看到这个视频:
https://youtu.be/Q2_yBpX0kVA
《复旦大学教授梁永安2024年终演讲:年轻人如何在千变万化的世界里获取自由》
启发很多,推荐有条件上油管的朋友也看一下。
最近网站经常无法打开,AMH后台显示CPU一直在180%左右,BWH后台显示负载 35.39 61.75 55.59
查询资源占用情况,发现mysqld的cpu占用大于150%,进入phpMyAdmi 查询 show processlist
最后这条是博客占用的,上面全都是amh防火墙占用的!百度查询解决方案,试了好几组关键字都没搜到!
Google 搜索了“amh_module_amwaf_robot”结果就查到结果了:(不得不说,还是Google好用!)
原贴作者是这么写的:
AMWAF中开启流量防护后,每天有两三万的拦截记录,导致系统mysql服务CPU占用一直100%,这种情况如何处理?能否关闭流量防护的日志?或者其它方法解决?
前几天CPU一直占用100%,查看是mysql进程占用的,经排查是一直在操作amh_module_amwaf_robot表,换mysql版本后问题依旧,清空amh_module_amwaf_robot表后立马就正常了,请问这种问题如何处理?
AMH开发者是这么回的:
目前版本amwaf拦截统计累计的数据多了是有查询效率问题,mysql查询占用。
就先清除amwaf表的拦截记录,amwaf新版本会有做优化,要等下amh7.2发布了先。
于是升级amh到最新版本,然后清空了amh_module_amwaf_robot,问题暂时解决了。
9/29号:加班(必须车间停产才能进行的施工)
9/30号:加班(必须车间停产才能进行的施工)
10/1号:休息
10/2号:上午睡觉,下午加班
10/3号:上午睡觉,下午加班
10/4号:带小孩出去玩(08:30出门,22:00回家,比上班还累)
10/5号:上午睡觉,下午休息,傍晚去苏州喝酒,到家已是次日05:20
10/6号:上午睡觉,下午睡觉
最近把软路由升级了一下,用的是这个版本:https://www.right.com.cn/forum/thread-8307959-1-1.html
现在好多固件都可以支持Hysteria2了,感觉这个协议用的人比较少所以可能会稳定一些,结果在国外厂商的vps都弄成功唯独阿里云vps不成功,折腾许久只好重装系统结果还是不行,挨个参数的核对也无法找到问题……
后来看到Hysteria2的日志有这个报错:error [34mINFO[0m server up and running {“listen”: “:443”}
突然明白过来了,443端口是系统默认放通的,所以我也就没去动这个端口的防火墙,所以也就忽略了
Hysteria使用的是UDP协议,但系统默认放行的只有443TCP,所以还要再增加一条443UDP
同理,如果设置了端口跳跃,那也要添加对应端口的UDP
发现好多vps默认的Debian使用 apt install 安装软件的时候都会报 404 Not Found 的错误,apt update 也不行
应该是 sources.list 里面的源地址问题,以cloudcone的为例,我直接修改成最新的Debian官方源就可以了
一)备份
mv /etc/apt/sources.list /etc/apt/sources.list.old
二)替换(直接一次性复制多行命令粘贴运行就行,或者也可以自己vi更换相关内容)
官方源
cat > /etc/apt/sources.list << EOF deb https://deb.debian.org/debian/ bullseye main contrib non-free deb-src https://deb.debian.org/debian/ bullseye main contrib non-free deb https://deb.debian.org/debian/ bullseye-updates main contrib non-free deb-src https://deb.debian.org/debian/ bullseye-updates main contrib non-free deb https://deb.debian.org/debian/ bullseye-backports main contrib non-free deb-src https://deb.debian.org/debian/ bullseye-backports main contrib non-free deb https://deb.debian.org/debian-security/ bullseye-security main contrib non-free deb-src https://deb.debian.org/debian-security/ bullseye-security main contrib non-free EOF
清华源
cat > /etc/apt/sources.list << EOF deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free deb https://mirrors.tuna.tsinghua.edu.cn/debian-security/ bullseye-security main contrib non-free deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security/ bullseye-security main contrib non-free EOF
中科大源
cat > /etc/apt/sources.list << EOF deb https://mirrors.ustc.edu.cn/debian/ bullseye main contrib non-free deb-src https://mirrors.ustc.edu.cn/debian/ bullseye main contrib non-free deb https://mirrors.ustc.edu.cn/debian/ bullseye-updates main contrib non-free deb-src https://mirrors.ustc.edu.cn/debian/ bullseye-updates main contrib non-free deb https://mirrors.ustc.edu.cn/debian/ bullseye-backports main contrib non-free deb-src https://mirrors.ustc.edu.cn/debian/ bullseye-backports main contrib non-free deb https://mirrors.ustc.edu.cn/debian-security/ bullseye-security main contrib non-free deb-src https://mirrors.ustc.edu.cn/debian-security/ bullseye-security main contrib non-free EOF
阿里云源(公网)
cat > /etc/apt/sources.list << EOF deb https://mirrors.aliyun.com/debian/ bullseye main contrib non-free deb-src https://mirrors.aliyun.com/debian/ bullseye main contrib non-free deb https://mirrors.aliyun.com/debian/ bullseye-updates main contrib non-free deb-src https://mirrors.aliyun.com/debian/ bullseye-updates main contrib non-free deb https://mirrors.aliyun.com/debian/ bullseye-backports main contrib non-free deb-src https://mirrors.aliyun.com/debian/ bullseye-backports main contrib non-free deb https://mirrors.aliyun.com/debian-security/ bullseye-security main contrib non-free deb-src https://mirrors.aliyun.com/debian-security/ bullseye-security main contrib non-free EOF
阿里云内网源(阿里云服务器使用,不消耗公网流量)
cat > /etc/apt/sources.list << EOF deb http://mirrors.cloud.aliyuncs.com/debian/ bullseye main contrib non-free deb-src http://mirrors.cloud.aliyuncs.com/debian/ bullseye main contrib non-free deb http://mirrors.cloud.aliyuncs.com/debian/ bullseye-updates main contrib non-free deb-src http://mirrors.cloud.aliyuncs.com/debian/ bullseye-updates main contrib non-free deb http://mirrors.cloud.aliyuncs.com/debian/ bullseye-backports main contrib non-free deb-src http://mirrors.cloud.aliyuncs.com/debian/ bullseye-backports main contrib non-free deb http://mirrors.cloud.aliyuncs.com/debian-security/ bullseye-security main contrib non-free deb-src http://mirrors.cloud.aliyuncs.com/debian-security/ bullseye-security main contrib non-free EOF
腾讯云源(公网)
cat > /etc/apt/sources.list << EOF deb https://mirrors.cloud.tencent.com/debian/ bullseye main contrib non-free deb-src https://mirrors.cloud.tencent.com/debian/ bullseye main contrib non-free deb https://mirrors.cloud.tencent.com/debian/ bullseye-updates main contrib non-free deb-src https://mirrors.cloud.tencent.com/debian/ bullseye-updates main contrib non-free deb https://mirrors.cloud.tencent.com/debian/ bullseye-backports main contrib non-free deb-src https://mirrors.cloud.tencent.com/debian/ bullseye-backports main contrib non-free deb https://mirrors.cloud.tencent.com/debian-security/ bullseye-security main contrib non-free deb-src https://mirrors.cloud.tencent.com/debian-security/ bullseye-security main contrib non-free EOF
腾讯云内网源(阿里云服务器使用,不消耗公网流量)
cat > /etc/apt/sources.list << EOF deb http://mirrors.tencentyun.com/debian/ bullseye main contrib non-free deb-src http://mirrors.tencentyun.com/debian/ bullseye main contrib non-free deb http://mirrors.tencentyun.com/debian/ bullseye-updates main contrib non-free deb-src http://mirrors.tencentyun.com/debian/ bullseye-updates main contrib non-free deb http://mirrors.tencentyun.com/debian/ bullseye-backports main contrib non-free deb-src http://mirrors.tencentyun.com/debian/ bullseye-backports main contrib non-free deb http://mirrors.tencentyun.com/debian-security/ bullseye-security main contrib non-free deb-src http://mirrors.tencentyun.com/debian-security/ bullseye-security main contrib non-free EOF
Linode源
cat > /etc/apt/sources.list << EOF deb http://mirrors.linode.com/debian/ bullseye main contrib non-free deb-src http://mirrors.linode.com/debian/ bullseye main contrib non-free deb http://mirrors.linode.com/debian/ bullseye-updates main contrib non-free deb-src http://mirrors.linode.com/debian/ bullseye-updates main contrib non-free deb http://mirrors.linode.com/debian/ bullseye-backports main contrib non-free deb-src http://mirrors.linode.com/debian/ bullseye-backports main contrib non-free deb http://mirrors.linode.com/debian-security/ bullseye-security main contrib non-free deb-src http://mirrors.linode.com/debian-security/ bullseye-security main contrib non-free EOF
三)更新索引
apt update
将数据库搬回了本地:https://400.tw/2024.09.21/23:59:00/3850 所以就要立即考虑备份的事情了。之前使用wp的备份插件每天备份到电子邮箱,但现在找不到稳定好用的插件了,要么就是特不稳定甚至直接出错无法使用要么就是要收费,所以现在直接使用amh官方的备份插件了。我使用的是腾讯云免费的50G额度,简单记录设置步骤:
1、在插件中心安装“腾讯云远程备份”(腾讯云、阿里云也有专门的插件,还有一些其它的常用云也基本都有兼容插件)然后设置“腾讯云远程备份”的参数,这里要特别注意的是:
HOST保持默认,别改成完整的URL(否则连接测试会成功,但备份会失败,因为最终的URL结构会重复)
阿里云子账号只授权 QcloudCOSDataFullControl 这个权限就够了
2、在“即时备份”备份一次试试,确保备份成功,这里要特别注意的是:
设置好相关选项之后,先复制上图最后一行的备份命令,然后再点备份按钮测试
3、登陆腾讯云查询备份文件是否上传成功?打开上图的备份列表查询本地备份是否成功?(假设设置了本地与远程)
注意“备份文件存储选项” 根据实际情况决定是否需要设置
4、打开amh“任务计划”设置备份频率,运行命令写上述第2步复制的那条命令。
这几年一直使用阿里云的MySQL:https://400.tw/2022.02.07/17:26:04/2728
不过最近感觉搬瓦工连阿里云硅谷数据库的速度变慢了,wordpress变得卡卡的;更离谱的是,这月搬瓦工的流量飙升,平均每天要跑30G,起初我还以为是被攻击了或者被中毒被挖矿什么的了,结果对vps进行监测才发现流量最多的ip居然是阿里云数据库的连接,每个小时都得1~2G的流量…… 重启vps不行,修改mysql密码也不行,入网流量持续狂飙!
于是就将数据库搬回了localhost(前段时间已经把瓦工升级成2G内存)
现在vps的流量降下来了,wordpress的打开速度也感觉提高了很多!