Excessive Resource Usage

[indieben]

Hello,

I am totally confused. My mail queue was being filled to the brim with excess resource usage messages. I am sorry, in advance, that I am a total newbie to DirectAdmin and relatively inexperienced with running website servers. I hope I pick some brownie points up for not pretending to be something i'm not!

I've managed to create a forwarder for root Email from searching the forums and this is a selection of Emails that I have now received:

------

Subject: lfd on vpssub.domain.com: Excessive resource usage: systemd-network (597 (Parent PID:597))

Time: Wed Apr 3 23:35:49 2024 +0100
Account: systemd-network
Resource: Process Time
Exceeded: 546910 > 1800 (seconds)
Executable: /usr/lib/systemd/systemd-networkd
Command Line: /lib/systemd/systemd-networkd
PID: 597 (Parent PID:597)
Killed: No

----

Subject: lfd on vpssub.domain.com: Excessive resource usage: nydus (1213 (Parent PID:951))

Time: Wed Apr 3 23:35:49 2024 +0100
Account: nydus
Resource: Process Time
Exceeded: 546908 > 1800 (seconds)
Executable: /opt/nydus/bin/nydus-ex-api
Command Line: /opt/nydus/bin/nydus-ex-api
PID: 1213 (Parent PID:951)
Killed: No

--------

Subject: lfd on vpssub.domain.com: Excessive resource usage: systemd-resolve (648 (Parent PID:648))

Time: Wed Apr 3 23:35:49 2024 +0100
Account: systemd-resolve
Resource: Process Time
Exceeded: 546910 > 1800 (seconds)
Executable: /usr/lib/systemd/systemd-resolved
Command Line: /lib/systemd/systemd-resolved
PID: 648 (Parent PID:648)
Killed: No

----

Subject: lfd on vpssub.domain.com: Excessive resource usage: uuidd (379454 (Parent PID:379454))

Time: Wed Apr 3 23:35:49 2024 +0100
Account: uuidd
Resource: Process Time
Exceeded: 449112 > 1800 (seconds)
Executable: /usr/sbin/uuidd
Command Line: /usr/sbin/uuidd --socket-activation
PID: 379454 (Parent PID:379454)
Killed: No

-------

Environment


VPS running Ubuntu 22.04. Operating company complains in their VPS dashboard:

"Server Dashboard Capability Is Limited

This dashboard relies on agent applications running on your server for certain operations to work, called nydus-ex and nydus-ex-api. They work through connections to your server on port 2224. Please ensure your firewall is not blocking this port and that these applications are running." (I notice Nydus in the second Email example above).

I have installed Imunify360 and Softaculous.

VPS resources are well within limits - 2.63% CPU used, 29% RAM, 23% disk space, 0 of my SMTP relays used.

I do get errors when using the DirectAdmin interface in trying to do updates - timesouts from Ubuntu's security repo.

Oddly, in the VPS root login I get the following:

"Strictly confined Kubernetes makes edge and IoT secure. Learn how MicroK8s
just raised the bar for easy, resilient and secure K8s cluster deployment.

https://ubuntu.com/engage/secure-kubernetes-at-the-edge

Expanded Security Maintenance for Applications is not enabled.

5 updates can be applied immediately.
To see these additional updates run: apt list --upgradable

2 additional security updates can be applied with ESM Apps.
Learn more about enabling ESM Apps service at https://ubuntu.com/esm"

.... I haven't got a clue what that means.

Sorry if I have posted lots of irrelevant stuff but I can only hope it would assist.

Thanks

 

[zEitEr]

Hello,

As of the emails from LFD, you might list trusted binaries in /etc/csf/csf.pignore

As of the login screen - it is fine for Ubuntu

As of " timesouts from Ubuntu's security repo.", then firewall might be overtightened, and you might relax it a bit.

Read official docs, or search the forums on how to complete each of the steps.

 

[indieben]

Hi Alex,

Thanks for taking the time to reply.

As of the emails from LFD, you might list trusted binaries in /etc/csf/csf.pignore

What exactly is happening here please? Is it normal that the time is being exceeded or is the firewall effectively stopping them from running properly please?

As of the login screen - it is fine for Ubuntu

What I don't understand is, I pay for a VPS, I would have thought that all of my update costs are provided as part of my VPS subscription - It looks like ESM requires additional payment.

Thanks

 

[zEitEr]

What exactly is happening here please? Is it normal that the time is being exceeded or is the firewall effectively stopping them from running properly please?

Kindly read what is already posted on the forums:

- https://www.google.com/search?q=Excessive+resource+usage+site:forum.directadmin.com

What I don't understand is, I pay for a VPS, I would have thought that all of my update costs are provided as part of my VPS subscription - It looks like ESM requires additional payment.

Kindly check it with your server provider what you are paying for. I'm not aware of it, as well as other members of the forums.

