CPANEL-37047 - How to disable PHP-FPM for cpanel
It is possible to disable PHP-FPM for cpanel processes??
LFD is sending me alerts about a user that is using excesive resources, however the message is generic, it only shows me " php-fpm: pool userdomain_com " so i dont know what is the exact process so i can investigate it.
I disabled php-fpm for that domain and i change suphp for the php handler so i can see whats going on (suphp shows the exact process) however, the process that is triggering this alerts seems to be from some cpanel process as the alerts and the process manager still showing "php-fpm pool userdomain_com" even if i disabled php-fpm for that domain.
Thats why i need to disable php-fpm for cpanel, how can i do that? or how can i see the exact process that is triggering the alerts?
-
What kind of alerts you are receiving? Are those pointing to 'excessive resource usage' from php-fpm? 0 -
Note that cpanel / whm operations are processed via php-fpm. To disable this, close and save Whm> Service manager> PHP-FPM service for cPanel Daemons service. If these processes are excessive, there may be a brute force attack on the cpanel / whm ports. 0 -
Let us know if disabling the process for cPanel itself doesn't take care of that! 0 -
Thanks for your reply all of you, i disabled php-fpm service for cpanel daemons service and i will keep an eye on the server to see what is going on :) 0 -
Hi! In my opinion it's a bad idea to disable PHP-FPM - unless you use LSAPI - as it in my experience just works better. A better option would be to add the specific processes/scripts to your csf.pignore file 0 -
Hi! In my opinion it's a bad idea to disable PHP-FPM - unless you use LSAPI - as it in my experience just works better. A better option would be to add the specific processes/scripts to your csf.pignore file
Yes, it just works better but there is no way to know or add a script/proceesss to csf.pignore because PHP-FPM runs for every proccess/script as "php-fpm pool userdomain_tld", so there is no way to use csf.pignore at least you add "php-fpm pool userdomain_tld" to csf.pignore but this disable all the alerts and you dont want this, as a hosting provider we need to know the exact process/script that is triggering the alerts to identify problems, malicious scripts, abusive scripts, etc.0 -
Why every update the PHP-FPM service for cPanel Daemons is enabled? I need to disable it everyday is annoying 0 -
@tui - I've had this disabled on my personal server for a while for testing, and regular updates are running and not reactivating that service. Can you try disabling the service through WHM >> Service Manager and then running "/scripts/upcp --force" to see if that causes it to become active? 0 -
@tui - I've had this disabled on my personal server for a while for testing, and regular updates are running and not reactivating that service. Can you try disabling the service through WHM >> Service Manager and then running "/scripts/upcp --force" to see if that causes it to become active?
It was disabled until yesterday, so its not exactly daily updates, it seems that something is enabling it after some time, i im pointing to the daily updates because its the only thing that runs on my server, also nobody else has access to it, only me, what could it be and why is this happening?0 -
We've been doing some additional testing on our end and we have found similar issues, although we haven't been able to isolate the problem just yet. If I find out any more details on my end I'll be sure to post here. 0 -
We've been doing some additional testing on our end and we have found similar issues, although we haven't been able to isolate the problem just yet. If I find out any more details on my end I'll be sure to post here.
Hello, good to hear that, I thought it was just that happened on my server, so i will wait for updates :)0 -
It was enabled automatically today again after I disabled it 2 times apparently on server updates. My guess is on WP-Toolkit changes on server updates. 0 -
Thanks for that report, @Ot"vio Serra. Could you submit a ticket to our team and reference case number CPANEL-37047 so we can take a look? 0 -
Thanks for that report, @Ot"vio Serra. Could you submit a ticket to our team and reference case number CPANEL-37047 so we can take a look?
Done.0 -
Can you post the ticket number here so I can follow along with that? 0 -
Can you post the ticket number here so I can follow along with that?
Id #943287140 -
Thanks for that - I'm following along with that ticket now and I'll be sure to keep this thread updated with our findings. 0 -
@Ot"vio Serra - we believe the issues you're seeing are related to case CPANEL-37047, which is currently being worked on by our developers. While I can't say when that will be resolved, I'll be sure to post an update when I have more details. 0 -
To collaborate with investigations into the problem: - I'm also having to leave PHP-FPM turned off otherwise my clients find it very slow when using webmail. - With it turned off I get great webmail performance (I use litespeed) - I noticed that Wordpress Toolkit doesn't work with PHP-FPM turned off, it shows the error "Unable to parse received authentication token. Please contact your server administrator". - I also noticed that the PHP-FPM service is turned on automatically and randomly after a few days, I believe that as mentioned above, it must be related to Wordpress Toolkit. - As the webmail service is much more important to me than the Wordpress Toolkit, I decided to uninstall it, and since then, the PHP-FPM service hasn't started automatically anymore. thanks 0 -
@ribeiroeder - thanks for that feedback. The random off and on is definitely case CPANEL-37047, which is still being worked on by our developers. I have a question about this item you noted: - I noticed that Wordpress Toolkit doesn't work with PHP-FPM turned off, it shows the error "Unable to parse received authentication token. Please contact your server administrator".
