—

              
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
package Apache2::SizeLimit;
use strict;
use warnings;
use Config;
use APR::Pool ();
use Apache2::RequestUtil ();
use Apache2::MPM ();
use Apache2::Const -compile => qw (DECLINED OK);
use ModPerl::Util ();
die "Apache2::SizeLimit at the moment works only with non-threaded MPMs"
    if Apache2::MPM->is_threaded();
use constant IS_WIN32 => $Config{'osname'} eq 'MSWin32' ? 1 : 0;
# 2.x requires 5.6.x+ so 'our' is okay
our $VERSION = '0.98';
use Apache::SizeLimit::Core qw(
                             $MAX_PROCESS_SIZE
                             $MAX_UNSHARED_SIZE
                             $MIN_SHARE_SIZE
                             $CHECK_EVERY_N_REQUESTS
                             $START_TIME
                             $VERSION
                             $REQUEST_COUNT
                            );
our @ISA = qw(Apache::SizeLimit::Core);
__PACKAGE__->set_check_interval(1);
sub handler {
    my $r = shift || Apache2::RequestUtil->request();
    return Apache2::Const::DECLINED unless $r->is_initial_req();
    # we want to operate in a cleanup handler
    if (ModPerl::Util::current_callback() eq 'PerlCleanupHandler') {
        return __PACKAGE__->_exit_if_too_big($r);
    }
    else {
        __PACKAGE__->add_cleanup_handler($r);
    }
    return Apache2::Const::DECLINED;
}
sub add_cleanup_handler {
    my $class = shift;
    my $r = shift || Apache2::RequestUtil->request();
    return unless $r;
    return if $r->pnotes('size_limit_cleanup');
    # This used to use $r->post_connection but there's no good way to
    # test it, since apparently it does not push a handler onto the
    # PerlCleanupHandler phase. That means that there's no way to use
    # $r->get_handlers() to check the results of calling this method.
    # $r->get_handlers() SEGFAULTS at the moment in 2.x
    $r->pool->cleanup_register(sub { $class->_exit_if_too_big(shift) }, $r);
    $r->pnotes(size_limit_cleanup => 1);
}
sub _exit_if_too_big {
    my $class = shift;
    my $r = shift;
    return Apache2::Const::DECLINED
        if ($class->get_check_interval()
             && ($class->get_and_pinc_request_count % $class->get_check_interval()));
    $class->set_start_time();
    if ($class->_limits_are_exceeded()) {
        my ($size, $share, $unshared) = $class->_check_size();
        if (IS_WIN32 || $class->_platform_getppid() > 1) {
            # this is a child httpd
            my $e   = time() - $class->get_start_time();
            my $msg = "httpd process too big, exiting at SIZE=$size KB";
            $msg .= " SHARE=$share KB UNSHARED=$unshared" if $share;
            $msg .= " REQUESTS=" . $class->get_request_count();
            $msg .= " LIFETIME=$e seconds";
            $class->_error_log($msg);
            $r->child_terminate();
        }
        else {
            # this is the main httpd, whose parent is init?
            my $msg = "main process too big, SIZE=$size KB ";
            $msg .= " SHARE=$share KB" if ($share);
            $class->_error_log($msg);
        }
    }
    return Apache2::Const::OK;
}
{
    # Deprecated APIs
    # If you use these, you must set
    # PerlOptions +GlobalRequest -- we have no $r otherwise
        # This is differs a from the mp1 series
         
    sub setmax {
        my $class = __PACKAGE__;
        $class->set_max_process_size(shift);
        $class->add_cleanup_handler();
    }
    sub setmin {
        my $class = __PACKAGE__;
        $class->set_min_shared_size(shift);
        $class->add_cleanup_handler();
    }
    sub setmax_unshared {
        my $class = __PACKAGE__;
        $class->set_max_unshared_size(shift);
        $class->add_cleanup_handler();
    }
}
1;
__END__
HideShow 303 lines of Pod
=head1 NAME
Apache2::SizeLimit - Because size does matter.
=head1 SYNOPSIS
    PerlLoadModule Apache2::SizeLimit
    <Perl>
     Apache2::SizeLimit->set_max_process_size(150_000);   # Max size in KB
     Apache2::SizeLimit->set_min_shared_size(10_000);     # Min share in KB
     Apache2::SizeLimit->set_max_unshared_size(120_000);  # Max unshared size in KB
    </Perl>
    PerlCleanupHandler Apache2::SizeLimit
=head1 DESCRIPTION
******************************** NOTICE *******************
    This version is only for httpd 2.x and mod_perl 2.x
    series.
    For httpd 1.3.x / mod_perl 1.x Apache::SizeLimit 
    documentation please read the perldoc in 
    lib/Apache/SizeLimit.pm
******************************** NOTICE *******************
This module allows you to kill off Apache httpd processes if they grow
too large. You can make the decision to kill a process based on its
overall size, by setting a minimum limit on shared memory, or a
maximum on unshared memory.
You can set limits for each of these sizes, and if any limit is
exceeded, the process will be killed.
You can also limit the frequency that these sizes are checked so that
this module only checks every N requests.
This module is highly platform dependent, please read the
L<PER-PLATFORM BEHAVIOR> section for details. It is possible that this
module simply does not support your platform.
=head1 API
You can set set the size limits from a Perl module or script loaded by
Apache by calling the appropriate class method on C<Apache2::SizeLimit>:
=over 4
=item * Apache2::SizeLimit->set_max_process_size($size)
This sets the maximum size of the process, including both shared and
unshared memory.
=item * Apache2::SizeLimit->set_max_unshared_size($size)
This sets the maximum amount of I<unshared> memory the process can
use.
=item * Apache2::SizeLimit->set_min_shared_size($size)
This sets the minimum amount of shared memory the process must have.
=back
The two methods related to shared memory size are effectively a no-op
if the module cannot determine the shared memory size for your
platform. See L<PER-PLATFORM BEHAVIOR> for more details.
=head2 Running the handler()
There are several ways to make this module actually run the code to
kill a process.
The simplest is to make C<Apache2::SizeLimit> a C<PerlCleanupHandler>
in your Apache config:
    PerlCleanupHandler Apache2::SizeLimit
This will ensure that C<< Apache2::SizeLimit->handler() >> is run
for all requests.
If you want to combine this module with a cleanup handler of your own,
make sure that C<Apache2::SizeLimit> is the last handler run:
    PerlCleanupHandler  Apache2::SizeLimit My::CleanupHandler
Remember, mod_perl will run stacked handlers from right to left, as
they're defined in your configuration.
If you have some cleanup code you need to run, but stacked handlers
aren't appropriate for your setup, you can also explicitly call the
C<< Apache2::SizeLimit->handler() >> function from your own cleanup
handler:
    package My::CleanupHandler
    sub handler {
        my $r = shift;
        # Causes File::Temp to remove any temp dirs created during the
        # request
        File::Temp::cleanup();
        return Apache2::SizeLimit->handler($r);
    }
=over 4
=item * Apache2::SizeLimit->add_cleanup_handler($r)
You can call this method inside a request to run
C<Apache2::SizeLimit>'s C<handler()> method for just that request. It's
safe to call this method repeatedly -- the cleanup will only be run
once per request.
=back
=head2 Checking Every N Requests
Since checking the process size can take a few system calls on some
platforms (e.g. linux), you may not want to check the process size for
every request.
=over 4
=item * Apache2::SizeLimit->set_check_interval($interval)
Calling this causes C<Apache2::SizeLimit> to only check the process
size every C<$interval> requests. If you want this to affect all
processes, make sure to call this during server startup.
=back
=head1 SHARED MEMORY OPTIONS
In addition to simply checking the total size of a process, this
module can factor in how much of the memory used by the process is
actually being shared by copy-on-write. If you don't understand how
memory is shared in this way, take a look at the mod_perl docs at
http://perl.apache.org/docs/.
You can take advantage of the shared memory information by setting a
minimum shared size and/or a maximum unshared size. Experience on one
heavily trafficked mod_perl site showed that setting maximum unshared
size and leaving the others unset is the most effective policy. This
is because it only kills off processes that are truly using too much
physical RAM, allowing most processes to live longer and reducing the
process churn rate.
=head1 PER-PLATFORM BEHAVIOR
This module is highly platform dependent, since finding the size of a
process is different for each OS, and some platforms may not be
supported. In particular, the limits on minimum shared memory and
maximum shared memory are currently only supported on Linux and BSD.
If you can contribute support for another OS, patches are very
welcome.
