Page 1 of 2 12 LastLast
Results 1 to 25 of 40
  1. #1

    Question Why my server - load average is high?

    Please help me.

    Why my server - load average is high?

    below is output of top:

    top - 13:52:53 up 29 days, 5:39, 3 users, load average: 72.05, 68.90, 67.89
    Tasks: 857 total, 2 running, 833 sleeping, 20 stopped, 2 zombie
    Cpu(s): 4.2%us, 2.5%sy, 0.0%ni, 26.4%id, 63.6%wa, 0.5%hi, 2.8%si, 0.0%st
    Mem: 8181908k total, 8135188k used, 46720k free, 35104k buffers
    Swap: 4192956k total, 26624k used, 4166332k free, 7321172k cached

    PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
    337 mysql 15 0 327m 56m 4252 S 4.0 0.7 74:18.53 mysqld
    24732 root 15 0 13380 1760 808 R 1.0 0.0 0:10.44 top
    313 root 10 -5 0 0 0 S 0.3 0.0 90:25.28 kswapd0
    22040 nobody 15 0 63148 3272 1572 S 0.3 0.0 0:00.30 httpd
    22136 nobody 15 0 63148 3260 1572 S 0.3 0.0 0:00.21 httpd
    22291 nobody 15 0 63148 3280 1580 S 0.3 0.0 0:00.18 httpd
    22327 nobody 16 0 63148 3280 1580 D 0.3 0.0 0:00.20 httpd
    22406 nobody 15 0 63148 3276 1580 S 0.3 0.0 0:00.18 httpd
    22522 nobody 16 0 63148 3268 1580 S 0.3 0.0 0:00.10 httpd
    23553 nobody 16 0 63148 3244 1556 S 0.3 0.0 0:00.09 httpd
    23556 nobody 15 0 63148 3256 1568 S 0.3 0.0 0:00.09 httpd
    26260 nobody 16 0 63148 3296 1608 S 0.3 0.0 0:00.13 httpd
    26618 nobody 16 0 63148 3244 1556 S 0.3 0.0 0:00.13 httpd
    28849 nobody 16 0 63148 3240 1556 S 0.3 0.0 0:00.04 httpd
    28903 nobody 15 0 63148 3208 1532 S 0.3 0.0 0:00.02 httpd
    29533 nobody 15 0 0 0 0 Z 0.3 0.0 0:00.02 httpd <defunct>
    29558 nobody 15 0 63148 3236 1548 S 0.3 0.0 0:00.01 httpd
    29587 nobody 15 0 63148 3216 1536 S 0.3 0.0 0:00.01 httpd
    29592 nobody 15 0 63148 3208 1532 S 0.3 0.0 0:00.02 httpd
    1 root 15 0 10344 576 544 S 0.0 0.0 0:05.36 init
    2 root RT -5 0 0 0 S 0.0 0.0 3:58.90 migration/0
    3 root 34 19 0 0 0 S 0.0 0.0 6:15.52 ksoftirqd/0
    4 root RT -5 0 0 0 S 0.0 0.0 0:00.00 watchdog/0
    5 root RT -5 0 0 0 S 0.0 0.0 0:12.33 migration/1
    6 root 34 19 0 0 0 S 0.0 0.0 0:30.07 ksoftirqd/1
    7 root RT -5 0 0 0 S 0.0 0.0 0:00.00 watchdog/1
    8 root RT -5 0 0 0 S 0.0 0.0 0:02.57 migration/2
    9 root 34 19 0 0 0 S 0.0 0.0 0:02.84 ksoftirqd/2
    10 root RT -5 0 0 0 S 0.0 0.0 0:00.00 watchdog/2
    11 root RT -5 0 0 0 S 0.0 0.0 0:11.61 migration/3
    12 root 34 19 0 0 0 S 0.0 0.0 0:01.12 ksoftirqd/3
    13 root RT -5 0 0 0 S 0.0 0.0 0:00.00 watchdog/3
    14 root 10 -5 0 0 0 S 0.0 0.0 0:00.22 events/0
    15 root 10 -5 0 0 0 S 0.0 0.0 0:00.10 events/1
    16 root 10 -5 0 0 0 S 0.0 0.0 0:00.16 events/2
    17 root 10 -5 0 0 0 S 0.0 0.0 0:00.09 events/3
    18 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 khelper
    87 root 10 -5 0 0 0 S 0.0 0.0 0:00.03 kthread
    94 root 10 -5 0 0 0 S 0.0 0.0 0:00.78 kblockd/0
    95 root 10 -5 0 0 0 S 0.0 0.0 0:00.72 kblockd/1
    96 root 10 -5 0 0 0 S 0.0 0.0 0:24.74 kblockd/2
    97 root 10 -5 0 0 0 S 0.0 0.0 0:01.98 kblockd/3
    98 root 17 -5 0 0 0 S 0.0 0.0 0:00.00 kacpid
    218 root 17 -5 0 0 0 S 0.0 0.0 0:00.00 cqueue/0
    219 root 18 -5 0 0 0 S 0.0 0.0 0:00.00 cqueue/1
    220 root 18 -5 0 0 0 S 0.0 0.0 0:00.00 cqueue/2
    221 root 18 -5 0 0 0 S 0.0 0.0 0:00.00 cqueue/3
    224 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 khubd
    226 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 kseriod
    303 root 25 0 63868 1184 988 S 0.0 0.0 0:00.00 mysqld_safe