 

[indieben]

Kindly read what is already posted on the forums: https://www.google.com/search?q="Excessive+resource+usage"+site%3Aforum.directadmin.com

In theory. I already have but how am I to know what is out of date information, what is incorrect information and what is still or has always been good though?

Many thanks.

 

[zEitEr]

I really appreciate you are posting on the forums. You are really welcomed here. And I would probably chat with you discussing all the things. Sorry I don't have time to explain my decisions and answers as well as teach anybody basics of a server administrating.

If you really want to learn new things you are advised to read as more as you can. The official docs would be the best place to start from. Here is a link: https://download.configserver.com/csf/readme.txt kindly check and read the section "8. Process Tracking". You might find all the answers there.

Thank you and all the best.

 

[Richard G]

I would have thought that all of my update costs are provided as part of my VPS subscription

Update costs are only provided as part of a VPS subscribtion if you use a managed VPS. On a "normal" VPS it's expected that you yourself do all installation, updates and upgrades. Even for the OS.

 

[indieben]

I don't have time to explain my decisions and answers as well as teach anybody basics of a server administrating.

Alex, you did respond to my post in the first place so a person replying to seek clarification is pretty normal. I find that response really hostile. I appreciate all responses and the time taken to provide them. If you're too busy to ellaborate, can you see how that could cause a problem?

As for your comment inferring that my questions indicates a lack of knowledge about the "basics of server administrating" - with respect, that's plainly wrong. DirectAdmin could, very easily have very precise requirements that I am not aware of - the worst thing that anybody can do is make an assumption that DirectAdmin's system requirements are not worth taking into account. I am taking those into account by enquiring here.

 

[indieben]

Update costs are only provided as part of a VPS subscribtion if you use a managed VPS. On a "normal" VPS it's expected that you yourself do all installation, updates and upgrades. Even for the OS.

Thanks Richard Meh.

 

[Richard G]

with respect, that's plainly wrong.

Well, sorry but I have my doubts about that, as you don't even know the difference between an smtp and smtp relay.
There is totally no shame in that, we all had to begin somewhere at some time.

But @zEitEr 's answer is most certainly not hostile. If you interpreted it that way, then you made a wrong interpretation.
Ofcourse he can see that its causing issues for you if he can't or doesn't have the time to help you further. But in this case nobody here is obligated to do so and we're trying all to help as much as we can.
We all are having businesses and are busy. There is nothing wrong with his answer and I don't really appriciate that you are saying he's giving a hostile response, in spite of the fact that you appreciate his previous responses.

Some things are just to be looked up at the internet or in the docs. It's not up to us to explain everything in detail, sorry.

 

[ericosman]

One of the most important steps in "trying something new" is :

1. Read on the internet about how and what
1b. Does everything look like it's written in a foreign language --> read more, after that it still seems foreign, stop and see if you have other options.
2. What you read looks reasonable, go ahead and try it out
3. Something goes wrong? see for your self how and what, do you see logic etc.
4. Don't panic, a lot of information is already on the internet and see for a way to fix your issue.
5. Are you not sure about how and what? Feel free to ask, but ever expect like people are obligated to answer you.
We are all here to help each other were we can, but we also expect a "server administrator" to have a certain level of administrative skills.

The moment we would have to explain how to login as root / how to make a SSH connection... than i would say it like with monopoly "Go back to start, you will not receive $200".

And please, for your own sake, read the terms and conditions of your hosting provider next time before you order, this way you will not get disappointed.

And after all this comes the next step:

You covered your basics, you understand a big part of how everything works. Now it's time to sell your webhosting services to cliets. Not before, because when shit hits the fan, you are not happy, your clients are not happy and in all panic you hope that somebody here has the magic answer (and we dont always) .


But after al my blabla... welcome to the forum :-D

 

[indieben]

I was going to ignore the politics but I feel forced to reply now.

Firstly, I am not blind to politics, cliques and suchlike that often happen in support environments (and where clique members come together to enforce the clique by refusing to help. That's fine - I like to get that over and done with quickly. I'm not going anywhere and i'm also the wrong person to play this game with as i've seen this over the decades far too often.

The reality has always been that those people that do engage in cliques don't go unnoticed and do tend to build up quite a lot of adversaries. Those adversaries sometimes speak and more often wait in the wings. In the end a second clique is formed and it just ends up with a split community which is not helpful to anybody.

I'm also somebody who provides mentoring to others so I judge by my own mentoring standards. Information should never be used as power and it shouldn't be Lorded over people. My rule is - if somebody isn't understanding something, then work out how to explain it better, if you've actually made a mistake, admit it and never be too proud or arrogant to do so. People end up respecting you more.

Pragmatically, it makes total sense to refer people to other forum content to prevent repetitive long-winded threads. However, the downside is that forums do become out of date and information offered in good faith is not necessarily guaranteed to be the best. The best antidote to that issue is attempting to gather uptodate consensus that is beneficial to everyone.

