mmattax's questions

I have nginx proxying to php-fpm with the following config:

location / {
  try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
  fastcgi_pass   127.0.0.1:9000;
  fastcgi_index  index.php;
  fastcgi_param  SCRIPT_FILENAME /vol/app/www/$fastcgi_script_name;
  include        fastcgi_params;
}

Everything is working great until a DELETE request comes in like:

DELETE /?file&path=foo

When this happens nginx returns a 405 (method not allowed) and doesn't appear to proxy the request to php-fpm.

Is there a way to bypass the try_filesdirective when it's a DELETE request and just proxy?

I have nginx proxying to php-fpm with the following config:

location / {
  try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
  fastcgi_pass   127.0.0.1:9000;
  fastcgi_index  index.php;
  fastcgi_param  SCRIPT_FILENAME /vol/app/www/$fastcgi_script_name;
  include        fastcgi_params;
}

```

Everything is working great until a DELETE request comes in like:

DELETE /?file&path=foo

When this happens nginx returns a 405 (method not allowed) and doesn't appear to proxy the request to php-fpm. What's the best way to get DELETE/PUT requests to proxy? Is there way to bypass try_files for this type of request?

When hitting this URL, I see nothing in the error.log but access.log shows:

68.50.105.169 - - [20/Mar/2016:17:48:57 +0000] "DELETE /?file=client_img1.png&fileupload=e35485990e HTTP/1.1" 405 574 "http://ec2-foo.compute.amazonaws.com/jobs/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" "-"

I've confirmed that I'm not hitting the proxy. My assumption is that nginx is blocking DELETE on the first "try" of try_files

I have a server running Nginx that is currently proxying all PHP script to Apache with the following location directive:

location ~ \.php$ {
    proxy_pass http://@apache;
}

I'd like to introduce a new location directive like:

location ~* ^/blog/(.*\.php)$ {
    alias /opt/blog/public;
    fastcgi_pass  @phpfpm;
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_script_name;
    include fastcgi_params;
}

But when I access http://example.com/blog/test.php I'm hitting Apache and not php-fpm. How can I make the new location directive take precedence over the Apache location?

I have a SaaS project that needs to support custom SSL domains. I've looked into SNI which looks perfect. If I decide to (or need to) support Windows XP. What other techniques can I use?

I know that I can create virtual IP addresses but don't think this will scale well with our current hosting provider (they'll charge us for each IP, and they have to do work for our firewall and load balancers).

Are there any other common techniques? I've looked into reverse proxies (or maybe something like CloudFlare), but haven't seen anything definitive.

I'm using nginx that proxies to Apache2 for PHP execution.

We have a PHP application that has 3 web servers (running Nginx and Apache). The web server's directory root are symlinked directories that point to an NFS mount. For example:

web01 has an NFS mount at /data/webapp, which is symlinked to /home/webapp. Apache serves content from /home/webapp/www.

We also use ACP for our PHP opcode cache. When we deploy code, we SCP an archive file to the NFS server and extract it.

Since upgrading RedHat 6, when we deploy our code the webserver execute "stale" PHP files until touch is run on the PHP files. We thought that APC might be causing a problem, but the issue exists, even after clearing the opcode cache.

Any ideas on how to diagnose why the stale PHP code is being executed?

So I have a strange question, but I'm working on a script to deploy a PHP codebase and want to see if something like this is possible:

I have a directory that Apache uses as a DocumentRoot:

/home/www/

We have a PHP app that must add several files and directories to this directory.

We are currently doing this by SCP'ing a tarfile and extracting it in /home/www. I'm looking to do this in a better way because when we are extracting the files, our PHP app gets some read permissions errors. I'd like to update these file atomically inside /home/www (and preferably "at once")

Is there a way to do this without having to make a symlink to every file/directory that I'm extracting into the web directory?

I'm a nginx noob and am looking for some help (my nginx config is below). I'm attempting to put nginx in front of a PHP application that currently uses Apache.

my "/" location is working properly. Nginx is serving the static files and proxying to apache for the dynamic content.