Are you seeing that error in the cPanel interface itself? I tested WordPress Toolkit on my personal system that does have a full WordPress install, and I'm not seeing any issues there. Do you see anything else in the cPanel error log at /usr/local/cpanel/logs/error_log when that happens?0 -
Confirming my tests: - Installed and activated the WP Toolkit, it automatically activates the PHP-FPM service. - I take the opportunity to update my plugins. - After everything is complete, I disable the PHP-FPM service, I will check the WP Toolkit and again I have the error "Unable to parse received authentication token. Please contact your server administrator" displayed directly in the WHM cPanel interface. - My log at /usr/local/cpanel/logs/error_log does not display related errors. 0 -
@ribeiroeder - thanks for the specific details! -I created a new CentOS 7 system with cPanel 96 -confirmed that PHP-FPM was not enabled -installed WordPress Toolkit with this command: sh <(curl https://wp-toolkit.plesk.com/cPanel/installer.sh || wget -O - https://wp-toolkit.plesk.com/cPanel/installer.sh)
-confirmed that PHP-FPM was not automatically enabled. At this point I'm not able to reproduce the issue as you've outlined so it might be best to create a ticket with our team so we can check the problem on your specific machine.0 -
Update - our team has been working with the developers of WPT to get more details on this. We have found that the long-term plan was to require PHP-FPM as part of WPT, and as of the latest version this is required. So that is why it is being activated when WPT is installed, that just was not documented in the past. We're getting the documentation updated for that as well. 0 -
Hi, I had only BAD and UGLY experience with PHP-FPM... Even when in multi-PHP I set it to off, the simple fact that it was installed, it was painfull. What worked for me if to uninstall it completely in easyapache and poof, all problems gone 0 -
@Jintor - can you let us know what type of issues you were seeing? 0 -
Why this thread is marked as solved if the problem is not solved? 0 -
@tui - that's a good question! I've changed it to "In Progress" Is the entirety of the issue the CSF notification? Are you seeing slowness on the machine or in the cPanel or webmail interfaces when PHP-FPM is enabled? We're hoping to get some more detail about user's experiences and the *why* behind disabling that service. 0 -
Im not seeing slowness on the machine or in the cPanel, i exactly dont remember but somepart of webmail is not working as expected with PHP-FPM enabled, also the CSF notification but is not exactly the notification that is annoying me rather the way that PHP-FPM works where is not possible to see the exact process that is running or the process that is consuming resources in order to see and debug or put on pignore to ignore, i cant put PHP-FPM on the pignore list because it would ignore everything so any user can abuse the server resources, also i think that PHP-FPM is making some processes slow or resource consuming because with it enabled i receive csf notifications about process time and process consuming a lot of resources with it disabled i dont receive anything I cant believe that its almost a year of this report and there is no a fix... but what about forcing us pay more to use a non-finished and non-useful theme? 0 -
@tui - at this time, our developers are going to close the case as "won't fix" as we do not intend for PHP-FPM for cPanel services to be disabled. If you are seeing specific issues that this is causing on the machine, please let us know what is wrong so we can look into those. It's important to note that this is not the same as the PHP-FPM service for the webserver, which is likely what you are receiving the CSF notifications about. The internal PHP-FPM process for cPanel is an entirely different service. 0 -
@tui - at this time, our developers are going to close the case as "won't fix" as we do not intend for PHP-FPM for cPanel services to be disabled. If you are seeing specific issues that this is causing on the machine, please let us know what is wrong so we can look into those. It's important to note that this is not the same as the PHP-FPM service for the webserver, which is likely what you are receiving the CSF notifications about. The internal PHP-FPM process for cPanel is an entirely different service.
I know this is not the same as the PHP-FPM service for the webserver, and the CSF notifications that we are receiving are not from the webserver, they are from the PHP-FPM process for cPanel as you can see on my attached file, every notification is about a different user/account, and as you can see the executable is /usr/local/cpanel/3rdparty/php/74/sbin/php-fpm (there is no way what is the exact process that the user is using that trigger the notification), the command line is just: php-fpm:pool user_useraccount I know that i can just add "/usr/local/cpanel/3rdparty/php/74/sbin/php-fpm" to the pignore file and stop receiving those notifications, but is not the solution, i need to know what is exactly causing the notification, something that with php-fpm enabled is impossible. However, with php-fpm for cPanel disabled notifications are gone, so i think that php-fpm is making some performance degrade on some parts of cpanel processes but what processes? its unknown With php-fpm enabled, how can we handle those notifications, how can we know what exactly process is triggering the notification so we can check? This is why i dont like php-fpm not in cPanel not in websever If cPanel do not intend to disable php-fpm for cPanel services why is the option to disable it? Why you forcing use to use our server in a way you want? They are our servers, we decide how to use it and configure ir as our way, If we dont want to use php-fpm just we dont want, this is not what you want for us0
Please sign in to leave a comment.
Comments
31 comments