Why nginx listening on worker

hilou · 07-05-2016, 03:27 AM

Hi All,

I just find that my nginx is listening on worker. But why ?

Code:

# netstat -tlnp | grep nginx
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      23620/nginx: worker

I can see that some listening on master, some on worker.

TB0ne · 07-05-2016, 07:56 AM

Quote:

Originally Posted by hilou

Hi All,
I just find that my nginx is listening on worker. But why ?

Code:

# netstat -tlnp | grep nginx
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      23620/nginx: worker

I can see that some listening on master, some on worker.

Since you tell us ABSOLUTELY NOTHING about how you have things configured, version of nginx, version/distro of Linux, etc., what do you think we'll be able to tell you? Read the "Question Guidelines" link in my posting signature....and perhaps the Beginners guide to nginx:

http://nginx.org/en/docs/beginners_guide.html

Pay particular attention to the second paragraph.

hilou · 07-06-2016, 01:25 AM

Sorry, it's absolutely my fault.

Code:

nginx version: nginx/1.8.0
Linx distro: CentOS Linux 7 (Core)

Nginx main config:

user  nobody;
worker_processes  100;
events {
    worker_connections  1024;
}
http {
    server_tokens off;
    include       mime.types;
    default_type  application/octet-stream;
    server_names_hash_bucket_size  64;
    sendfile        on;
    keepalive_timeout  65;
    server {
        listen       80;
        server_name  localhost;
        location / {
            root   html;
            index  index.html;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

pan64 · 07-06-2016, 01:28 AM

probably this helps:
http://nginx.org/en/docs/beginners_guide.html
I think it is the "default" design

hilou · 07-06-2016, 02:24 AM

Could you please explain more about "default design" ?

The worker process is running with nobody user which should not have the authority to listen on a port lower than 1024.

I have tested this with version 1.6.2 and 1.9.2, and both listen on master process.

Code:

------1.6.2------
OS: debian

# /usr/sbin/nginx -v
nginx version: nginx/1.6.2

# netstat -tlnp | grep nginx
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      5578/nginx      
# ps aux | grep master            
root      5578  0.0  0.3  91184  3092 ?        Ss   15:19   0:00 nginx: master process /usr/sbin/nginx

------1.9.2------
OS: centos 7

# /usr/local/nginx/nginx -v
nginx version: nginx/1.9.2

# netstat -tlnp | grep nginx
tcp        0      0 0.0.0.0:80                  0.0.0.0:*                   LISTEN      13347/nginx               
# ps aux | grep master
root     13347  0.0  0.1  50580  5028 ?        Ss   Mar12   0:15 nginx: master process /usr/local/nginx/nginx -c /usr/local/nginx/nginx.conf

hilou · 07-14-2016, 01:03 AM

Ok, maybe you guys think this question is too stupid to ask and answer, I will close this thread. Thank you all for your help.

sundialsvcs · 07-15-2016, 07:55 AM

Meh ... don't easily take offense.

It could simply be that nginix was installed on this machine by default, or as a side-effect of installing something else. If you don't need it here, you should uninstall it.

Distro writers sometimes try to be a little too "helpful." If, for instance, you choose a "LAMP Server" configuration, they might well "helpfully" install both Apache and Nginix, complete with "helpful" default web-pages. You can find tens of thousands of these on the Internet.

Port-scan the box to see which ports are open, and be certain that you can account for every service that is running.

hilou · 07-17-2016, 09:04 PM

Quote:

Originally Posted by sundialsvcs

Meh ... don't easily take offense.

It could simply be that nginix was installed on this machine by default, or as a side-effect of installing something else. If you don't need it here, you should uninstall it.

Distro writers sometimes try to be a little too "helpful." If, for instance, you choose a "LAMP Server" configuration, they might well "helpfully" install both Apache and Nginix, complete with "helpful" default web-pages. You can find tens of thousands of these on the Internet.

Port-scan the box to see which ports are open, and be certain that you can account for every service that is running.

Thank you. I will figure this out and share it here.