I'm now trying to make "UserDir" functionality work properly. I need http://example.com/~mmattax/ to use /home/mmattax/public_html as the document root and proxy to apache for the dynamic content. My attempt below seems to proxy everything to apache; nginx does not seems to be using the correct document root.

I'm also looking for any tips on the config below. Thanks.

location ~ ^/~(.+?)(/.*)?$ {
    root /home/$1/public_html;
    index  index.php;
    autoindex on;
    try_files $uri $uri/ @proxy;
}

location / {
    root  /home/myapp/www;
    index index.php;
    try_files $uri $uri/ @proxy;
}

location @proxy {
    proxy_pass http://127.0.0.1:8080;
    proxy_redirect off;
}

location ~ \.php$ {
    proxy_pass      http://127.0.0.1:8080;
    proxy_redirect  off;
}

I am building a RESTFUL API and need to get Apache to accept PUT requests. Whenever I put to a URL, I am getting a 403 Forbidden error.

curl -X PUT api.example.com/api/foo

I have tried to add the following to my Virtual Directory (To no avail):

<Limit GET POST PUT DELETE HEAD OPTIONS>
    Order allow,deny
    Allow from all
</Limit>
<LimitExcept GET POST PUT DELETE HEAD OPTIONS>
    Order deny,allow
    Deny from all
</LimitExcept>

What other config settings might be causing this?

EDIT

I am re-writing my URL's, all get re-written to index.php as follows:

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !\.
RewriteRule ^(.*)$ /api/index.php/$1 [L,QSA]

Our app sends out many types of email notifications. On some occasions, we see that the email addresses are getting our domain appended to them.

e.g. [email protected] turns into [email protected]

What is causing this?

The App is running on a LAMP stack. We're using Sendmail / PEAR's Mail module.

I have MySQL replication set up in production as follows:

DB1 -> DB2
DB1 -> BAK

Where DB2 and BAK are slaves to DB1. All 3 servers are in sync (0 seconds behind the master) and have 30+ GB of data.

I'd like to put the servers in a new master-slave configuration as follows:

DB1 -> DB2 -> BAK

What is the best way to change the master host on BAK?

Is there a way to avoid having to stop the slave thread on DB2 and getting a mysqldump for BAK (a 5-6 hour processes) ?

I am in the process of migrating 2 DB servers (Master & Slave) to two new DB Servers (Master and Slave)

DB1 - Master (production)

DB2 - Slave (production)

DB3 - New Master

DB4 - New Slave

Currently I have the replication set up as:

DB1 -> DB2
DB3 -> DB4

To get the production data replicated to the new servers, I'd like to get it "daisy chained" so that it looks like this:

DB1 -> DB2 -> DB3 -> DB4

Is this possible? When I run show master status; on DB2 (the production slave) the binlog possition never seems to change:

+------------------+----------+--------------+------------------+
| File             | Position | Binlog_Do_DB | Binlog_Ignore_DB |
+------------------+----------+--------------+------------------+
| mysql-bin.000020 |       98 |              |                  | 
+------------------+----------+--------------+------------------+

I'm a bit confused as to why the binlog position is not changing on DB2, Ideally it will be the master to DB3.

Possible Duplicate:
Server Fault Wiki: How does Subnetting Work?

I'm setting up rsync and I see this in the config file:

hosts allow = 127.0.0.1 192.168.1.1/24

Does this indicate that all hosts on the local (192.168.1.*) can use rsync? It's been awhile since my networking class; I just want to understand...

I'm setting up 2 new database servers that will be replacing a current master-slave setup. All boxes are running / will be running MySQL on RHEL.

Our current naming conventions:

db1 - master database

db2 - slave (using MySQL replication)

db01 - new master

db02 - new slave

We need to get db01 to be the new master with db02 as the new slave. What is the best way to migrate db1 and db2 to db01 and db02?

db1 and db2 are running in a production setting and we need to minimize all downtime; db1 has roughly 30GB of data in the database.

Any suggestions or tips on how to migrate to our new servers would be much appreciated.

I keep seeing this "..reading.." process in my Apache Server Status, does anyone know what this is from?

It seems when the server performance is degrading, I see a few of these, I would love to know what they mean and how (if possible) to prevent it.

The servers (3 web servers) are running RHEL and are hosting a PHP/MySQL application.

I have MySQL running on a 32-bit RHEL box. The server itself has 4GB total memory with 2GB allocated to MySQL.

I would like to know the max amount of memory I can put in the box and how much of that I can allocate to MySQL.

