Default worker_connections too high for default system
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Nginx |
Invalid
|
Undecided
|
Unassigned | ||
nginx (Debian) |
Fix Released
|
Unknown
|
|||
nginx (Ubuntu) |
Fix Released
|
Undecided
|
Michael Lustfield |
Bug Description
Binary package hint: nginx
The default maximum number of worker_connections for nginx by default is 1024. The maximum number of file descriptors allowed for the www-data user by the OS by default is 1024. Each connection in nginx uses one file descriptor. When there are close to 1024 connections, nginx runs out of file descriptors and starts flooding the error.log (at a rate of about 1MB/sec) with alerts (“accept() failed (24: Too many open files)”). On a busy server, this causes the disk to quickly fill up.
www-data should either have its file descriptor limit raised by default to something higher than 1024, or the default number of worker_connections should be reduced to a number that is safe with the OS default.
Related branches
summary: |
- default settings are dangerous + Default worker_connections too high for default system |
Changed in nginx (Debian): | |
status: | Unknown → New |
Changed in nginx (Debian): | |
status: | New → Fix Committed |
tags: | added: regression-proposed |
tags: | removed: regression-proposed |
Changed in nginx (Debian): | |
status: | Fix Committed → Fix Released |
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.