Mostly about my amusement

Day: December 5, 2009 (page 1 of 1)

Beware the canary mismatch on efree monster

For traffic logs, I use Clicky Web Analytics and take a look from time to time. See that flat dark blue line? Around noon on December 3rd my blog stopped serving web pages and it was not until about 5 hours later that I noticed it. I don’t get a lot of traffic but I do like my blog to be working.

It wasn’t that my VPS went nuts, the CPU usage was fine. What was happening was that my PHP interpreter was tossing hundreds of these errors.

[Thu Dec 03 12:17:27 2009] [error] [client 66.249.71.233] ALERT - canary mismatch on efree() - heap overflow detected

Not cool and until I restarted Apache2, my blog was not serving anything. PHP just kept blowing up. This has been an ongoing problem for me that has been attributed to the Suhosin PHP security patch and I had not found the magic bullet to fix.

I’m not going to disable the hardened PHP. That’s like turning off the safety switch on an excercise treadmill. It’s juts not safe.

As a work around I have done the following: I activated the WP Super Cache plugin, removed the Xcache op cache I setup, and disabled the ssh2 PHP extension I installed.

The WP Super Cache created static HTML pages for your dynamic content.  It does cache expiration, garbage collection, etc. and limits the amount of time PHP needs to be run.

The XCache was a hold over from when I was running my blog on a Pentium II.  The VPS I use is very responsive and losing it does not hurt me.  Using the Pingdom tools I can see that I still get a good response from my web server.

Losing the ssh2 was easy; I only added it to my PHP to be able to answer a WordPress support forum questions. I never use it. I’ll look for any other PHP extensions that I added as a “what the hell” but so far so good. No more canary mismatch errors as yet.

Now trying OpenDNS SmartCache

If you are an IT/Network professional with UNIX/Linux/BSD experience and you have a network at home, you really can’t resist playing around. It’s the best way to learn and causing outages at home will only irritate your family.

I’ve been using Google Public DNS for a day or two and it’s fast and responsive. Even though a simple test shows that Google’s Public DNS on a per query basis is slower, the end user experience has been faster (at least for me). But OpenDNS is more feature rich and I’d like to see if I can get a good experience using it.

I revisited my OpenDNS account dashboard and found out that they now offer an option called SmartCache, which I have enabled. I also downloaded the OpenDNS Updater onto my kitchen notebook.  That notebook is on all the time and it make’s sense to run it there. FIOS has already once given me a new IP address and I want my OpenDNS settings to follow my network at home.

OpenDNS’s blog has a good explanation for SmartCache here and more info here. It’s a useful feature and you have to applaud them for offering it to their free account users.

End user experience is a very subjective thing so I’ll see if OpenDNS has the same feel or better as Google Public DNS. Like most folks, I just want web browsing to work and be fast.