APACHE caindo nos horários de pico

MrEturin
(usa Ubuntu)

Enviado em 01/10/2019 - 23:08h

Boa noite
Estou tendo alguns problemas com o apache há alguns dias.
Quando o tráfego aumenta, ele meio que para de responder. Eu verifiquei e encontrem alguns logs que eu não compreendo.

::1 - - [01/Oct/2019:21:53:42 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.93.170 - - [01/Oct/2019:21:53:42 +0000] "-" 408 -

::1 - - [01/Oct/2019:21:53:43 +0000] "OPTIONS * HTTP/1.0" 200 -

::1 - - [01/Oct/2019:21:53:44 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.38.110 - - [01/Oct/2019:21:53:44 +0000] "-" 408 -

::1 - - [01/Oct/2019:21:53:45 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.93.170 - - [01/Oct/2019:21:53:45 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:53:50 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:10 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:13 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:16 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:21 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:22 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:22 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:51:27 +0000] "GET /ajax_get_pedidos_ifood/?random=60921 HTTP/1.1" 103 32724

172.31.93.170 - - [01/Oct/2019:21:54:32 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:32 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:33 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:45 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:45 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:45 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:45 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:50 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:50 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:50 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:51 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:54:51 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:51 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:51 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:52 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:52 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:53 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:53 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:54:53 +0000] "-" 408 -

::1 - - [01/Oct/2019:21:54:53 +0000] "OPTIONS * HTTP/1.0" 200 -

::1 - - [01/Oct/2019:21:54:54 +0000] "OPTIONS * HTTP/1.0" 200 -

::1 - - [01/Oct/2019:21:54:55 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.38.110 - - [01/Oct/2019:21:55:01 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:51:28 +0000] "GET /ajax_get_pedidos_ifood/?random=8781 HTTP/1.1" 103 24548

172.31.93.170 - - [01/Oct/2019:21:55:26 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:55:32 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:51:29 +0000] "GET /wbl_busca_clientes/ HTTP/1.1" 200 5650

172.31.93.170 - - [01/Oct/2019:21:51:33 +0000] "POST /wct_login/index.php HTTP/1.1" 200 266

172.31.93.170 - - [01/Oct/2019:21:51:33 +0000] "GET / HTTP/1.1" 302 -

172.31.38.110 - - [01/Oct/2019:21:55:39 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:39 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:55:39 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:40 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:55:44 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:55:44 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:45 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:48 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:55:50 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:55:51 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:55:52 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:18 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:18 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:19 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:21 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:21 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:22 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:25 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:26 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:32 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:33 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:39 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:39 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:39 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:39 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:45 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:49 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:49 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:50 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:51 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:51 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:51 +0000] "-" 408 -

::1 - - [01/Oct/2019:21:56:51 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.93.170 - - [01/Oct/2019:21:56:52 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:56:52 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:52 +0000] "-" 408 -

::1 - - [01/Oct/2019:21:56:52 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.93.170 - - [01/Oct/2019:21:56:53 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:53 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:56:53 +0000] "-" 408 -

::1 - - [01/Oct/2019:21:56:53 +0000] "OPTIONS * HTTP/1.0" 200 -

::1 - - [01/Oct/2019:21:56:54 +0000] "OPTIONS * HTTP/1.0" 200 -

172.31.93.170 - - [01/Oct/2019:21:57:21 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:27 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:29 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:38 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:39 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:43 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:46 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:49 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:51 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:53 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:54 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:55 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:55 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:57:56 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:56 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:57:56 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:58:21 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:23 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:58:25 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:38 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:39 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:58:43 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:46 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:58:51 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:58:53 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:58:54 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:58:55 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:59:54 +0000] "-" 408 -

172.31.93.170 - - [01/Oct/2019:21:59:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:59:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:59:55 +0000] "-" 408 -

172.31.38.110 - - [01/Oct/2019:21:51:34 +0000] "GET /wbl_busca_clientes/ HTTP/1.1" 500 549

172.31.38.110 - - [01/Oct/2019:21:51:34 +0000] "GET /wbl_busca_clientes/ HTTP/1.1" 500 549

172.31.93.170 - - [01/Oct/2019:21:51:34 +0000] "GET /wbl_busca_clientes/ HTTP/1.1" 500 549

172.31.93.170 - - [01/Oct/2019:21:51:35 +0000] "GET /wbl_busca_clientes/ HTTP/1.1" 500 549

 

Da pra ver que o sistema começa a só responder 500 depois desses 408. Eu não sei interpretar exatamente o que isso significa.
Alguém pode me dar uma força?

Meu servidor é um ubuntu server com o apache hospedado na AWS. A máquina é bem pequena, na verdade. Ela tem 2 vCPU e 2 de RAM. Mas só é responsável pelo PHP. Apenas nesses casos chega a 15/20% de utilização da CPU.

Então eu gostaria de saber se o problema pode ser a capacidade do meu servidor, ou algum tipo de ataque que me envia essas requisições(
172.31.38.110 - - [01/Oct/2019:21:58:55 +0000] "-" 408 -)

Agradeço desde já.

Borg_Atomic
(usa KDE Neon)

Enviado em 02/10/2019 - 00:48h

Não sei, 408 significa request timeout
Talvez seja algum cliente que escolheu e não comprou até o sistema deslogar, é o que diz aqui: https://stackoverflow.com/questions/15090897/understanding-408-request-timeout-on-apache-with-php

MrEturin
(usa Ubuntu)

Enviado em 02/10/2019 - 12:44h

Então, eu tentei analisar melhor o error_log do apache e encontrei a seguinte linha com o horário bem próximo.
[mpm_prefork:error] [pid 941] AH00161: server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting

Então acho que consigo resolver aumentando a capacidade dessa variável.
Vou tentar aqui e posto o resultado.

Valeu!