  2. #2
    Join Date
    May 2007
    Location
    Canada
    Posts
    183
    Looks like you are waiting an awful lot:

    63.6%wa

    Perhaps some mysql optimization is needed, or, faster drives.
    Quality Hosting - http://www.robohostingsolutions.com
    My Blog - http://solidservers.ca
    Freelance Server Administration (decent rates!) - Chris(at)SolidServers.ca

  3. #3
    You will need to optimize your Apache and MySQL services to decrease I/O usage.
    ---=== RoseHosting.com Admin ===---
    Linux Server Management and Outsourced Web Hosting Support - linuxhostsupport.com
    Managed Linux VPS Hosting - rosehosting.com
    High Quality Linux virtual servers with lots of Guaranteed RAM and SSD space, Impeccable Service.

  4. #4
    An apache restart might solve the problem as number of sleeping process is too high.
    Reduce the Timeout value in the configuration to avoid this.

  5. #5
    It seems to be serious. Try to check more detail process running on the server by using the command given below,
    #ps -auxf
    SUPPORT FACILITY | 24/7 TECH SUPPORT
    SERVER MANAGEMENT | WEB HOSTING SUPPORT | WP EXPERTS

  6. #6
    Join Date
    May 2009
    Location
    SLASH ROOT
    Posts
    867
    Can you check if there is any DDOS attack to your server? Use 'netstat' command to check that.

  7. #7
    You can check which database is causing load using command "mysqladmin -u root -ppassword processlist" or "mysqladmin processlist"
    Last edited by Technical Support; 06-20-2009 at 01:44 PM.

  8. #8
    Join Date
    May 2009
    Location
    SLASH ROOT
    Posts
    867
    netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n|tail -n 25

  9. #9
    Join Date
    Jun 2009
    Posts
    5
    Like suggested earlier try to scan for any kind of attack on the server which is targetted at port 80.

    If you already host a busy website then you may need to tweak your mysql and apache configuration, however that can reduce the server resource usage to a limited extent.

  10. #10
    Join Date
    Mar 2009
    Location
    Chicago, IL
    Posts
    219
    What you're seeing is simply high activity on one of your sites that happens to be MySQL driven. Your MySQL instance is opened up too far (configwise) for the amount of ram that you have and it's pushing your machine into the swapfile after it runs out of real ram.

