HipHop Virtual Machine (HHVM) is a process virtual machine based on just-in-time (JIT) compilation, serving as an execution engine for PHP and Hack programming languages. By using the principle of JIT compilation, executed PHP or Hack code is first transformed into intermediate HipHop bytecode (HHBC), which is then dynamically translated into the x86-64 machine code, optimized and natively executed.

According to their website, HHVM has realized over a 9x increase in web request throughput and over a 5x reduction in memory consumption for Facebook compared with the Zend PHP engine + APC (which is the current way of hosting a large majority of PHP applications).

Installing HHVM

Installing HHVM is quite straightforward and shouldn’t take more than a few minutes.
Login as root and execute the following commands from the command line will have HHVM installed and ready:

# cd /etc/yum.repos.d
# wget http://www.hop5.in/yum/el6/hop5.repo
# yum install hhvm

Sample output

Dependencies Resolved

================================================================================
 Package                   Arch       Version                    Repository
                                                                           Size
================================================================================
Installing:
 hhvm                      x86_64     3.2.0-1.el6                hop5     9.6 M
Installing for dependencies:
 GConf2                    x86_64     2.28.0-6.el6               base     964 k
 ImageMagick               x86_64     6.8.6.3-4.el6              hop5     138 k
 ImageMagick-libs          x86_64     6.8.6.3-4.el6              hop5     1.9 M
 ORBit2                    x86_64     2.14.17-5.el6              base     168 k
 OpenEXR-libs              x86_64     1.6.1-8.1.el6              base     197 k
 boost                     x86_64     1.54.0-7.el6               hop5      32 k
 boost-atomic              x86_64     1.54.0-7.el6               hop5      34 k
 boost-chrono              x86_64     1.54.0-7.el6               hop5      40 k
 boost-context             x86_64     1.54.0-7.el6               hop5      33 k
 boost-date-time           x86_64     1.54.0-7.el6               hop5      47 k
 boost-filesystem          x86_64     1.54.0-7.el6               hop5      63 k
 boost-graph               x86_64     1.54.0-7.el6               hop5     126 k
 boost-iostreams           x86_64     1.54.0-7.el6               hop5      55 k
 boost-locale              x86_64     1.54.0-7.el6               hop5     251 k
 boost-log                 x86_64     1.54.0-7.el6               hop5     599 k
 boost-math                x86_64     1.54.0-7.el6               hop5     324 k
 boost-program-options     x86_64     1.54.0-7.el6               hop5     145 k
 boost-python              x86_64     1.54.0-7.el6               hop5     124 k
 boost-random              x86_64     1.54.0-7.el6               hop5      36 k
 boost-regex               x86_64     1.54.0-7.el6               hop5     298 k
 boost-serialization       x86_64     1.54.0-7.el6               hop5     155 k
 boost-signals             x86_64     1.54.0-7.el6               hop5      56 k
 boost-system              x86_64     1.54.0-7.el6               hop5      36 k
 boost-test                x86_64     1.54.0-7.el6               hop5     212 k
 boost-thread              x86_64     1.54.0-7.el6               hop5      55 k
 boost-timer               x86_64     1.54.0-7.el6               hop5      38 k
 boost-wave                x86_64     1.54.0-7.el6               hop5     198 k
 fftw                      x86_64     3.2.1-3.1.el6              base     1.2 M
 gd                        x86_64     2.0.35-11.el6              base     142 k
 ghostscript               x86_64     8.70-19.el6                base     4.4 M
 ghostscript-fonts         noarch     5.50-23.2.el6              base     590 k
 glog                      x86_64     0.3.2-1.el6                hop5      48 k
 ilmbase                   x86_64     1.0.1-6.1.el6              base      72 k
 jemalloc                  x86_64     3.6.0-1.el6                epel     100 k
 lcms2                     x86_64     2.3-2.el6                  epel     127 k
 libICE                    x86_64     1.0.6-1.el6                base      53 k
 libIDL                    x86_64     0.8.13-2.1.el6             base      83 k
 libSM                     x86_64     1.2.1-2.el6                base      37 k
 libXfont                  x86_64     1.4.5-3.el6_5              base     136 k
 libXt                     x86_64     1.1.4-6.1.el6              base     165 k
 libcroco                  x86_64     0.6.2-5.el6                base     100 k
 libdwarf                  x86_64     20140413-1.el6             epel     108 k
 libfontenc                x86_64     1.0.5-2.el6                base      24 k
 libgsf                    x86_64     1.14.15-5.el6              base     116 k
 libicu                    x86_64     4.2.1-9.1.el6_2            base     4.9 M
 libmcrypt                 x86_64     2.5.8-9.el6                epel      96 k
 libmemcached              x86_64     1.0.16-1.el6               hop5     208 k
 libmpc                    x86_64     0.8.3-0.3.svn855.el6       hop5      47 k
 librsvg2                  x86_64     2.26.0-14.el6              base     140 k
 libtool-ltdl              x86_64     2.4.2-21.el6               hop5      46 k
 libunwind                 x86_64     1.1-2.el6                  epel      54 k
 libwmf-lite               x86_64     0.2.8.4-23.el6             base      51 k
 libxslt                   x86_64     1.1.26-2.el6_3.1           base     452 k
 mysql                     x86_64     5.1.73-3.el6_5             base     894 k
 ocaml                     x86_64     3.12.1-12.el6              hop5     5.5 M
 ocaml-runtime             x86_64     3.12.1-12.el6              hop5     1.4 M
 oniguruma                 x86_64     5.9.1-3.1.el6              base     123 k
 sgml-common               noarch     0.6.3-33.el6               base      43 k
 tbb                       x86_64     4.0-7.20120408.el6         hop5     103 k
 unixODBC                  x86_64     2.2.14-14.el6              base     378 k
 urw-fonts                 noarch     2.4-10.el6                 base     3.1 M
 xorg-x11-font-utils       x86_64     1:7.2-11.el6               base      75 k
Updating for dependencies:
 cpp                       x86_64     4.8.2-8.el6                hop5     5.7 M
 curl                      x86_64     7.29.0-4.el6               hop5     256 k
 gcc                       x86_64     4.8.2-8.el6                hop5      17 M
 gcc-c++                   x86_64     4.8.2-8.el6                hop5     6.9 M
 libcurl                   x86_64     7.29.0-4.el6               hop5     198 k
 libcurl-devel             x86_64     7.29.0-4.el6               hop5     294 k
 libevent                  x86_64     1.4.14b-2.hphp.el6         hop5      66 k
 libgcc                    x86_64     4.8.2-8.el6                hop5      83 k
 libgomp                   x86_64     4.8.2-8.el6                hop5     100 k
 libstdc++                 x86_64     4.8.2-8.el6                hop5     289 k
 libstdc++-devel           x86_64     4.8.2-8.el6                hop5     1.5 M