Kindly read what is already posted on the forums:

- https://www.google.com/search?q=Excessive+resource+usage+site:forum.directadmin.com

For these reasons a slightly modified RTFM response to "RTFF[orum] is unhelpful. As is a condescending comment about how to search Google and making an extremely assumptious personal comment (regarding server administration) is never going to be conducive to positive relations.

Most people are not daft enough to interpret multiple clique members backing each other up as validation of one persons position - particularly when i'm not the first.

I'll anticipate the next traditional response in this situation that has not yet been said but to make it easier for people re-reading:

"You're reply is off topic".

My reply became on topic the moment that I received a condescending and patronising response. I have a right to reply. If anything is off topic, it is the originally condesdending and patronising comment that is and gaslighting goes hand in hand with members of a clique defending themselves.

So, having established the psychology here and the fact that i'm immune to it, whilst feeling that somebody needs to speak up..

But in this case nobody here is obligated to do so and we're trying all to help as much as we can.

For those of you reading this thread, it is abdundently obvious that I have not expected nor demanded help in some self-entitled manner. I did however question what the point was in providing a brief response and not welcoming followup questions. The normal order on static forums is people do indeed reply:

1. If they want to.

2. When they can.

In terms of (1), there was a choice to reply, in terms of (2) a delay would have been completely reasonable rather than actually taking time (apparently already unavailable) to talk about how they don't actually have time. In either the case of (1) or (2) somebody else will naturally reply. From the point of view of those who want to help, it is well known that they will look for topics that have 0 responses in a forum, by making it look as if there was a reply, when there wasn't, it only serves to stop others from responding who indeed do have time.

That said, it was abundently obvious that my comments (not intentionally however) struck a raw note on pointing out the downside of blindly following forum posts whilst Alex is detailed as a "Super Moderator" who will, perhaps along with others, be ultimately responsible for information value on the forum and with the age old issue of ensuring that context continues to live alongside age old posts. Richard: For example, in another post you have pointed towards your own development over the course of time when I referred back to a really helpful reply you provided to somebody else in 2008 (16 years ago) - this is totally natural that you will have developed as it is also totally natural that DirectAdmin will have changed - particularly with the influx of new DirectAdmin customers as the result of the major cPanel price increase(s).

Lastly I will take a moment to recognise the many people on this forum who will side-step cliqueness and also acknowledge that such cliques can form accidentally and inadvertently.

I have now nailed my colours to the mast of the anti-clique clique. I look forward to meeting other members.

 

[Richard G]

For these reasons a slightly modified RTFM response to "RTFF[orum] is unhelpful.

Normally I would agree with you that pointing to Google isnt helpfull. I don't appreciate that on my own forums either.
But for DA that is not the case, there are so many answers which can be found this way, so it is in fact very helpfull to find answers. In my 15 years of business I've found often enough solutions to my questions by exactly doing this. And sometimes I still do in the present day, just like others.
Which makes me ask. Have you even looked/tried?

As for the rest. I won't even go into that. I'm here to have fun and try to help people, not for going into meaningless discussions.
In my 25 years of forum admin, I also have enough experience with forum users and net etiquette and things going on. You as a totally new users have a totally wrong idea about what's going on here and "cliques". Next to that, it's no school here. So it's not up to us to teach or create better answers. But that's your opinion and your entitled to your opinion.
But I won't discuss it any further as it's also way off-topic.

 

[Ohm J]

What I don't understand is, I pay for a VPS, I would have thought that all of my update costs are provided as part of my VPS subscription - It looks like ESM requires additional payment.

Please remember, this forum using for directadmin, and directadmin is not VPS Provider, if you want to complain something, please contact your VPS Provider.

if you bought Direcadmin License ( Retail ) directly ( not service from VPS Provider ) and don't want to learn anything, please create support ticket at https://tickets.directadmin.com/

Since all answer already in this forum, please give time to learning something a bit.

About CSF Firewall, please read simple information here.

CSF | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

 

[BillyS]

In theory. I already have but how am I to know what is out of date information, what is incorrect information and what is still or has always been good though?

People here are very friendly, they really are... and all @zEitEr is suggesting it to search the forums before posting a question that's already been answered. The first result in that Google search is only six months old. DirectAdmin is pretty stable so forum posts that are two or three years old are still worthy answers.

Also keep in mind that English isn't everyone's first language here so sometimes it seems like someone is making a rude statement, but the fact people are taking time to answer your questions or provide advice means they are really trying to help.

As was pointed out earlier, those messages are from LFD, which is part of ConfigServer Security and Firewall. If the process is something you expect to be running, then you add it to the /etc/csf/csf.pignore (Translating, ConfigServer Firewall process ignore). It's a list of processes CSF should ignore if they are running for a long time. As people pointed out, it is all in the readme file. If you go into CSF and edit that file, you'll understand the format and what to do (like restarting LFD).

Welcome to the forum.