I have heard both 2GB and 4GB as the per-process-limit on a 32-bit OS...

Ultimately I'd like to know if I can increase the memory for MySQL without upgrading to a 64-bit OS.

I'm getting this warning from Apache:

The Alias directive in /etc/httpd/conf.d/foo.conf at line 10 will 
probably never match because it overlaps an earlier Alias.

However the Alias overlaps on a completely different virtual host.

Might this be caused because one alias is on a name-based virtual host while the other alias is on an IP-based virtual host?

Everything is working fine, just the warning is a bit annoying...

In my httpd.conf:

If I have my virtual host configured as:

NameVirtualHost *:80

<VirtualHost *:80>
    ServerName foo.com
    ServerAlias www.foo.com
    Include conf.d/foo.conf
</VirtualHost>

<VirtualHost *:80>
    ServerName bar.com
    ServerAlias www.bar.com
    Include conf.d/bar.conf
</VirtualHost>

Can I get by with a single domain SSL certificate or must I purchase a wildcard SSL certificate to handle the www subdomain?

I am now trying to configure the ssl.conf file, can I use name-based vhosts in my ssl.conf file like this:

NameVirtualHost *:443

<VirtualHost *:443>
    ServerName foo.com
    ServerAlias www.foo.com
    ...
    Include conf.d/foo.conf
</VirtualHost>

<VirtualHost *:443>
    ServerName bar.com
    ServerAlias www.bar.com
    ...
    Include conf.d/bar.conf
</VirtualHost>

or do I need IP based vhosts? If this is possible, what kind of cert would I need in order to do this?

I'm getting this in error_log when I start Apache:

[Tue Mar 09 14:57:02 2010] [notice] mod_python: Creating 4 session mutexes based on 300 max processes and 0 max threads.
[Tue Mar 09 14:57:02 2010] [warn] RSA server certificate CommonName (CN) `*.foo.com' does NOT match server name!?
[Tue Mar 09 14:57:02 2010] [warn] RSA server certificate CommonName (CN) `www.bar.com' does NOT match server name!?
[Tue Mar 09 14:57:02 2010] [notice] Apache configured -- resuming normal operations

Child processes then seem to seg fault:

[Tue Mar 09 14:57:32 2010] [notice] child pid 3425 exit signal Segmentation fault (11)
[Tue Mar 09 14:57:35 2010] [notice] child pid 3433 exit signal Segmentation fault (11)
[Tue Mar 09 14:57:36 2010] [notice] child pid 3437 exit signal Segmentation fault (11)

Server is RHEL, what's going on and what do I need to do to fix this?

EDIT As requested, the dump from httpd -M:

Loaded Modules:
 core_module (static)
 mpm_prefork_module (static)
 http_module (static)
 so_module (static)
 auth_basic_module (shared)
 auth_digest_module (shared)
 authn_file_module (shared)
 authn_alias_module (shared)
 authn_anon_module (shared)
 authn_default_module (shared)
 authz_host_module (shared)
 authz_user_module (shared)
 authz_owner_module (shared)
 authz_groupfile_module (shared)
 authz_default_module (shared)
 include_module (shared)
 log_config_module (shared)
 logio_module (shared)
 env_module (shared)
 ext_filter_module (shared)
 mime_magic_module (shared)
 expires_module (shared)
 deflate_module (shared)
 headers_module (shared)
 usertrack_module (shared)
 setenvif_module (shared)
 mime_module (shared)
 status_module (shared)
 autoindex_module (shared)
 info_module (shared)
 vhost_alias_module (shared)
 negotiation_module (shared)
 dir_module (shared)
 actions_module (shared)
 speling_module (shared)
 userdir_module (shared)
 alias_module (shared)
 rewrite_module (shared)
 cache_module (shared)
 disk_cache_module (shared)
 file_cache_module (shared)
 mem_cache_module (shared)
 cgi_module (shared)
 perl_module (shared)
 php5_module (shared)
 python_module (shared)
 ssl_module (shared)
Syntax OK

This question can probably be asked on StackOverflow as well, but I'll try here first...

Performance of INSERT and UPDATE statements in our database seems to be degrading and causing poor performance in our web app.

Tables are InnoDB and the application uses transactions. Are there any easy tweaks that I can make to speed things up?

I think we might be seeing some locking issues, how can I find out?

I have 2 LAMP web servers that are routinely running out of swap space (see attached top screenshot).

Apache's settings are as follows:

<IfModule prefork.c>
StartServers       64
MinSpareServers    64
MaxSpareServers    128
ServerLimit        256
MaxClients         256
MaxRequestsPerChild  4096
</IfModule>

The resource limits on PHP are:

max_execution_time = 30
max_input_time = 30
memory_limit = 80M

I'm new to server admin stuff like this (I'm a developer); What can I adjust so that I can prevent swapping?

Here is a screenshot of top on one of the servers when crashing: