SOLVED Does this Apache status look right?

[rhenderson]

It's been a while since I had to look at the Apache status page, this just looks off to me. Switched to a new server and add Nginx.

Apache Status
Apache server status for xxxxx.xxxx.com
Server Version: Apache/2.4.52 (cPanel) OpenSSL/1.1.1m mod_bwlimited/1.4 mod_cpanel/1.4 Phusion_Passenger/6.0.12Server MPM: preforkServer Built: Mar 2 2022 02:02:47
Current Time: Monday, 07-Mar-2022 16:57:56 CSTRestart Time: Monday, 07-Mar-2022 08:48:55 CSTParent Server Config. Generation: 3Parent Server MPM Generation: 2Server uptime: 8 hours 9 minutesServer load: 0.54 0.34 0.33Total accesses: 17253 - Total Traffic: 84.9 GB - Total Duration: 17859277CPU Usage: u1356.58 s251.16 cu559.65 cs235.99 - 8.19% CPU load.588 requests/sec - 3.0 MB/second - 5.0 MB/request - 1035.14 ms/request1 requests currently being processed, 11 idle workers____.___.._.._..W.__............................................
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process

Srv	PID	Acc	M	CPU	SS	Req	Dur	Conn	Child	Slot	Client	Protocol	VHost	Request
0-2	31943	0/1459/1477	_	213.38	1	653	1598380	0.0	8095.21	8095.62	xxx.xxx.xxx.43	http/1.1	xxxxx.com:81	POST /wp-comments-post.php HTTP/1.1
1-2	31954	0/1465/1485	_	208.70	11	59	1573573	0.0	7506.71	7506.99	xxx.xxx.xxx.43	http/1.1	xxxxxxxx.com:444	GET /picture.php?/1751/category/101 HTTP/1.1
2-2	31967	0/1468/1483	_	184.71	22	133	1444933	0.0	5196.78	5196.96	xxx.xxx.xxx.43	http/1.1	xxxxxx.com:444	GET /picture.php?/2965/category/3 HTTP/1.1
3-2	31973	0/1465/1485	_	211.03	22	1763	1533891	0.0	7427.21	7427.63	xxx.xxx.xxx.43	http/1.1	xxxxxxxxxxxx.com:444	GET /blog/page/5/ HTTP/1.1
4-2	-	0/0/232	.	0.00	15989	5611	189634	0.0	0.00	5.27	::1	http/1.1
5-2	2124	0/1408/1409	_	185.76	35	1818	1446996	0.0	5731.93	5731.93	xxx.xxx.xxx.43	http/1.1	xxxxxxxxxxxx.com:444	GET /blog/ HTTP/1.1
6-2	31975	0/1464/1482	_	201.18	32	1759	1512909	0.0	8287.06	8287.50	xxx.xxx.xxx.43	http/1.1	xxxxxxxxxxxx.com:444	GET /blog/page/2/ HTTP/1.1
7-2	31976	0/1464/1482	_	206.70	35	280	1485307	0.0	8473.81	8474.12	xxx.xxx.xxx.43	http/1.1	xxxxxxxxxx.com:81	GET /index.php?id_token=d2ba1aebb1f7fb6c97e30af6fbd7dae0&id_act

So the xxx.xxx.xxx.43 is an IP on the server and the xxxxxx.com domains are domains on the server, What looks odd to me is that one of the server's IP's is connecting to the sites, is this normal?

 

[rhenderson]

In doing some reading (I am not used to Nginx) I assume Apache is reporting the connections from the local server to Nginx. If that's the case other than something like
netstat -tn 2>/dev/null | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head via SSH is there away to see the ip connections Nginx is serving?

 

[cPRex]

Hey there! You'll want to make sure that mod_remoteip is installed on the server:

Restoring visitors IP with mod_remoteip

Introduction Sometimes you'll have traffic come from another source such as Cloudflare, another proxy source, or a dedicated firewall. Apache offers mod_remoteip which will allow you to restore the...

support.cpanel.net

This is included in our documentation for Nginx here:

NGINX with Reverse Proxy | cPanel & WHM Documentation

This document explains how to install NGINX with Reverse Proxy on a server that runs cPanel & WHM and EasyApache 4.

docs.cpanel.net

Can you try that and see if you get the IP addresses displayed how you expect?

 

[rhenderson]

cPRex that is exactly what I was looking for, the instructions worked perfectly, thanks for sharing, it is very much appreciated.

 

[cPRex]

I'm glad to hear that's working well now!