Transaction Summary
================================================================================
Install      63 Package(s)
Upgrade      11 Package(s)

Total download size: 73 M
Is this ok [y/N]: y

To confirm that HHVM has been installed, type the following command:

# hhvm --version

This will show details of how the hhvm command can be used from the command line. Here is a sample screenshot that illustrates this:

HipHop VM 3.2.0 (rel)
Compiler: tags/HHVM-3.2.0-0-g01228273b8cf709aacbd3df1c51b1e690ecebac8
Repo schema: c52ba40f4a246d35a88f1dfc1daf959851ced8aa

Using Nginx with HHVM

If you are using Nginx with PHP-FPM, you’ll have to modify the configuration file to enable the use of HHVM.

Look for the following section and make sure it’s all uncommented (by remove a # at the beginning of each line)

location ~ \.php$ {
       fastcgi_pass 127.0.0.1:9000;
       fastcgi_index index.php;
       fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
       include fastcgi_params;
}

Create a file called name “hhsvr” to start or restart HHVM service

# vi /usr/bin/hhsrv
# chmod +x /usr/bin/hhsrv

Append

#!/bin/bash
LOG="/var/log/hhvm.log"
CMD="hhvm --mode server -vServer.Type=fastcgi -vServer.Port=9000"
if [ "$1" == "-h" ] || [ "$1" == "--help" ]; then
        echo "To restart HHVM: /usr/bin/hhsrv restart|stop\n"
        exit;
fi

