Affecting Server
-
cpanel41.onlinemountain.com
-
2018/01/29 12:01
- 2018/02/26 17:57
-
Last Updated 2018/02/01 10:15
Server is currently stable and we are monitoring it. We are going to schedule a migration of all the accounts on this server to new hardware.
Current status for Apache:
Current Time: Thursday, 01-Feb-2018 10:13:43 EST
Restart Time: Tuesday, 30-Jan-2018 22:28:24 EST
Parent Server Config. Generation: 14
Parent Server MPM Generation: 13
Server uptime: 1 day 11 hours 45 minutes 18 seconds
Server load: 9.45 8.73 8.63
Total accesses: 1312316 - Total Traffic: 43.0 GB
CPU Usage: u158.86 s952.23 cu33175.6 cs8048.17 - 32.9% CPU load
10.2 requests/sec - 350.1 kB/second - 34.3 kB/request
28 requests currently being processed, 122 idle workers
We are trying one more build of apache to see if the issue subsides.
---
Apache running but loads are very high. We are still looking at the reason.
---
Getting apache to behave has become more difficult than anticipated, even with Level3 cpanel support involved. We are now making a full backup of this server and may have to restore to different hardware.
We will continue to update this notice.
---
Currently evidence is pointing to a DDOS attack on the sites on this server. We may have to wait until the attack subsides but we are investigating. There are too many IP's involved to block anything significant.
---
We are now making several updates to see if we can absorb some of this traffic while mitigating some of it. Server will require a few restarts.
---
Server has been restarted after a successful kernel update. We are now running a firmware update on some components to see if there is a possible issue with our RAID controller firmware.
---
We will be switching to EA4 vs EA3 and ensuring that CloudLinux is limiting any offending users.
---
Conversion from EA3 to EA4 CloudLinux is now in progress
--
In order to speed up this process we are now blocking port 80 and 443 so that the conversion can complete without being bogged down by apache requests.
---
Starting EA3 to EA4 php.ini conversion in the background (EXPECT HEAVY CPU and I/O LOADS)
---
Conversion complete - we are now building the CloudLinux profile in EA4 - this is the last step.
---
MPM worker needs to be changed to MPM prefork for apache on this server for faster apache processing
---
This server is still under high load and we are investigating the cause.
---
By blocking port 80 and 443, server loads are now normal and we can investigate properly
during this time IMAP/POP and SMTP functions as well as FTP are still avaialbe but websites will not load. Blocking these ports is necessary so that we can actively look at logs without being bogged down by high loads.
---
We have restarted the server - we have also opened a ticket with cpanel for assistance as this seems to be related to the EasyApache process of going from version 3 to 4 and the MPM configuration.
---
In order for cpanel to investiate, we've opened the ports back up but loads have spiked again - please bear with us while we figure out what's going on with Apache.