Cloud Performance Observations

[DPS Computing]

Hi Guys, was busy in making new cluster live.. I hate the "Sold Out"
The first one got filled very fast (avg. 2.3 VMs/customer) not allowing me to be ready for next..

By the way hows testing going EJ ?? And David, I want you as first customer on new cluster

Hey Rishi,

Sounds like you've been extremely busy!! And yes, I feel like I have been missing out on eNlight now for too long!!! I think its time for me to jump on board. I eagerly await the new cluster . And I would love to be the first customer on the new cluster .

I burnt m'self out with file compares/coding; needed a wee break for a day or two. So, been looking at vmware & client 'stuff'. I should be back on track soon....
You guys have pulled off some miracle with I/O wait times, substantially improving server Load. Also, I've been waiting patiently for the 10Gb template adjustment, prior to redoing the mySQL VM.

You've spent so much time giving Rishi work that it has tired you out also . lol.

Nice to hear that improvements are still being made as well. It's all looking good for eUKhosts next eNlight customer (aka me!) .

[ejsolutions]

... By the way hows testing going EJ ??...

I burnt m'self out with file compares/coding; needed a wee break for a day or two. So, been looking at vmware & client 'stuff'. I should be back on track soon....
You guys have pulled off some miracle with I/O wait times, substantially improving server Load. Also, I've been waiting patiently for the 10Gb template adjustment, prior to redoing the mySQL VM.

[eUK-Rishi]

Haha, he's probably sleeping to recover from his recent workload lol.

Hi Guys, was busy in making new cluster live.. I hate the "Sold Out"
The first one got filled very fast (avg. 2.3 VMs/customer) not allowing me to be ready for next..

By the way hows testing going EJ ?? And David, I want you as first customer on new cluster

[DPS Computing]

Haven't heard anything in a few days. I just hope that the poor laddie ain't huddled in a corner restricted by a straight jacket!
[Must go check and see if the template has been updated recently.]

Haha, he's probably sleeping to recover from his recent workload lol.

[ejsolutions]

..And I think you are the reason that Rishi probably doesn't get lunch these days ....

Haven't heard anything in a few days. I just hope that the poor laddie ain't huddled in a corner restricted by a straight jacket!
[Must go check and see if the template has been updated recently.]

[DPS Computing]

Thanks for your updates EJ.

And I think you are the reason that Rishi probably doesn't get lunch these days ...... lol.

[ejsolutions]

.. you are the culprit to keep us busy ..

It's super that I'm keeping you in a job.

[eUK-Rishi]

I'm pleased to say that there has been an improvement in operability of eNlight, on lower spec. VMs. Response time to both web pages and cPanel requests are much more in keeping with other environments. I'm managing to do PHP development and nearly the same pace as on a VMWare platform - no mean feat.
There has been a somewhat strange pattern to swap space usage, which is tweakable, though I haven't go around to it (other priorities). See the attachment.

I believe that there is now a third iteration of the eNlight template (you busy lot, you) and I'm keen to find time to migrate over to it. Keep up the great work!

Hi EJ,

Thanks for your patience. BTW you are the culprit to keep us busy
We made some changes in storage which are now giving good result. It will improve further in next few days.

Keep up your good work and let us know if you need any further assistance

[ejsolutions]

I'm pleased to say that there has been an improvement in operability of eNlight, on lower spec. VMs. Response time to both web pages and cPanel requests are much more in keeping with other environments. I'm managing to do PHP development and nearly the same pace as on a VMWare platform - no mean feat.
There has been a somewhat strange pattern to swap space usage, which is tweakable, though I haven't go around to it (other priorities). See the attachment.

I believe that there is now a third iteration of the eNlight template (you busy lot, you) and I'm keen to find time to migrate over to it. Keep up the great work!

[ejsolutions]

Latest bulletin.
Centos 6 templates running on two VMs:
1. cPanel, Apache, mySQL, exim etc.
Consuming ~480 out of 512Mb RAM (according to Client Area VM List)
2. Webmin & mySQL
Consuming ~ 256 out of 512Mb RAM

Initial response time from the main (1) server is a tad slow, though other factors may be affecting this. Example: cPanel File Manager was tedious in trying to open directory listings, however once done, editing a file was speedy enough.
First impressions is that C6 is better on a low end VM but it is early days to give a categorical thumb up on this.
Rishi has been kind enough to setup another VLAN and hopefully I'll get time to put it through its' paces, when doing further osCmax development work.

[ejsolutions]

I checked on a normal server and that has 2kB/request so seems 6 should be normal.
Did you find the cause of load ?