# Restart HHVM
if [ "$1" == "restart" ]; then
        PID=$(ps aux | grep -v grep | grep hhvm | awk '{print $2}')
        echo "Restarting HHVM..."
        if [ "${PID}" != "" ]; then
                kill -9 ${PID}
        fi
        echo "Starting HHVM ..."
        ${CMD} > /dev/null 2>&1 &
        echo "DONE !!!"
fi

# Stop HHVM
if [ "$1" == "stop" ]; then
        PID=$(ps aux | grep -v grep | grep hhvm | awk '{print $2}')
        echo "Restarting HHVM..."
        if [ "${PID}" != "" ]; then
                kill -9 ${PID}
        fi
        echo "HHVM stopped !!!"
fi

Final, Type the following command to start HHVM

# hhsrv restart

The post How To Install HHVM 3.2.0 On CentOS 6.5 appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

Today, When I go to DA Service Monitor, the top 5 processes are using 99.9% of the CPU and they’re all the same processes

11477 root      20   0  324m 196m 1580 R 53.3  5.2  17153:50 /usr/local/directadmin/dataskq                                                                 
 7738 root      20   0  315m 183m 1580 R 49.3  4.8  15702:50 /usr/local/directadmin/dataskq                                                                 
17973 root      20   0  307m 170m 1592 R 59.5  4.5  14271:42 /usr/local/directadmin/dataskq                                                                 
15411 root      20   0  285m 159m 1592 R 58.9  4.2   9984:23 /usr/local/directadmin/dataskq                                                                 
18812 root      20   0  299m 158m 1592 R 50.0  4.2  12829:33 /usr/local/directadmin/dataskq                                                                 
32016 root      20   0  292m 146m 1592 R 49.7  3.8  11400:47 /usr/local/directadmin/dataskq                                                                 
10846 root      20   0  254m 125m 1592 R 61.8  3.3   8605:18 /usr/local/directadmin/dataskq                                                                 
22175 root      20   0  248m 114m 1592 R 54.9  3.0   7239:59 /usr/local/directadmin/dataskq                                                                 
28472 root      20   0  241m 104m 1592 R 52.6  2.7   5916:28 /usr/local/directadmin/dataskq                                                                 
 2738 root      20   0  239m  98m 1700 R 49.7  2.6   4753:17 /usr/local/directadmin/dataskq                                                                 
 7807 root      20   0  212m  84m 1836 R 49.3  2.2   3698:22 /usr/local/directadmin/dataskq                                                                 
11449 root      20   0  202m  75m 1836 R 49.7  2.0   1870:38 /usr/local/directadmin/dataskq                                                                 
 6370 root      20   0  205m  73m 1836 R 50.0  1.9   2744:47 /usr/local/directadmin/dataskq                                                                 
22093 root      20   0  178m  52m 1836 R 52.0  1.4   1042:42 /usr/local/directadmin/dataskq                                                                 
26249 root      20   0  152m  27m 1844 R 54.9  0.7 266:05.08 /usr/local/directadmin/dataskq

My server is having high load and dataskq is on the ‘top’ list. All services was crashed. How do I fix this problem.

The first, I analytic a process to find problem with bellow command

# lsof -p 11477

Output

COMMAND   PID USER   FD   TYPE DEVICE  SIZE/OFF     NODE NAME
dataskq 11477 root  cwd    DIR  259,4      4096 21106008 /usr/local/directadmin
dataskq 11477 root  rtd    DIR  259,4      4096        2 /
dataskq 11477 root  txt    REG  259,4   8893140 21106014 /usr/local/directadmin/dataskq
dataskq 11477 root  mem    REG  259,4     65928  7602205 /lib64/libnss_files-2.12.so
dataskq 11477 root  mem    REG  259,4    122040  7602226 /lib64/libselinux.so.1
dataskq 11477 root  mem    REG  259,4     10192  7602373 /lib64/libkeyutils.so.1.3
dataskq 11477 root  mem    REG  259,4     43728  7602382 /lib64/libkrb5support.so.0.1
dataskq 11477 root  mem    REG  259,4    469528  7602181 /lib64/libfreebl3.so
dataskq 11477 root  mem    REG  259,4    277704  7602374 /lib64/libgssapi_krb5.so.2.2
dataskq 11477 root  mem    REG  259,4    142640  7602213 /lib64/libpthread-2.12.so
dataskq 11477 root  mem    REG  259,4   1921216  7602189 /lib64/libc-2.12.so
dataskq 11477 root  mem    REG  259,4     90880  7602578 /lib64/libgcc_s-4.4.7-20120601.so.1
dataskq 11477 root  mem    REG  259,4    596264  7602197 /lib64/libm-2.12.so
dataskq 11477 root  mem    REG  259,4    987096 21103632 /usr/lib64/libstdc++.so.6.0.13
dataskq 11477 root  mem    REG  259,4    110960  7602215 /lib64/libresolv-2.12.so
dataskq 11477 root  mem    REG  259,4     14664  7602247 /lib64/libcom_err.so.2.1
dataskq 11477 root  mem    REG  259,4    174840  7602378 /lib64/libk5crypto.so.3.1
dataskq 11477 root  mem    REG  259,4    941920  7602380 /lib64/libkrb5.so.3.3
dataskq 11477 root  mem    REG  259,4     19536  7602195 /lib64/libdl-2.12.so
dataskq 11477 root  mem    REG  259,4     98661 21106191 /usr/local/lib/libz.so.1.2.3
dataskq 11477 root  mem    REG  259,4   1950976 21104485 /usr/lib64/libcrypto.so.1.0.1e
dataskq 11477 root  mem    REG  259,4     40400  7602193 /lib64/libcrypt-2.12.so
dataskq 11477 root  mem    REG  259,4    437016 21104487 /usr/lib64/libssl.so.1.0.1e
dataskq 11477 root  mem    REG  259,4    154520  7602580 /lib64/ld-2.12.so
dataskq 11477 root    0r   REG  259,4      2795  8792180 /home/tmp/quota-dump (deleted)
dataskq 11477 root    1r   REG  259,4 710688943 21633577 /usr/local/directadmin/data/users/detvl/bandwidth.tally

And type the following command

# tail -n 10 /var/log/directadmin/errortaskq.log

Output

==> /var/log/directadmin/errortaskq.log <==
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing
2014:08:28-09:07:38: Dataskq USR1 signal: Currently processing: Tally::get_bandwidth_breakdown(..., 0) for detvl : done reading, begin parsing

Maybe, I get problem with parser processing log. Next, I check size of "/usr/local/directadmin/data/users/detvl/bandwidth.tally". Type the following command

# du -sh /usr/local/directadmin/data/users/detvl/bandwidth.tally

Output

678M	/usr/local/directadmin/data/users/detvl/bandwidth.tally

It's very big. To solve the problem, The first I kill all dataskq processes with bellow command

# killall -USR1 dataskq

Or run script

#!/bin/bash
PIDS=`ps aux | grep dataskq | awk '{print $2}'`
for P in $PIDS
do
kill -9 $P
done

The second, I truncate log data of file bandwidth.tally, type the following command

# echo "" > /usr/local/directadmin/data/users/detvl/bandwidth.tally

Finally, I set priority to slow down the dataskq, type the following command

# vi /etc/cron.d/directadmin_cron
# Replace with
* * * * * root nice -n 19 /usr/local/directadmin/dataskq

The post How Do I Fix dataskq Causing High Load On DirectAdmin ? appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

Today, When I’m running bundle install and I’m having this error

Gem files will remain installed in /usr/local/lib/ruby/gems/1.9.1/gems/nokogiri-1.6.2.1 for inspection.
Results logged to /usr/local/lib/ruby/gems/1.9.1/gems/nokogiri 1.6.2.1/ext/nokogiri/gem_make.out
An error occurred while installing nokogiri (1.6.2.1), and Bundler cannot continue.
Make sure that `gem install nokogiri -v '1.6.2.1'` succeeds before bundling.

I try to run command

gem install nokogiri -v '1.6.2.1'

I also have installed nokogiri succeed, When I run

gem list

I have

nokogiri (1.6.2.1)

But when running bundle install it continues saying that.
And , I found a solution to solve it. I use the system library instead, I reinstall nokogiri as follows:

gem install nokogiri -- --use-system-libraries

After, I rebuild Bundle succeed

The post How to fix “An error occurred while installing nokogiri (1.6.2.1)” appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

On some occasions apache server will just fail, and become crashed, failing to restart with an error message like

# tail /var/log/httpd/error_log

[Sun Dec 22 10:05:27.006998 2013] [core:emerg] [pid 15001:tid 140145945569216] (28)No space left on device: AH00023: Couldn't create the fcgid-proctbl mutex
[Sun Dec 22 10:05:38.000403 2013] [core:emerg] [pid 15018:tid 140368783902656] (28)No space left on device: AH00023: Couldn't create the proxy mutex
[Sun Dec 22 10:05:38.000456 2013] [proxy:crit] [pid 15018:tid 140368783902656] (28)No space left on device: AH02478: failed to create proxy mutex

If you see an error similar to the bellow, it could indicate that your server has run out of semaphores. To see how many semaphores are being used, type the following command

# ipcs -s

------ Semaphore Arrays --------
key        semid      owner      perms      nsems
0x00000000 38797312   apache     600        1
0x00000000 38731777   apache     600        1
0x00000000 38830082   apache     600        1
0x00000000 38961155   apache     600        1
0x00000000 38895620   apache     600        1
0x00000000 38993925   apache     600        1
0x00000000 39026694   apache     600        1
0x00000000 39059463   apache     600        1
0x00000000 39092232   apache     600        1
0x00000000 39125001   apache     600        1
0x00000000 39157770   apache     600        1
0x00000000 39288843   apache     600        1
0x00000000 39223308   apache     600        1
0x00000000 39321613   apache     600        1
0x00000000 39354382   apache     600        1
0x00000000 39387151   apache     600        1
0x00000000 39419920   apache     600        1
0x00000000 39452689   apache     600        1
0x00000000 39485458   apache     600        1

To fix it and get Apache server started again, we must clean the semaphores. Run the following command to flush them:

for whatever in `ipcs -s | awk '{print $2}'`; do ipcrm -s $whatever; done

If that command may not work on older server then you may need to do the following

# /etc/init.d/httpd stop
# ipcs -s | grep nobody | gawk '{ print $2 }' | xargs -n 1 ipcrm sem
# /etc/init.d/httpd start

Final, you may want to increase the semaphore limits on your server. You can do that by adding the following to the /etc/sysctl.conf

kernel.msgmni = 512
kernel.sem = 250 128000 32 512

After, type the following command to update new setting for kernel

# sysctl -p

The post How To Fix Apache Error “(28)No space left on device” appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

Pure-FTPd is a free (BSD), secure, production-quality and standard-conformant FTP server. It doesn’t provide useless bells and whistles, but focuses on efficiency and ease of use. It provides simple answers to common needs, plus unique useful features for personal users as well as hosting providers. In this article, I’ll show you How do I install Pure-FTPd on CentOS 6.3 via yum command.

Install the extra repositories

The first step requires downloading some RPM files that contain the additional YUM repository definitions.

# rpm -Uvh http://mirror-fpt-telecom.fpt.net/fedora/epel/6/i386/epel-release-6-8.noarch.rpm

Sample output

Retrieving http://mirror-fpt-telecom.fpt.net/fedora/epel/6/i386/epel-release-6-8.noarch.rpm
Preparing...                ########################################### [100%]
        package epel-release-6-8.noarch is already installed

Installing Pure-FTPd

To install pure-ftpd type the following command

# yum install pure-ftpd -y

Sample output

Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package pure-ftpd.x86_64 0:1.0.36-1.el6.rf will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package          Arch          Version                   Repository       Size
================================================================================
Installing:
 pure-ftpd        x86_64        1.0.36-1.el6.rf           rpmforge        446 k

Transaction Summary
================================================================================
Install       1 Package(s)

Total download size: 446 k
Installed size: 1.4 M
Downloading Packages:
pure-ftpd-1.0.36-1.el6.rf.x86_64.rpm                     | 446 kB     00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : pure-ftpd-1.0.36-1.el6.rf.x86_64                             1/1
  Verifying  : pure-ftpd-1.0.36-1.el6.rf.x86_64                             1/1

Installed:
  pure-ftpd.x86_64 0:1.0.36-1.el6.rf

Complete!

Configuring the Pure-FTPd server

Type the following command to edit Pure-FTPd configuration file

# vi /etc/pure-ftpd/pure-ftpd.conf

Make sure you have these options enabled

# If you want simple Unix (/etc/passwd) authentication, uncomment this
UnixAuthentication            yes

To secure Pure-FTPd, make sure follow these options

# Cage in every user in his home directory
ChrootEveryone              yes

# If you want to log all client commands, set this to "yes".
# This directive can be duplicated to also log server responses.
VerboseLog                  yes

# Disallow anonymous connections. Only allow authenticated users.
NoAnonymous                 yes

Turn on and save pure-ftpd

Type the following two commands to turn on pure-ftpd:

# chkconfig pure-ftpd on
# service pure-ftpd start

Iptables open FTP Port 21 and 20

FTP server use both port 21 and 20 (port 21 for the command port and port 20 for the data). To open two port 20 & 21 on Iptables let’s do step by step.

The first, type the following command to load two iptables modules

# modprobe ip_conntrack
# modprobe ip_conntrack_ftp

Type the following commands to add the iptables rules for incoming request on port 20 & 21

# iptables -A INPUT -p tcp -m tcp --dport  20 -j ACCEPT
# iptables -A INPUT -p tcp -m tcp --dport  21 -j ACCEPT

The post How To Install Pure-FTPd on CentOS 6 Via Yum appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

This extension implements PHP bindings for Subversion (SVN), a version control system, allowing PHP scripts to communicate with SVN repositories and working copies without direct command line calls to the svn executable. In this tutorial, I will show you How to install Subversion (SVN) extension working with PHP 5.3.

The first, download & extract latest version of SVN extension, login as root and type the following command

# wget http://pecl.php.net/get/svn-1.0.2.tgz
# tar zxvf svn-1.0.2.tgz
# cd svn-1.0.2

The second, execute phpize command will generate additional configuration files

# /webserver/php/bin/phpize

Sample output

Configuring for:
PHP Api Version:         20090626
Zend Module Api No:      20090626
Zend Extension Api No:   220090626

The next, type the following command to compile the svn extension source

# ./configure
# make & make install

If you get an errors like

configure: error: Cannot find php-config. Please use --with-php-config=PATH

To fix it, enter

# ./configure --with-php-config=<path to php-config file>

Or, if you get an error like

checking for svn includes... configure: error: failed to find svn_client.h

To fix it, enter

# yum install subversion subversion-devel neon-devel -y

Sample output

Dependency Installed:
  apr.x86_64 0:1.3.9-5.el6_2
  apr-devel.x86_64 0:1.3.9-5.el6_2
  apr-util.x86_64 0:1.3.9-3.el6_0.1
  apr-util-devel.x86_64 0:1.3.9-3.el6_0.1
  cyrus-sasl-devel.x86_64 0:2.1.23-13.el6_3.1
  db4-cxx.x86_64 0:4.7.25-17.el6
  db4-devel.x86_64 0:4.7.25-17.el6
  gnutls-devel.x86_64 0:2.8.5-10.el6_4.1
  libproxy.x86_64 0:0.3.0-4.el6_3
  libproxy-bin.x86_64 0:0.3.0-4.el6_3
  libproxy-python.x86_64 0:0.3.0-4.el6_3
  neon.x86_64 0:0.29.3-2.el6
  openldap-devel.x86_64 0:2.4.23-32.el6_4
  pakchois.x86_64 0:0.4-3.2.el6
  perl-URI.noarch 0:1.40-2.el6

Dependency Updated:
  gnutls.x86_64 0:2.8.5-10.el6_4.1       openldap.x86_64 0:2.4.23-32.el6_4

Finally, type the following command to enable SVN extension

# echo "extension=svn.so" >> /etc/php.ini

To check SVN extension is loaded, type the following command

# php -i | grep -i svn

Sample output

svn support => enabled
svn client version => 1.6.11
svn extension version => 1.0.2

The post How To Install Subversion (SVN) Extension Working With PHP 5.3 appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

I have setup an web server using Apache on CentOS. How do I configure firewall using iptables to allow or block access to the web server under CentOS ? In Tutorial I will show you How do I do it.

