APACHE 2.4 + php-fpm not closing old thread and 100% cPU usage

[Mangas23]

Not working, sorry same issue directly 100% on 1core when go on site (all) and after some sec all core

 

[Mangas23]

Can i try another version of modsecurity with custombuild 2.0 ? in 2.9 staff resolve problem of cpu usage with nginx so perhaps that resolve it for me:
https://raw.githubusercontent.com/SpiderLabs/ModSecurity/master/CHANGES
and issue:
https://github.com/SpiderLabs/ModSecurity/issues/793

or try whith 2.7

 

[Mangas23]

Hello,
I try with 2.9 rc2 and 2.7.7 same problem, without modsecurity_uploadscan or with it, same problem

I not make special apache conf so i not understand.
so put it off

 

[Mangas23]

Problem resolved by changing httpd-modsecurity.conf

remove all inside <ifmodule> and replace by this:

SecRuleEngine On
SecServerSignature "StBarthFWI"
SecRequestBodyAccess On
SecResponseBodyAccess Off
SecRequestBodyLimit 131072
SecRequestBodyInMemoryLimit 131072
SecResponseBodyLimit 524288
SecDataDir "/var/tmp/"
SecAuditEngine RelevantOnly
SecAuditLogRelevantStatus ^5
SecAuditLogParts ABIFHZ
SecAuditLogType Serial
SecAuditLog /var/log/httpd/modsec-audit.log

SecDebugLog /var/log/httpd/modsec-debug.log
SecDebugLogLevel 0

If someone can explain me why, thats perfect

 

[Mangas23]

HOURRA !!!!! Finally i find problem.
I don't know why but ip.dir and ip.pag are corrupt in /tmp and take lot Gb

I just add this in default httpd-modsecurity.conf:
SecCollectionTimeout 600 (perhaps can be gretter but not testing)

And delete corrupt files, and now all work perfectly.

For all for your help.