Webserver going down 1-2 times everyday

[Saif.H]

Hi,


I have been experiencing some weird issues with my webserver for last 15 days. I was using Nginx+Apache and was seeing all the websites going down 1-2 times everyday at a random interval. I could bring the websites back online everytime by restarting nginx though nginx was at active/running state. Later I rebuild the webserver with openlitespeed but still experiencing the same, sudden unresponsiveness of all websites which can be fixed by restarting openlitespeed.


I couldn't find anything on the logs except the following error message -

Hostname [*] on listener [x.x.x.x:443] is mapped to virtual host [x.x.x.x], can't map to virtual host [hostname]!

Since the issue is persistent with both nginx_apache and openlitespeed I guess it's not related to the webserver, it could be something else. So I tried rebuilding everything through ./build all but it didn't fix the issue. Here's my config file.

#PHP Settings
php1_release=7.4
php1_mode=lsphp
php2_release=7.3
php2_mode=lsphp
php3_release=7.2
php3_mode=lsphp
php4_release=8.0
php4_mode=lsphp
secure_php=yes
php_ini=no
php_timezone=Asia/Brunei
php_ini_type=production
x_mail_header=yes


#MySQL Settings
mysql=5.7
mariadb=10.4
mysql_inst=mysql
mysql_backup=yes
mysql_backup_gzip=no
mysql_backup_dir=/usr/local/directadmin/custombuild/mysql_backups
mysql_force_compile=no


#WEB Server Settings
unit=no
webserver=openlitespeed
http_methods=ALL
litespeed_serialno=trial
modsecurity=yes
modsecurity_ruleset=comodo
apache_ver=2.4
apache_mpm=auto
mod_ruid2=no
userdir_access=no
harden_symlinks_patch=yes
use_hostname_for_alias=no
redirect_host=[URL='http://my.host.name']my.host.name[/URL]
redirect_host_https=no


#WEB Applications Settings
phpmyadmin=yes
phpmyadmin_public=yes
phpmyadmin_ver=5
squirrelmail=no
roundcube=yes
webapps_inbox_prefix=no


#ClamAV-related Settings
clamav=yes
clamav_exim=yes
modsecurity_uploadscan=yes
proftpd_uploadscan=yes
pureftpd_uploadscan=yes
suhosin_php_uploadscan=yes


#Mail Settings
exim=yes
eximconf=yes
eximconf_release=4.5
blockcracking=no
easy_spam_fighter=no
spamd=spamassassin
sa_update=daily
dovecot=yes
dovecot_conf=yes
mail_compress=no
pigeonhole=yes


#FTP Settings
ftpd=pureftpd


#Statistics Settings
awstats=no
webalizer=yes


#PHP Extension Settings
#CustomBuild Settings
custombuild=2.0
custombuild_plugin=yes
autover=no
bold=yes
clean=yes
cleanapache=yes
clean_old_tarballs=yes
clean_old_webapps=yes
downloadserver=[URL='http://files-de.directadmin.com']files-de.directadmin.com[/URL]
unofficial_mirrors=no


#Cronjob Settings
cron=yes
cron_frequency=daily
email=[EMAIL][email protected][/EMAIL]
notifications=no
da_autoupdate=yes
updates=yes
webapps_updates=yes


#CloudLinux Settings
cloudlinux=no
cloudlinux_beta=no
cagefs=no


#Advanced Settings
curl=no
ssl_configuration=intermediate


#PHP extensions can be found in php_extensions.conf
redis=yes
csf=no

Installed softwares and their versions.

atest version of DirectAdmin: 1.641 build d1f1ed9f3fda0faa809e53b522e130d5083ccd39
Installed version of DirectAdmin: 1.641 build d1f1ed9f3fda0faa809e53b522e130d5083ccd39

Latest version of LetsEncrypt: 2.0.30
Installed version of LetsEncrypt: 2.0.30

Latest version of Bubblewrap: 0.6.2
Installed version of Bubblewrap: 0.6.2

Latest version of Jailshell: 0.6
Installed version of Jailshell: 0.6

Latest version of CustomBuild plugin: 1.0.37
Installed version of CustomBuild plugin: 1.0.37

Latest version of OpenLiteSpeed: 1.7.16
Installed version of OpenLiteSpeed: 1.7.16

Latest version of libmaxminddb: 1.6.0
Installed version of libmaxminddb: 1.6.0

Latest version of Comodo ModSecurity Rule Set: 1.233
Installed version of Comodo ModSecurity Rule Set: 1.233

Latest version of Pure-FTPD: 1.0.49
Installed version of Pure-FTPd: 1.0.49

Latest version of Redis: 7.0.0
Installed version of Redis: 7.0.0

Latest version of dovecot: 2.3.19.1
Installed version of dovecot: 2.3.19.1

Latest version of dovecot.conf: 0.4
Installed version of dovecot.conf: 0.4

Latest version of Exim: 4.95
Installed version of Exim: 4.95

Latest version of lego: 953d5c85145b6a2b9a52f2d919faf23e04a359b3
Installed version of lego: 953d5c85145b6a2b9a52f2d919faf23e04a359b3

Latest version of lua: 5.3.5
Installed version of lua: 5.3.5

Latest version of msmtp: 1.8.19
Installed version of msmtp: 1.8.19

Latest version of exim.conf: 4.5.37
Installed version of exim.conf: 4.5.37

Latest version of SpamAssassin: 3.4.6
Installed version of SpamAssassin: 3.4.6

Latest version of ClamAV: 0.104.3
Installed version of ClamAV: 0.104.3

Latest version of MySQL: 5.7.37
Installed version of MySQL: 5.7.37

Latest version of PHP 7.2: 7.2.34
Installed version of PHP 7.2: 7.2.34

Latest version of PHP 7.3: 7.3.33
Installed version of PHP 7.3: 7.3.33

Latest version of PHP 7.4: 7.4.30
Installed version of PHP 7.4: 7.4.30

Latest version of PHP 8.0: 8.0.20
Installed version of PHP 8.0: 8.0.20

Latest version of RoundCube: 1.5.2
Installed version of RoundCube: 1.5.2

Latest version of phpMyAdmin: 5.2.0-all-languages
Installed version of phpMyAdmin: 5.2.0-all-languages

Latest version of ionCube: 11.0.1
Installed version of ionCube: 11.0.1

I'm thinking of doing ./build all d tonight and see if this fix the issue. Is there any difference between ./build all and ./build all d or what does ./build all d do? It would be highly appreciated if someone here can come up with any suggestion that can fix the issue.

Thanks.

 

[Zhenyapan]

what your monitoring tool shows? packet loss? disk io? open_files limit? RAM issue? it's dedicated of VPS?
also what you see in system logs? when it stuck what ports opened an who uses it?

 

[Saif.H]

what your monitoring tool shows? packet loss? disk io? open_files limit? RAM issue? it's dedicated of VPS?
also what you see in system logs? when it stuck what ports opened an who uses it?

System log didn't show any error related to this. Everything was fine except the server load. Litespeed was eating up the CPU during the time of incident as the requests weren't completing. However build all d fixed the issue for me. I don't know what was the reason but something wasn't right for sure and a rebuild fixed this.

Thanks.

 

[Saif.H]

Hi,

After running fine for almost a week the sudden website not responding issue is back again. As mentioned on the first post during the incident lsws, nginx (when i used) status shows that they are active and running and without any error in the logs. But the websites don't come back online until I restart the webserver. Everything was fine for more than a year. I'm clueless this time. Can anyone please suggest where I can look at or is there anyone who fixed similar issues?

Thanks.