Security

How to Fix CSF/LFD “Excessive Resource Usage” Floods for PHP-FPM and dbus on AlmaLinux 9

If you have recently migrated to AlmaLinux 9 (or any RHEL 9 derivative) and run ConfigServer Security & Firewall (CSF) with Login Failure Daemon (LFD), you have probably noticed your inbox filling up with alerts like these: Time: Wed Feb 19 03:14:22 2025 Account: root Resource: Virtual Memory Size Exceeded: 384 > 256 (MB) Executable: […]

How to Fix CSF/LFD “Excessive Resource Usage” Floods for PHP-FPM and dbus on AlmaLinux 9 Read Post »

PHP, Scripts

Bulk PHP-FPM Pool Tuner for Existing Accounts

WHM only applies PHP-FPM settings to new accounts, and as we know, the cPanel defaults may not be appropriate for higher-traffic sites. This script updates all existing accounts. #!/bin/bash # bulk-phpfpm-tuner.sh # Updates PHP-FPM pool settings for all accounts based on server RAM TOTAL_RAM_MB=$(free -m | awk ‘/^Mem:/{print $2}’) RESERVED_MB=2048 # Reserve for OS/MySQL ACCOUNTS=$(whmapi1

Bulk PHP-FPM Pool Tuner for Existing Accounts Read Post »

Fixes, Howto, PHP

PHP-FPM pm.max_children Reached on cPanel Servers

See Also: Bulk PHP-FPM Pool Tuner for Existing Accounts If you manage cPanel servers, you have almost certainly encountered this log entry at some point: [pool username] WARNING: server reached pm.max_children setting (5), consider raising it It looks simple enough. PHP-FPM is telling you it ran out of worker processes to handle incoming requests. But

PHP-FPM pm.max_children Reached on cPanel Servers Read Post »

Apache, Howto, Linux, Networking, Security

PCI DSS Compliance Cookbook for cPanel Servers

If you’re running cPanel servers that process, store, or transmit credit card data, or even connect to systems that do, PCI DSS compliance isn’t optional. It’s a requirement that carries real financial and legal teeth. With PCI DSS v4.0.1 now fully enforced (the March 31, 2025 deadline for all “best practice” requirements has passed), every

PCI DSS Compliance Cookbook for cPanel Servers Read Post »

Apps, Howto, Linux, Security

CSF Post-Shutdown Survival Guide: Migration & Configuration

  For over a decade, ConfigServer Security & Firewall (CSF) was the undisputed firewall solution for cPanel/WHM servers. If you ran a shared hosting environment, a reseller setup, or even a standalone VPS with cPanel, CSF was almost certainly part of your security stack. Its WHM integration, Login Failure Daemon (LFD), and straightforward configuration made

CSF Post-Shutdown Survival Guide: Migration & Configuration Read Post »

Scroll to Top