    So, as was previously mentioned, you should do some digging to figure out which domain in particular is the one getting the traffic. I'd personally suspend it immediatly. If you're using cPanel, you should be able to go into Apache Status and see what domain is getting all of the hits. Otherwise you can use the 'apachectl showstatus' command to display the same output. If it's not enabled already you can modify your httpd.conf file and search for 'server-status' and open that up to 127.0.0.1.

    You should also re-evaluate your mysql and apache configurations as they're setup right now to where they can consume more resources that you have available.

  11. #11
    after run this command it show that

    netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n|tail -n 25

    13 93.1.180.71
    14 125.163.120.119
    14 218.186.8.13
    15 118.68.201.70
    15 124.120.192.112
    15 41.238.34.14
    16 125.212.218.128
    16 212.29.211.18
    16 217.218.234.254
    16 41.226.189.17
    16 58.186.180.182
    16 82.114.118.86
    17 80.200.11.26
    18 123.19.237.156
    18 41.227.236.33
    19 78.177.78.233
    21 122.161.242.7
    27 125.160.116.80
    36 123.19.184.67
    47 41.136.177.164
    57 202.59.80.153
    61 94.123.179.232
    71 220.231.120.251
    87 94.97.111.117
    255 79.27.94.182


    please help about this


    Quote Originally Posted by whrss View Post
    netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n|tail -n 25

  12. #12
    Hello!
    my server configuration is below:

    CPU: 1x Intel Quad Core Xeon L5410 / 12MB
    RAM: 8GB DDR2
    Harddisk: 24 x 1000GB SATA II + 2 x 80GB (OS)
    Hardware RAID: No RAID
    Volume Connectivity: 250 Mbps Unmetered bandwidth
    Uplink Port: 1 x 1000Mbps Full-Duplex
    IP: 8
    OS: CentOS

  13. #13
    Join Date
    Apr 2003
    Posts
    454
    It's quite possible that you may be under a mild DoS attack. For starters, I recommend blocking 79.27.94.182 from accessing your server. Then, take a look at what SA-ChrisM said to do. That should help you get to the bottom of this issue.

  14. #14
    hello

    how can i stop the ddos attack from those ip?

    thanks

    Quote Originally Posted by ReadyRick View Post
    It's quite possible that you may be under a mild DoS attack. For starters, I recommend blocking 79.27.94.182 from accessing your server. Then, take a look at what SA-ChrisM said to do. That should help you get to the bottom of this issue.

  15. #15
    Join Date
    Apr 2003
    Posts
    454
    If you have CSF Firewall installed, run the following command:
    csf -d 79.27.94.182

    If you don't have CSF Firewall installed, you can block the IP using Iptables:

    iptables -I INPUT -s 79.27.94.182 -j DROP

  16. #16
    how can add it automaticly

    iptables -I INPUT -s 79.27.94.182 -j DROP

    thanks

    Quote Originally Posted by ReadyRick View Post
    If you have CSF Firewall installed, run the following command:
    csf -d 79.27.94.182

    If you don't have CSF Firewall installed, you can block the IP using Iptables:

    iptables -I INPUT -s 79.27.94.182 -j DROP

  17. #17
    Login to WHM using your root password. In the left hand menu pane, scroll down to "COnfigServer Security&Firewall". A new page will load. Look for the section that reads "Quick Deny." Enter the first IP that you'd like to block instantly.
    SUPPORT FACILITY | 24/7 TECH SUPPORT
    SERVER MANAGEMENT | WEB HOSTING SUPPORT | WP EXPERTS

  18. #18
    in whm I have no option like this

    Quote Originally Posted by inspiron View Post
    Login to WHM using your root password. In the left hand menu pane, scroll down to "COnfigServer Security&Firewall". A new page will load. Look for the section that reads "Quick Deny." Enter the first IP that you'd like to block instantly.

