Tag Info

New answers tagged

-1

Most likely the problem is memory shortage for apache. Apache doesn't have enough memory to to complete properly and thus get into unpredictable state resulting in the CPU loop. I recommend to reduce the memory footprint for your VM (or move to a larger VM). Find the right setting for MaxClients by experimenting. Start with minimum setting and if this fixes ...


1

You're getting rate limited by the API you're hitting, not AWS. There's no mechanism in AWS that would do this, especially not after allowing some to go through first, and especially not after a mere 30 queries.


1

Heavy usage Apache 2.4 on a t1.mirco instance is like humpty dumpty sitting on a couple toothpicks. He's too big and heavy! So of course he's squashed the toothpicks to pieces and rolled down the hill. You have at least two basic solutions to the root cause of this problem: Get more server resources, and less steal time. Either with AWS, or go to Digital ...


1

You can use the instance metadata documented here http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AESDG-chapter-instancedata.html below I wrote a simple piece of java code which prints the running instance-id import java.net.URL; import java.net.URLConnection; import java.util.Scanner; public final class Main { public static void main(String[] args) ...


1

Well, it basicly cannot be done. Question is, why would you want to do that? You have it always on the same hostname, so it is always accessible under the same endpoint all the time from the Internet. The only workaround, which we once used, when we wanted to grant external developer access to RDS instance, was making stunnel on development EC2 instance with ...


3

Unfortunately you can't do this globally. However, for each AWS product that supports it, you typically can limit access to a certain region. For instance, for EC2, you can do the following: { "Statement":[{ "Effect":"allow", "Action":"RunInstances", "Resource":"*", "Condition":{ "condition":{ "ec2:Region":"us-west-1" ...


-1

From the FAQ for AWS IAM: Q: Can users be defined regionally? Not initially. Users are global entities, like an AWS Account is today. No region is required to be specified when defining user permissions. users are able to use AWS services in any geographic region.


2

Nah you can't, there's nothing to refer to anyway (e.g. logical ID). Just create your own main table ;-). This is probably one of the reason it can't be used: One way to protect your VPC is to leave the main route table in its original default state (with only the local route), and explicitly associate each new subnet you create with one of the custom ...


0

All EC2 instances within the same VPC will be able to reach the boxes if the security groups permit. If the EC2 instance does not have a elastic/public IP assigned to it. EC2 instances outside the VPC will not be able to reach it.


1

Of course you can edit it. What makes you think you can't? In any case, it's trivial to create a new routing table if need be.


0

Well, you can't explicitly assign public IPs to AWS instance at the OS level. Amazon has their datacenter behind a firewall(s) and the instances all have private IP addresses that are being NATed to a public IP. So to the outside they look like a public IP but internally they have their private IPs. If you are trying to get to your instance from the ...


0

It may make sense to step back and do this through first principles. You havn't provided the domain name which means we can't look at it and explain, but - Find the root nameservers for the TLD or country TLD. If, for example you are using a domain name like "itsmy.com", then "dig com NS" will provide you with the nameservers you need to look at, ...


2

So how can point the domain name to my instance ?? The exact same way you would point it to any other server, by creating an A record pointing to the public IP address of the server.


0

It looks like your domain registrar does not allow you the flexibility to name your text records, or place them into subdomains. You should contact their support team to either see if they can name the record for you. Alternatively, you could set up your own DNS server, or utilize a free DNS hosting service on the net (you can find some quickly by ...


1

It sounds like what they expect you to add is a record like the following (as written in the normal master file format): _amazonses IN TXT "the-very-special-key" You don't specify what this management tool that you refer to offers in terms of UI but the name where you want to add the record is _amazonses (if specified as relative to the zone), the type is ...


0

I'll work on the premise here that you are talking about the root EBS volume. ie You have launched an instance, and you now want to detach the EBS root volume, and attach that to another instance. Yes, you can do this. Stop the instance (1). Detach the root volume. Launch another instance (2), for which another root volume will be created. Stop that ...


1

You need to be more specific. Can an EBS volume be detached from one EC2 instance and attached to another EC2 instance? Yes, as long as both instances are part of the same Availability Zone. EBS volumes can be thought of the same way as a portable Hard Drive. Now the caveat to this part of your question is, is this EBS volume the root volume, or was it added ...


1

As EEAA mentioned, you can't actually assign the elastic IP to an interface on your instance. That's not how EC2 publicly-routed IPs work. I'm not sure how much it will help you, but if you do want to know the IP programatically, you can query it from the metadata "API": curl -s http://169.254.169.254/latest/meta-data/public-ipv4 If an elastic IP is ...


3

Is there a way to assign the public elastic IP address directly to the eth0 interface? No, there is not. Internet traffic to/from EC2 instances always traverse the Elastic IP 1:1 NAT infrastructure. If not, does anyone know a work around to using Vyatta in a VPC configured with an ipsec VPN? I have all manner of IPsec operating in VPC ...


0

If you called the key "master" when you created it, during the launch process, then the key in authorized_keys will be called "master". If you didn't, the key has come from somewhere else.


1

What about running a splunk server in the cloud, keep it up all the time on a small instance, can use EBS volumes, or even try S3 volumes if I/o doesn't become a bottleneck.


3

Logstash + ElasticSearch + Kibana. That is the combination you need. Sounds like you're looking towards AWS, so build up a modest EC2 cluster for this - perhaps a single logstash "router/broker" box and two Elasticsearch cluster nodes. Keep a reasonable amount of data "online" in ES indexes, and then archive older indexes to S3. ElasticSearch supports this ...


