacks against Cpanel as well? I have tried checking access_log, but it doesn't log 408's so it is hard to determine if this is happening or not. Does anyone know if cpsrvd has a MaxClient set (Like in apache), or is there no limit to the amount of incoming connections? If there is a limit, can this be increased?

 

[jenlepp]

I've been seeing this on only one server, and just started seeing it in the past 4 days or so. The other three are not having a problem.

I'll have to look and see if I can find what's up.... nice to know I'm not the only one this is happening to.

 

[JVSInternet]

Happening to us too, any ideas?

 

[Freezer]

Having the same issue's

 

[chirpy]

You do need to check /usr/local/cpanel/logs/error_log for errors incase anything is logged there.

One idea might be to increase the amount of memory you're allocating to cPanel in WHM > Tweak Settings > The maximum memory a cPanel process can use before it is killed off > i.e. double it until the problem goes away.

If it doesn't go away, or if it's easily recreated, log it with cPanel.

 

[rhysmcmurdo]

Hi Guys,

After trying a heap of different things, and having logged numerous tickets with Cpanel, we seem to have resolve the issue.

Log into WHM and go to Tweak Settings. Under here, look for "Use native SSL support if possible, negating need for Stunnel". If this is enabled, disable it!

 

[SherKhan]

Hi Guys,

After trying a heap of different things, and having logged numerous tickets with Cpanel, we seem to have resolve the issue.

Log into WHM and go to Tweak Settings. Under here, look for "Use native SSL support if possible, negating need for Stunnel". If this is enabled, disable it!

Thank you, seems it does the job.

 

[ben-work]

I don't see this option in my WHM 10.8.0; is it called something else or maybe just not present in this version? stunnel is running on the box though..

 

[mambovince]

Hi Guys,

After trying a heap of different things, and having logged numerous tickets with Cpanel, we seem to have resolve the issue.

Log into WHM and go to Tweak Settings. Under here, look for "Use native SSL support if possible, negating need for Stunnel". If this is enabled, disable it!

Hi,
Mine is ticked enabled.
Does anyone know if this is still an issue with version 11 stable, and best to deselect?

Many thanks,

- Vince

 

[Todd Mitchell]

It's recommended to use nativessl with cP11 also.

cpsrvd crashing can be caused by a large number of things. If you continue to have this issue, submit a ticket with cPanel support and we will get it resolved for you.

 

[mambovince]

Thanks for confirming Todd.
We have also applied the patch mentioned here:
http://forums.cpanel.net/showthread.php?t=68796&page=2

See how the load goes from now.

Best wishes,

- Vince