  19. #19
    Join Date
    Apr 2007
    Location
    Melbourne, Australia
    Posts
    411
    You will need to install it first - http://www.configserver.com/cp/csf.html

    Download, extract, and run the install.cpanel.sh script

  20. #20
    Join Date
    May 2006
    Location
    EU & USA
    Posts
    3,684
    Install CSF and you will have that option or ask someone to help you with it.

  21. #21
    Hello!
    my server configuration is below:

    CPU: 1x Intel Quad Core Xeon L5410 / 12MB
    RAM: 8GB DDR2
    Harddisk: 24 x 1000GB SATA II + 2 x 80GB (OS)
    Hardware RAID: No RAID
    Volume Connectivity: 250 Mbps Unmetered bandwidth
    Uplink Port: 1 x 1000Mbps Full-Duplex
    IP: 8
    OS: CentOS

    please help me about tweak httpd.conf and mysql

  22. #22
    CPU: 1x Intel Quad Core Xeon L5410 / 12MB
    RAM: 8GB DDR2
    Harddisk: 24 x 1000GB SATA II + 2 x 80GB (OS)
    Hardware RAID: No RAID
    Volume Connectivity: 250 Mbps Unmetered bandwidth
    Uplink Port: 1 x 1000Mbps Full-Duplex
    IP: 8
    OS: CentOS

    please help me about tweak httpd.conf and mysql

  23. #23
    Join Date
    May 2009
    Location
    SLASH ROOT
    Posts
    867
    To mitigate the current attack and to avoid such instances in future, I would strongly recommend you to install/configure Apache modules like:

    1) dos_evasive

    2) DOS-Deflate

    3) mod_security

    4) limit_ip_conn

    Also install APF/CSF since DOS-Deflate needs a firewall to block the attacking IPs.

    I would also recommend to harden your kernel parameters (sysctl) to block illegitimate traffic.
    █ WebHostRepo.com
    █ Linux | Windows
    | VPS | Cloud
    █ Outsourced Technical Support since 2009
    █ sales@webhostrepo.com

  24. #24
    Tasks: 1156 total, 1 running, 1154 sleeping, 1 stopped, 0 zombie
    Cpu(s): 3.2%us, 2.1%sy, 0.0%ni, 62.4%id, 27.5%wa, 0.6%hi, 4.3%si, 0.0%st
    Mem: 8181908k total, 8135036k used, 46872k free, 38412k buffers
    Swap: 4192956k total, 26024k used, 4166932k free, 7083320k cached

    how to reduce my sleeping task

  25. #25
    Join Date
    Mar 2009
    Location
    Chicago, IL
    Posts
    219
    sleeping tasks are fine and not an issue at all. The big concern there is that you're into your swap file and essentially out of memory. When a server goes into swap "bad things" happen. Since your memory speeds are effectively reduced to the speed of your hard drive, processes tend to stack up, load average shoots through the roof, etc.

    Right there, your problem is memory usage. If you run 'top -c' and then hit 'SHIFT+M", you'll sort by memory usage and you can see what's eating it all up. Probably Apache would be my guess given the context of this thread.

Page 1 of 2 12 LastLast

Similar Threads

  1. High load average
    By constantine in forum Hosting Security and Technology
    Replies: 2
    Last Post: 05-01-2008, 12:56 PM
  2. High Load Average on the server
    By heropage in forum Dedicated Server
    Replies: 1
    Last Post: 11-06-2007, 10:54 PM
  3. High Load Average
    By mejust in forum Hosting Security and Technology
    Replies: 9
    Last Post: 04-20-2007, 07:37 AM
  4. how high can the load average go before..
    By disgust in forum Dedicated Server
    Replies: 6
    Last Post: 09-14-2004, 01:02 AM
  5. high load average
    By neonlexx in forum Hosting Security and Technology
    Replies: 7
    Last Post: 03-10-2003, 07:20 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •