Memory issue

[JohnCarne]

cpanel stat generation cause thet nginx makes a lot of reload to grab new
file descriptor... no issue on that

Issue is nginx, I show you situation now with 2.58% used for 1 work, which
is same value for others, but gloably, nginx uses now 2.58%, this number is
increasing slowly at the rythm of nginx reloads asked...


[root at web1 ~]# ps alx | grep nginx
5    99  711213  913692  20   0 3917936 3397132 ep_pol S ?          0:22
nginx: worker process
5    99  711224  913692  20   0 3918128 3397300 ep_pol S ?          0:24
nginx: worker process
5    99  711229  913692  20   0 3918392 3397456 ep_pol S ?          0:26
nginx: worker process
5    99  711238  913692  20   0 3918128 3397228 ep_pol S ?          0:20
nginx: worker process
5    99  711245  913692  20   0 3917936 3397144 ep_pol S ?          0:23
nginx: worker process
5    99  711248  913692  20   0 3918096 3397296 ep_pol S ?          0:18
nginx: worker process
5    99  711252  913692  20   0 3918392 3397392 ep_pol S ?          0:21
nginx: worker process
5    99  711255  913692  20   0 3918128 3397132 -   R    ?          0:19
nginx: worker process
5    99  711257  913692  20   0 3917580 3394632 ep_pol S ?          0:00
nginx: cache manager process
0     0  767011  766950  20   0 112652   956 pipe_w S+   pts/2      0:00
grep --color=auto nginx
5     0  913692       1  20   0 3917576 3396176 sigsus Ss ?        74:26
nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf


Output of nginx -T is taking 100's of pages, i can't pu it here...

[root at web1 ~]# nginx -V
nginx version: nginx/1.11.13
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC)
built with LibreSSL 2.5.2
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx
--modules-path=/etc/nginx/modules --with-pcre=./pcre-8.40 --with-pcre-jit
--with-zlib=./zlib-1.2.11 --with-openssl=./libressl-2.5.2
--conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error_log
--http-log-path=/var/log/nginx/access_log --pid-path=/var/run/nginx.pid
--lock-path=/var/run/nginx.lock
--http-client-body-temp-path=/var/cache/nginx/client_temp
--http-proxy-temp-path=/var/cache/nginx/proxy_temp
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nobody
--group=nobody --with-http_ssl_module --with-http_realip_module
--with-http_addition_module --with-http_sub_module --with-http_dav_module
--with-http_flv_module --with-http_mp4_module --with-http_gunzip_module
--with-http_gzip_static_module --with-http_random_index_module
--with-http_secure_link_module --with-http_stub_status_module
--with-http_auth_request_module --add-dynamic-module=naxsi-http2/naxsi_src
--with-file-aio --with-threads --with-stream --with-stream_ssl_module
--with-http_slice_module --with-compat --with-http_v2_module
--with-http_geoip_module=dynamic
--add-dynamic-module=ngx_pagespeed-release-1.11.33.4-beta
--add-dynamic-module=/usr/local/rvm/gems/ruby-2.3.1/gems/passenger-5.1.2/src/nginx_module
--add-dynamic-module=ngx_brotli --add-dynamic-module=echo-nginx-module-0.60
--add-dynamic-module=headers-more-nginx-module-0.32
--add-dynamic-module=ngx_http_redis-0.3.8
--add-dynamic-module=redis2-nginx-module
--add-dynamic-module=srcache-nginx-module-0.31
--add-dynamic-module=ngx_devel_kit-0.3.0
--add-dynamic-module=set-misc-nginx-module-0.31
--add-dynamic-module=ModSecurity-nginx --with-cc-opt='-O2 -g -pipe -Wall
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
--param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic'
--with-ld-opt=-Wl,-E
[root at web1 ~]#


Anoop is dev of Xtendweb stack using nginx core, he is investigating, and it
seems his solution if to use a pre-approved nginx core :
https://openresty.org/en/
and that it could solve many issues with 3rd party modules which we need to
use absolutely...

Indeed, we are all tired to do 3 upgrades /month

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273274,273456#msg-273456