What is iptables ?

iptables is a user space application program that allows a system administrator to configure the tables provided by the Linux kernel firewall (implemented as different Netfilter modules) and the chains and rules it stores. Different kernel modules and programs are currently used for different protocols; iptables applies to IPv4, ip6tables to IPv6, arptables to ARP, and ebtables for Ethernet frames.

Setting up iptables

In most Linux distros including Redhat / CentOS Linux installs iptables by default. You can use the following procedure to verify that iptables has been installed. Open terminal and type the following command:

# iptables -V

Sample outputs:

iptables v1.4.7

You can use the following command to view the status of iptables command, enter:

# yum info iptables

Sample outputs:

Installed Packages
Name        : iptables
Arch        : x86_64
Version     : 1.4.7
Release     : 5.1.el6_2
Size        : 833 k
Repo        : installed
From repo   : anaconda-CentOS-201207061011.x86_64
Summary     : Tools for managing Linux kernel packet filtering capabilities
URL         : http://www.netfilter.org/
License     : GPLv2
Description : The iptables utility controls the network packet filtering code in
            : the Linux kernel. If you need to set up firewalls and/or IP
            : masquerading, you should install this package.
...

If the above message does not appear, then type the following command to install iptables

# yum install iptables -y

Configuration iptables for a web server

The default iptables configuration on CentOS does not allow access to the HTTP (TCP PORT # 80) and HTTPS (TCP PORT # 443) ports used by the Apache web server. You can do step by step to configure
Step 1: Flush or remove all iptables rules

# iptables -F
# iptables -X
# iptables -t nat -F
# iptables -t nat -X
# iptables -t mangle -F
# iptables -t mangle -X

Step 2: Set default rules

# iptables -P INPUT DROP
# iptables -P FORWARD ACCEPT
# iptables -P OUTPUT ACCEPT

Step 3: Allow access to HTTP (80) and HTTPS (443)

# iptables -A INPUT -i lo -j ACCEPT 
# iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT 
# iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
# iptables -A INPUT -p icmp -j ACCEPT
# iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
# iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT

Turn on and save iptables

Type the following two commands to turn on firewall:

# chkconfig iptables on
# service iptables save

Anti synflood with iptables

Edit /etc/sysctl.conf to defend against certain types of attacks and append / update as follows:

net.ipv4.tcp_syncookies = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.netfilter.ip_conntrack_max = 1048576

And type the following command

# iptables -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 --syn -m recent --set --name CHECK --rsource 
# iptables -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 --syn -m recent --update --seconds 5 --hitcount 15 --rttl --name CHECK --rsource -j DROP 

The post How To Setup Iptables Firewall For A Web Server On CentOS appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

Protect the server from Flood attacks , Using the property Port Flood Protection In firewall CSF . After doing the necessary settings will be able to determine the number of allowed connections Same time for each IP tries to connect to the server.

So How to Make a flood attack ?
Logically flood attacks are two ways :
first through a specific communication
the second through multiple connections each connection of these connections connect with the provider
Requirements

1. Installing firewall CSF last version
2. Enabled IPT and works well
3. Model IPT_Recent special for IPT

Application

Through edited the configuration file special for CSF it is located in the following path:

root@server:$ nano /etc/csf/csf.conf

We pressing CTRL + W and look for PORTFLOOD we will find the line as follows default :

PORTFLOOD = " "

put inside ” ” Settings that we want ,as in the following example:

PORTFLOOD = "80;tcp;20;10"

80 is the port , TCP is the protocol , 20 is the number of connections allowed at the same time , 10 is time of pause temporarily after the 10 seconds is allowed IP make new contacts

Important note: ipt_recent can count 20 Packets for each Title , So you can change the number of connections from 1 to 20 only

Is there a possibility of adding more than one port ?yes be as follows (Just an example) :

PORTFLOOD = "22;tcp;10;200,21;tcp;15;100,80;tcp;20;5"

Note that when we add a new port we put a comma (,)

In the previous example you choose more than one port are 22, 21 and 80 And you can add more and you can change the number of connections and also change the protocol type, for example, from TCP to UDP after the completion of the edited we save the file : CTRL + X, Y, and then Enter button.

