Wordpress site overloads the server, shutting down db gets server normalamazon RDS Security Groups IssueCloudflare performance, ddosServer does not load WordPress - No HTML nor PHP ErrorsHow to troubleshoot slow performance on AWS EC2/RDS?Terrible performance of Wordpress site on Amazon EC2 + apache2 + ubuntu server 12.04Reducing AWS EC2 Instance and RDS - Is 'low' Network Performance acceptable?Identifying Traffic from Amazon to EC2 InstanceEC2 Instance in healthy state in ELB, but still give 503 backend server is at capacityNew webserver becomes unresponsive, unexplained random load spikesWordpress Server sending bad request to itself and crashing apache

What is the most expensive material in the world that could be used to create Pun-Pun's lute?

All ASCII characters with a given bit count

Can I criticise the more senior developers around me for not writing clean code?

Could moose/elk survive in the Amazon forest?

Are there moral objections to a life motivated purely by money? How to sway a person from this lifestyle?

What does "function" actually mean in music?

Can someone publish a story that happened to you?

Is Electric Central Heating worth it if using Solar Panels?

Where was the County of Thurn und Taxis located?

My bank got bought out, am I now going to have to start filing tax returns in a different state?

Crossed out red box fitting tightly around image

Island of Knights, Knaves and Spies

Co-worker works way more than he should

As an international instructor, should I openly talk about my accent?

Drawing a german abacus as in the books of Adam Ries

How exactly does Hawking radiation decrease the mass of black holes?

Prove that the countable union of countable sets is also countable

How do I deal with a coworker that keeps asking to make small superficial changes to a report, and it is seriously triggering my anxiety?

Negative Resistance

Why doesn't the standard consider a template constructor as a copy constructor?

How can I practically buy stocks?

A strange hotel

Why did C use the -> operator instead of reusing the . operator?

What does a straight horizontal line above a few notes, after a changed tempo mean?



Wordpress site overloads the server, shutting down db gets server normal


amazon RDS Security Groups IssueCloudflare performance, ddosServer does not load WordPress - No HTML nor PHP ErrorsHow to troubleshoot slow performance on AWS EC2/RDS?Terrible performance of Wordpress site on Amazon EC2 + apache2 + ubuntu server 12.04Reducing AWS EC2 Instance and RDS - Is 'low' Network Performance acceptable?Identifying Traffic from Amazon to EC2 InstanceEC2 Instance in healthy state in ELB, but still give 503 backend server is at capacityNew webserver becomes unresponsive, unexplained random load spikesWordpress Server sending bad request to itself and crashing apache






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








1















Hi I have a wordpress site running on EC2 and RDS. All of a sudden the site won't load and on investigating I see that the server load is at 15 and increasing rapidly.



I remove access of this EC2 from the RDS security group and the server gets back to normal. Now has a load of 0.07



The moment I allow the server to connect with the db that is the RDS the load spikes and server gets irresponsive.



I suspect its a hack? I have daily backups of both EC2 and RDS and can restore it to a state when it was working well, but I want to find out what is causing this. This has happened before when I had updated the plugins and back then I had just done a restore to a previous state and everything got back to working.



Can someone guide me into how I can pinpoint what script or backdoor is open and causing this?



Additional Data



The site is running behind cloudflare so I doubt that it is DDOS attack.



Here is a screen grab of htop with access to RDS enabled



enter image description here










share|improve this question
























  • The first step is to use "top" or similar to find out what's using CPU. Next I'd look in the web server access / errors logs to see if there's anything interesting there. Could just be a high load, or DDOS. Once you've done that please edit your question to add information you found. Right now there's nothing to go on.

    – Tim
    Apr 18 at 18:15











  • Also check the process list on rds. I had a single plugin have 5 stuck processes on rds causing exactly the same symptoms

    – jdog
    Apr 22 at 2:28

















1















Hi I have a wordpress site running on EC2 and RDS. All of a sudden the site won't load and on investigating I see that the server load is at 15 and increasing rapidly.



I remove access of this EC2 from the RDS security group and the server gets back to normal. Now has a load of 0.07



The moment I allow the server to connect with the db that is the RDS the load spikes and server gets irresponsive.



I suspect its a hack? I have daily backups of both EC2 and RDS and can restore it to a state when it was working well, but I want to find out what is causing this. This has happened before when I had updated the plugins and back then I had just done a restore to a previous state and everything got back to working.



Can someone guide me into how I can pinpoint what script or backdoor is open and causing this?