Couldn't nail down the load issues - sidetracked by ecommerce stuff and starting a new Parallels (yuk!) Cloud for a US client.

[eUK-Rishi]

FYI, Rishi:
I happened to be looking at some stats on the 'big' server whilst it was being crawled by bots...

.757 requests/sec - 10.4 kB/second - 13.8 kB/request

So I guess circa 10kB/request is 'normal'

I checked on a normal server and that has 2kB/request so seems 6 should be normal.
Did you find the cause of load ?

[DPS Computing]

The all encompassing thread that takes in support issues and best practice.

Lol...... sometimes this does happen . Feel free to rehijack your thread .

[ejsolutions]

The all encompassing thread that takes in support issues and best practice.

[AlexP]

Hello Danny,
I have restarted the default iptables firewall on your server. Now I am able connect to the server remotely can you please check it ?
Do you want to install advanced firewall ConfigServer Firewall (csf) on your server ?

ConfigServer Firewall (csf) scripts provides:

• Straight-forward SPI iptables firewall script
• Daemon process that checks for login authentication failures for:
  • Courier imap, Dovecot, uw-imap, Kerio
  • openSSH
  • cPanel, WHM, Webmail (cPanel servers only)
  • Pure-ftpd, vsftpd, Proftpd
  • Password protected web pages (htpasswd)
  • Mod_security failures (v1 and v2)
  • Suhosin failures
  • Exim SMTP AUTH
  • Custom login failures with separate log file and regular expression matching
  
  
• POP3/IMAP login tracking to enforce logins per hour
• SSH login notification
• SU login notification
• Excessive connection blocking
• UI Integration for cPanel/WHM
• Easy upgrade between versions from within cPanel/WHM.
• Easy upgrade between versions from shell
• Pre-configured to work on a cPanel server with all the standard cPanel ports open
• Auto-configures the SSH port if it's non-standard on installation
• Block traffic on unused server IP addresses - helps reduce the risk to your server
• Alert when end-user scripts sending excessive emails per hour - for identifying spamming scripts
• Suspicious process reporting - reports potential exploits running on the server
• Excessive user processes reporting
• Excessive user process usage reporting and optional termination
• Suspicious file reporting - reports potential exploit files in /tmp and similar directories
• Directory and file watching - reports if a watched directory or a file changes
• Block traffic on the DShield Block List and the Spamhaus DROP List
• BOGON packet protection
• Pre-configured settings for Low, Medium or High firewall security (cPanel servers only)
• Works with multiple ethernet devices
• Server Security Check - Performs a basic security and settings check on the server (via cPanel/DirectAdmin/Webmin UI)
• Allow Dynamic DNS IP addresses - always allow your IP address even if it changes whenever you connect to the internet
• Alert sent if server load average remains high for a specified length of time
• mod_security log reporting (if installed)
• Email relay tracking - tracks all email sent through the server and issues alerts for excessive usage (cPanel servers only)
• IDS (Intrusion Detection System) - the last line of detection alerts you to changes to system and application binaries
• SYN Flood protection
• Ping of death protection
• Port Scan tracking and blocking
• Permanent and Temporary (with TTL) IP blocking
• Exploit checks
• Account modification tracking - sends alerts if an account entry is modified, e.g. if the password is changed or the login shell
• Shared syslog aware
• Messenger Service - Allows you to redirect connection requests from blocked IP addresses to preconfigured text and html pages to inform the visitor that they have been blocked in the firewall. This can be particularly useful for those with a large user base and help process support requests more efficiently
• Country Code blocking - Allows you to deny or allow access by ISO Country Code
• Port Flooding Detection - Per IP, per Port connection flooding detection and mitigation to help block DOS attacks
• DirectAdmin UI integration
• Updated Webmin UI integration
• WHM root access notification (cPanel servers only)
• New in v5: lfd Clustering - allows IP address blocks to be automatically propagated around a group of servers running lfd. It allows allows cluster-wide allows, removals and configuration changes
• New in v5: Quick start csf - deferred startup by lfd for servers with large block and/or allow lists
• New in v5: Distributed Login Failure Attack detection
• New in v5: Temporary IP allows (with TTL)
• New in v5: IPv6 Support with ip6tables
• New in v5: Integrated UI - no need for a separate Control Panel or Apache to use the csf configuration
• New in v5: Integrated support for cse within the Integrated UI
• New in v5: cPanel Reseller access to per reseller configurable options Unblock, Deny, Allow and Search IP address blocks
• ...lots more!