Finally, do not forget to restart CSF with the following command:

root@server:$ csf -r

Thank You ,,

The post Repel port flood by CSF and IPT_Recent appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

There are a lot of people do not know what these variables and how they can be used , this Variables exist in php.ini file , the php.ini file is contains settings PHP on server , and for each variable in the php.ini file have a special role and can be disabled and activated with ON and Off

Disable = Off

Activate = On

So now I will explain to you the benefit of each function and put you a choice in the activation and disable

expose_php

Is a a property from which to see PHP version on the server so disabling means not making available to the hacker to know the version of PHP

allow_url_fopen

When you disable this function no one will be able to contain another link in a specific page , but some scripts like AM4SS – Vbulletin need this function for the arrival of notifications within the Admin Control Panel

register_globals

When you Desable this function become possible to control the content of php files difficult and does not allow the Edited only by the owner
So now we come to the disabled and activation of these properties

Enter in the shell and modify the php.ini file with the following command

nano /usr/local/lib/php.ini

By pressing Ctrl + W will open new box writes what you want to search for inside file

Looking for the variable you want edited for example

allow_url_fopen

You’ll find as follows :

allow_url_fopen = On

Mark value after the mark (=) On for activate Off  for disabled , Apply it with the rest of the properties , After completion of the amendment to click on the keys CTRL + X + Y then Enter button

You will see a new command line in the main interface in shell
Observation : you must restart Apache after any amendment to this file for edited is defined in the php and Apache
To restart apache :

service httpd restart

Or you can restart apache using server Control Panel WHM In a private box to restart services From there you can restart any service you want to.

The post What is the role of this variables in php.ini file (expose_php – allow_url_fopen – register_globals) ? appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.

Wowza Media Server 3 is the high-performance, high-value unified streaming media and video software for any screen. For live or on-demand streaming to computers, mobile devices and IPTV/OTT endpoints, the Wowza® platform delivers superior features, benefits and functionality. This tutorial shows how I can install Wowza Media Server 3 on a CentOS 6.

First, update update CentOS to latest version and You will need Java installed. Type the following command:

# yum update -y
# yum install java* -y

Installing Wowza Media Server 3

You need to download the Wowza Media Server 3 from http://www.wowza.com/pricing/installer. Type the following command

# wget http://www.wowza.com/downloads/WowzaMediaServer-3-1-2/WowzaMediaServer-3.1.2.rpm.bin

Next, type the following command to install Wowza Media Server 3

# chmod +x WowzaMediaServer-3.1.2.rpm.bin
# ./WowzaMediaServer-3.1.2.rpm.bin

Setting up the License

In order to use Wowza Media Server, you’ll need a license, which can be obtained from the Wowza website (select a trail or developer license).
After, moving to the Wowza install directory and run the start up script

# cd /usr/local/WowzaMediaServer
# bin/startup.sh

If you wish to add WowzaMediaServer service to start when the machine boot, type the following command

# chkconfig --level 345 WowzaMediaServer on

Installing Wowza Examples

Type the following command

# cd /usr/local/WowzaMediaServerPro/examples
# ./install.sh
# /etc/init.d/WowzaMediaServer restart

If You are using a firewall, You need open the port: 1935. Type the following command if You are using iptables

# iptables -I INPUT -p tcp --dport 1935 -j ACCEPT

Default, media files to hosted at: /usr/local/WowzaMediaServer/content. You can copy movie file to here.
After, moving to /usr/local/WowzaMediaServer/examples/SimpleVideoStreaming and copy a folder called “client” to desktop.
Run “simplevideostreaming.html” in folder client. It look like

The post How To Install Wowza Media Server 3 On CentOS 6 appeared first on lifeLinux: Linux Tips, Hacks, Tutorials, Ebooks.