Additional Data



The site is running behind cloudflare so I doubt that it is DDOS attack.



Here is a screen grab of htop with access to RDS enabled



enter image description here










share|improve this question
























  • The first step is to use "top" or similar to find out what's using CPU. Next I'd look in the web server access / errors logs to see if there's anything interesting there. Could just be a high load, or DDOS. Once you've done that please edit your question to add information you found. Right now there's nothing to go on.

    – Tim
    Apr 18 at 18:15











  • Also check the process list on rds. I had a single plugin have 5 stuck processes on rds causing exactly the same symptoms

    – jdog
    Apr 22 at 2:28













1












1








1








Hi I have a wordpress site running on EC2 and RDS. All of a sudden the site won't load and on investigating I see that the server load is at 15 and increasing rapidly.



I remove access of this EC2 from the RDS security group and the server gets back to normal. Now has a load of 0.07



The moment I allow the server to connect with the db that is the RDS the load spikes and server gets irresponsive.



I suspect its a hack? I have daily backups of both EC2 and RDS and can restore it to a state when it was working well, but I want to find out what is causing this. This has happened before when I had updated the plugins and back then I had just done a restore to a previous state and everything got back to working.



Can someone guide me into how I can pinpoint what script or backdoor is open and causing this?



Additional Data



The site is running behind cloudflare so I doubt that it is DDOS attack.



Here is a screen grab of htop with access to RDS enabled



enter image description here










share|improve this question
















Hi I have a wordpress site running on EC2 and RDS. All of a sudden the site won't load and on investigating I see that the server load is at 15 and increasing rapidly.



I remove access of this EC2 from the RDS security group and the server gets back to normal. Now has a load of 0.07



The moment I allow the server to connect with the db that is the RDS the load spikes and server gets irresponsive.



I suspect its a hack? I have daily backups of both EC2 and RDS and can restore it to a state when it was working well, but I want to find out what is causing this. This has happened before when I had updated the plugins and back then I had just done a restore to a previous state and everything got back to working.



Can someone guide me into how I can pinpoint what script or backdoor is open and causing this?



Additional Data



The site is running behind cloudflare so I doubt that it is DDOS attack.



Here is a screen grab of htop with access to RDS enabled



enter image description here







amazon-web-services linux-networking wordpress ubuntu-18.04






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Apr 18 at 18:22







Rick Roy

















asked Apr 18 at 18:04









Rick RoyRick Roy

126312




126312












  • The first step is to use "top" or similar to find out what's using CPU. Next I'd look in the web server access / errors logs to see if there's anything interesting there. Could just be a high load, or DDOS. Once you've done that please edit your question to add information you found. Right now there's nothing to go on.

    – Tim
    Apr 18 at 18:15











  • Also check the process list on rds. I had a single plugin have 5 stuck processes on rds causing exactly the same symptoms

    – jdog
    Apr 22 at 2:28

















  • The first step is to use "top" or similar to find out what's using CPU. Next I'd look in the web server access / errors logs to see if there's anything interesting there. Could just be a high load, or DDOS. Once you've done that please edit your question to add information you found. Right now there's nothing to go on.

    – Tim
    Apr 18 at 18:15











  • Also check the process list on rds. I had a single plugin have 5 stuck processes on rds causing exactly the same symptoms

    – jdog
    Apr 22 at 2:28
















The first step is to use "top" or similar to find out what's using CPU. Next I'd look in the web server access / errors logs to see if there's anything interesting there. Could just be a high load, or DDOS. Once you've done that please edit your question to add information you found. Right now there's nothing to go on.

– Tim
Apr 18 at 18:15





The first step is to use "top" or similar to find out what's using CPU. Next I'd look in the web server access / errors logs to see if there's anything interesting there. Could just be a high load, or DDOS. Once you've done that please edit your question to add information you found. Right now there's nothing to go on.

– Tim
Apr 18 at 18:15













Also check the process list on rds. I had a single plugin have 5 stuck processes on rds causing exactly the same symptoms

– jdog
Apr 22 at 2:28





Also check the process list on rds. I had a single plugin have 5 stuck processes on rds causing exactly the same symptoms

– jdog
Apr 22 at 2:28










1 Answer
1






active

oldest

votes


















1














Based on the info provided from the screenshot, you are short on RAM. So the swap goes to the roof (seen on your screenshot too), making your CPU wait, slowing down your drives, piling up NginX and Apache processes, intensifying RAM requirements, making CPU wait even more, etc...



