Apache2 stops accepting connections when using mod_ssl and having more than 1000 processes running. This is only happening on ubuntu 12.04 and only with mod_ssl enabled.
Steps to reproduce:
- take a clean install of ubuntu 12.04 server 64bit (i use english installer and all standard settings)
- execute following commands as root:
apt-get install apache2-mpm-prefork
- change /etc/apache2/apache2.conf to start at least 1001 processes:
- enable mod_ssl and restart apache:
service apache2 restart
[no further configuration changes requred,
i did not configure any ssl hosts,
only enabled the module]
- verify, that apache is running at least 1001 processes
$ ps ax | grep apache | wc -l
- verify you can connect to localhost:
$ curl http://localhost/
<p>This is the default web page for this server.</p>
<p>The web server software is running but no content has been added, yet.</p>
- start high load:
$ ab -n 5000 -c 1000 http://localhost/
This is ApacheBench, Version 2.3 <$Revision: 655654 $>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/
Benchmarking localhost (be patient)
Completed 500 requests
apr_poll: The timeout specified has expired (70007)
Total of 998 requests completed
- ready, now apache is not working properly:
$ curl -v http://localhost/
* About to connect() to localhost port 80 (#0)
* Trying 127.0.0.1... connected
> GET / HTTP/1.1
> User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/22.214.171.124 libidn/1.23 librtmp/2.3
> Host: localhost
> Accept: */*
There are no errors to find in the logs. After restarting apache it will work for some time,
but continue crashing regurally, if you have some traffic coming to the server.
In my tests i sometimes had crashes even with very few users connecting to the servers.
For greater reproducibility however you will need this high connections number for ab.
This is reproducible, happening every time and i also tested this on 3 different machines.
This is specific to 12.04, as i have the same setup working properly on 11.10.
I'm aware of that 1000 Processes will consume a plenty of ram. The machine that is supposed
to run this config has 32GB, so this should not be the problem here.
- apache crashed only with mod_ssl enabled
- apache crashed only with >1000 processes: 1000 processes runs fine, 1001 will produce a crash
1) The release of Ubuntu you are using
$ lsb_release -rd
Description: Ubuntu 12.04 LTS
2) The version of the package you are using
$ apt-cache policy apache2-mpm-prefork
*** 2.2.22-1ubuntu1 0
500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
3) What you expected to happen
i expect apache to handle the 5000 requests as usual and continue accepting connections afterwards
4) What happened instead
apache handles only 1000 requests and stops accepting new connections at all, which is a disaster for any website running on the host