Currently supported OSes:
=head2 linux
For linux we read the process size out of F</proc/self/statm>. If you
are worried about performance, you can consider using C<<
Apache2::SizeLimit->set_check_interval() >> to reduce how often this
read happens.
=head2 solaris 2.6 and above
For solaris we simply retrieve the size of F</proc/self/as>, which
contains the address-space image of the process, and convert to KB.
Shared memory calculations are not supported.
NOTE: This is only known to work for solaris 2.6 and above. Evidently
the F</proc> filesystem has changed between 2.5.1 and 2.6. Can anyone
confirm or deny?
=head2 BSD (and OSX)
Uses C<BSD::Resource::getrusage()> to determine process size.  This is
pretty efficient (a lot more efficient than reading it from the
F</proc> fs anyway).
According to recent tests on OSX (July, 2006), C<BSD::Resource> simply
reports zero for process and shared size on that platform, so OSX is
not supported by C<Apache2::SizeLimit>.
=head2 AIX?
Uses C<BSD::Resource::getrusage()> to determine process size.  Not
sure if the shared memory calculations will work or not.  AIX users?
=head2 Win32
Uses C<Win32::API> to access process memory information.
C<Win32::API> can be installed under ActiveState perl using the
supplied ppm utility.
=head2 Everything Else
If your platform is not supported, then please send a patch to check
the process size. The more portable/efficient/correct the solution the
better, of course.
=head1 ABOUT THIS MODULE
This module was written in response to questions on the mod_perl
mailing list on how to tell the httpd process to exit if it gets too
big.
Actually, there are two big reasons your httpd children will grow.
First, your code could have a bug that causes the process to increase
in size very quickly. Second, you could just be doing operations that
require a lot of memory for each request. Since Perl does not give
memory back to the system after using it, the process size can grow
quite large.
This module will not really help you with the first problem. For that
you should probably look into C<Apache::Resource> or some other means
of setting a limit on the data size of your program.  BSD-ish systems
have C<setrlimit()>, which will kill your memory gobbling processes.
However, it is a little violent, terminating your process in
mid-request.
This module attempts to solve the second situation, where your process
slowly grows over time. It checks memory usage after every request,
and if it exceeds a threshold, exits gracefully.
By using this module, you should be able to discontinue using the
Apache configuration directive B<MaxRequestsPerChild>, although for
some folks, using both in combination does the job.
=head1 DEPRECATED APIS
Previous versions of this module documented three globals for defining
memory size limits:
=over 4
=item * $Apache2::SizeLimit::MAX_PROCESS_SIZE
=item * $Apache2::SizeLimit::MIN_SHARE_SIZE
=item * $Apache2::SizeLimit::MAX_UNSHARED_SIZE
=item * $Apache2::SizeLimit::CHECK_EVERY_N_REQUESTS
=back
Direct use of these globals is deprecated, but will continue to work
for the foreseeable future.
It also documented three functions for use from registry scripts:
=over 4
=item * Apache2::SizeLimit::setmax()
=item * Apache2::SizeLimit::setmin()
=item * Apache2::SizeLimit::setmax_unshared()
=back
Besides setting the appropriate limit, these functions I<also> add a
cleanup handler to the current request.  In the 2.x series of mod_perl
to use the deprecated functions, you must set PerlOptions +GlobalRequest
accordingly.
=head1 SUPPORT
The Apache-SizeLimit project is co-maintained by several developers,
who take turns at making CPAN releases. Therefore you may find several
CPAN directories containing Apache-SizeLimit releases. The best way to
find the latest release is to use http://search.cpan.org/.
If you have a question or you want to submit a bug report or make a
contribution, please do not email individual authors, but send an
email to the modperl <at> perl.apache.org mailing list. This list is
moderated, so unless you are subscribed to it, your message will have
to be approved first by a moderator. Therefore please allow some time
(up to a few days) for your post to propagate to the list.
=head1 AUTHOR
Doug Bagley <doug+modperl@bagley.org>, channeling Procrustes.
Brian Moseley <ix@maz.org>: Solaris 2.6 support
Doug Steinwand and Perrin Harkins <perrin@elem.com>: added support for
shared memory and additional diagnostic info
Matt Phillips <mphillips@virage.com> and Mohamed Hendawi
<mhendawi@virage.com>: Win32 support
Dave Rolsky <autarch@urth.org>, maintenance and fixes outside of
mod_perl tree (0.9+).
=cut