Slow FastCGI Apache

[MhNi]

Hi

I am using plesk 12.5 and php support like [ run PHP as fastcgi application]

I have installed xcache for faster speed. and enabled iptables to block more then 5 connections from a single IP to avoid attacks.

But my site, panel and server goes very slow. previousely i was using fpm application, and site was handling 3500 established connections, now there are 600 Establised Connections and system goes very slow.

Here is an output of command,

# netstat -ant | awk '{print $6}' | sort | uniq -c | sort -n

1 established)
1 Foreign
17 CLOSING
31 LISTEN
39 FIN_WAIT1
93 CLOSE_WAIT
125 LAST_ACK
224 FIN_WAIT2
510 SYN_RECV
638 ESTABLISHED
2025 TIME_WAIT

i have mpm module and settings are

<IfModule mpm_prefork_module>
StartServers 5
MinSpareServers 5
MaxSpareServers 10
MaxRequestWorkers 30000
MaxConnectionsPerChild 1000
ThreadsPerChild 2000
ServerLimit 1600
</IfModule>

and sysctl.conf file configurations are

net.ipv4.tcp_max_orphans = 60000
net.ipv4.tcp_max_syn_backlog = 10240
net.ipv4.ip_local_port_range = 6000 60000
net.ipv4.tcp_fin_timeout = 15

net.core.somaxconn = 16024
net.core.optmem_max = 25165824

net.ipv4.tcp_mem = 65536 131072 262144
net.ipv4.udp_mem = 65536 131072 262144

net.ipv4.tcp_rmem = 20480 12582912 25165824
net.ipv4.udp_rmem_min = 16384

net.ipv4.tcp_wmem = 20480 12582912 25165824
net.ipv4.udp_wmem_min = 16384

net.ipv4.tcp_max_tw_buckets = 144000
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1

now last one, is fastcgi conf file, found in /etc/httpd/conf.d/fcgid.conf

FcgidIdleTimeout 20
FcgidProcessLifeTime 30000
FcgidMaxProcesses 200000
FcgidMaxProcessesPerClass 180000
FcgidMinProcessesPerClass 10000
FcgidConnectTimeout 300
FcgidIOTimeout 40
FcgidInitialEnv RAILS_ENV production
FcgidIdleScanInterval 100

my server specs are

DELL PowerEdge T110 E3-1230v2
Intel Xeon E3-1230v2
Memory: 16GB ECC DDR3 RAM
Drive 1: 500GB HDD
50TB Traffic per month
CentOS 7.0 64-bit
100Mbit Premium Network

my wish is to handle atleast 5000 Established connections at a single time.

Regards,

 

[Lev]

Hello,

As I can see solution was provided in the ticket you created with id 2037840, the issue was caused by DDOS attack.

 

[MhNi]

system is now become faster, but after 12 hours, it stopped and did not serve any thing, then i had to re-start , after restarting it works fine for more 12 hours. any suggestion pls....

 

[Lev]

Hello,

We will contact you via the ticket shortly. If you have additional questions regarding initial issue you could just reply in the ticket and we will continue an investigation.