So my recommendations would be to:
1) pump up the RAM
2) reduce the swapiness



Following the RAM adjustment, more adjustments on different levels (i.e. CPU) could be required.






share|improve this answer























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963709%2fwordpress-site-overloads-the-server-shutting-down-db-gets-server-normal%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1














    Based on the info provided from the screenshot, you are short on RAM. So the swap goes to the roof (seen on your screenshot too), making your CPU wait, slowing down your drives, piling up NginX and Apache processes, intensifying RAM requirements, making CPU wait even more, etc...



    So my recommendations would be to:
    1) pump up the RAM
    2) reduce the swapiness



    Following the RAM adjustment, more adjustments on different levels (i.e. CPU) could be required.






    share|improve this answer



























      1














      Based on the info provided from the screenshot, you are short on RAM. So the swap goes to the roof (seen on your screenshot too), making your CPU wait, slowing down your drives, piling up NginX and Apache processes, intensifying RAM requirements, making CPU wait even more, etc...



      So my recommendations would be to:
      1) pump up the RAM
      2) reduce the swapiness



      Following the RAM adjustment, more adjustments on different levels (i.e. CPU) could be required.






      share|improve this answer

























        1












        1








        1







        Based on the info provided from the screenshot, you are short on RAM. So the swap goes to the roof (seen on your screenshot too), making your CPU wait, slowing down your drives, piling up NginX and Apache processes, intensifying RAM requirements, making CPU wait even more, etc...



        So my recommendations would be to:
        1) pump up the RAM
        2) reduce the swapiness



        Following the RAM adjustment, more adjustments on different levels (i.e. CPU) could be required.






        share|improve this answer













        Based on the info provided from the screenshot, you are short on RAM. So the swap goes to the roof (seen on your screenshot too), making your CPU wait, slowing down your drives, piling up NginX and Apache processes, intensifying RAM requirements, making CPU wait even more, etc...



        So my recommendations would be to:
        1) pump up the RAM
        2) reduce the swapiness



        Following the RAM adjustment, more adjustments on different levels (i.e. CPU) could be required.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Apr 18 at 21:01









        Marc-Andre ChampagneMarc-Andre Champagne

        662




        662



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963709%2fwordpress-site-overloads-the-server-shutting-down-db-gets-server-normal%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

            Vilaño, A Laracha Índice Patrimonio | Lugares e parroquias | Véxase tamén | Menú de navegación43°14′52″N 8°36′03″O / 43.24775, -8.60070

            Cegueira Índice Epidemioloxía | Deficiencia visual | Tipos de cegueira | Principais causas de cegueira | Tratamento | Técnicas de adaptación e axudas | Vida dos cegos | Primeiros auxilios | Crenzas respecto das persoas cegas | Crenzas das persoas cegas | O neno deficiente visual | Aspectos psicolóxicos da cegueira | Notas | Véxase tamén | Menú de navegación54.054.154.436928256blindnessDicionario da Real Academia GalegaPortal das Palabras"International Standards: Visual Standards — Aspects and Ranges of Vision Loss with Emphasis on Population Surveys.""Visual impairment and blindness""Presentan un plan para previr a cegueira"o orixinalACCDV Associació Catalana de Cecs i Disminuïts Visuals - PMFTrachoma"Effect of gene therapy on visual function in Leber's congenital amaurosis"1844137110.1056/NEJMoa0802268Cans guía - os mellores amigos dos cegosArquivadoEscola de cans guía para cegos en Mortágua, PortugalArquivado"Tecnología para ciegos y deficientes visuales. Recopilación de recursos gratuitos en la Red""Colorino""‘COL.diesis’, escuchar los sonidos del color""COL.diesis: Transforming Colour into Melody and Implementing the Result in a Colour Sensor Device"o orixinal"Sistema de desarrollo de sinestesia color-sonido para invidentes utilizando un protocolo de audio""Enseñanza táctil - geometría y color. Juegos didácticos para niños ciegos y videntes""Sistema Constanz"L'ocupació laboral dels cecs a l'Estat espanyol està pràcticament equiparada a la de les persones amb visió, entrevista amb Pedro ZuritaONCE (Organización Nacional de Cegos de España)Prevención da cegueiraDescrición de deficiencias visuais (Disc@pnet)Braillín, un boneco atractivo para calquera neno, con ou sen discapacidade, que permite familiarizarse co sistema de escritura e lectura brailleAxudas Técnicas36838ID00897494007150-90057129528256DOID:1432HP:0000618D001766C10.597.751.941.162C97109C0155020