1

S3 is a storage service. Code of any sort will not execute on it. There are cheaper options than AWS if you just want to run a tiny, non-critical contact form script. Shared hosting might run you as low as a buck a month, or a small Digital Ocean instance runs $5/month. If your current website has PHP support and it's still not working, though, you're ...


0

Yes. That is correct. It is added to /home/ec2-user/.ssh/authorized_keys. You only get a RSA private key if I remember correctly. This is done through the cloud-init scripts that are installed as part of the AMI you choose. This also helps if you are relaunching an AMI you are locked out of as it will add the new key to the authorized_keys of ec2-user ...


1

I just ran the upgrade to 2012 R2 Datacenter and it successfully activated against Amazon's KMS server. At first I tried Standard since the 2012 AMI was Standard, but it would not activate. It may not yet be officially supported, but it seems to work fine. I did it by mounting the ISO I downloaded from Microsoft VLC.


1

After installation, Amazon doesn't do anything to your instances anymore so I don't think they have functionality to provide for this scenario. You could hack up a script to loop over all instances and check if his key is there (it's not pretty, but it'll work :) ): for INSTANCE in $(ec2-describe-instances | grep INSTANC | grep running | awk '{print $4;}') ...


2

This is Amazon's own user that is used by Amazon to perform updates, run backups and do other maintenance tasks. That said, Amazon's support should be able to advise you. In general, you don't need to (and should not) know the password.


1

Try the following link. Add a config file in your root inside .ebextensions directory. Then add this. files: "/etc/httpd/conf.d/vhost.conf": mode: "000644" owner: root group: root encoding: plain content: | NameVirtualHost *:80 <VirtualHost *:80> DocumentRoot "/var/app/current/" <Directory ...


0

Here's how I'm doing it, which works well for me. RewriteCond %{HTTP_HOST} !^www.mydomain.com$ [NC] RewriteRule ^/(.*) http://www.mydomain.com/$1 [R=301,L] Your regex might actually redirect to an extra / but appears that it should work otherwise. You might try to turn on rewrite logging and use it to debug. I find it very helpful at times. ...


1

This trick has saved me a few times. If you don't know if the machine is live or not... use these steps. Find the public IP address of your local machine (PC you are on). In the AWS EC2 Dashboard, find the security group attached to your VPS/EC2. Add a rule for inbound/outbound ALL Traffic to/from your IP address to the public address of the EC2. ...


28

Update 09/04/2014 1:00AM EST Amazon has stated that all Elastic Load Balancers have been updated and are now longer vulnerable. They recommend rotating certs as well. Update 08/04/2014 2:56PM CST Amazon has stated that all Elastic Load Balancers except those in US-EAST-1 have been updated, and the vast majority of those in US-EAST-1 have been updated. ...


1

Cross region read-replicas are now available. http://aws.typepad.com/aws/2013/11/cross-region-read-replicas-for-amazon-rds-for-mysql.html


1

sudo pip install --upgrade awscli


5

It should be: ec2-54-208-90-77.compute-1.amazonaws.com ...which resolves correctly. Additionally, that record is not a CNAME. It's an A record. ~ dig ec2-54-208-90-77.compute-1.amazonaws.com ; <<>> DiG 9.8.3-P1 <<>> ec2-54-208-90-77.compute-1.amazonaws.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- ...


1

Since you're on the free tier, I'm assuming you're using a t1.micro instance. This particular instance lacks the ephemeral storage (the gigs of "temporary" space) and must be EBS-backed, as you see there. Ephemeral storage is very useful for worker servers but very bad for permanent storage because this gets wiped if the server is shut down or terminated. ...


0

You can have as many volumes as you want within the free tier, as long as you don't go over 30GB in total. And you don't need to use any snapshot when creating a blank volume -- just create it, attach it to your instance and build a filesystem on it as you would for a physical disk.


1

I've corrected the problem by removing perl path statements in the windows environment variables. They were at the beginning of the string from an old install. The strawberry install added it's own path statements at the end. This allowed the new strawberry intall to search the paths in the correct order.


7

Danger! Please please do not just turn off your firewall here and think it's a solution. You were on the right track, except you turned a debugging step into a solution. What should we do instead? How do I truly fix this? Well you were right that you were only accepting everything from the lo interface. So we just need to allow this port to be accessed ...


-7

For some reason, this command fixed it. iptables --delete INPUT 5 I think I understand why now even though line 1 and 3 already accepts all. With -v I see lo for the in column, and lo is the name of the interface in ifconfig which is only for local connections. So no ports were open except 22, SSH.


2

You only have port 22 open in the system firewall. Run system-config-firewall-tui to either disable the firewall, or open port 10000.


1

One approach is to add an input parameter to the CloudFormation template to indicate that an existing bucket should be used. Use Condition clauses in the template to create the bucket only if the parameter indicates it is needed.


0

I'm not the greatest in JavaScript but I tested the code below and works. It basically uses the "describeLoadBalancers" API call to get a list of all your ELBs and then iterates through the result to look for your instance. If your instance is registered with a particular load balancer, it's name is output to the console: // Require AWS SDK for Javascript ...


1

I've received confirmation from Amazon that this is no longer possible and that the page linked in my question is out-dated. I was advised to use Identity and Access Management (IAM) should I need to provide multiple users access to one AWS account.


1

Right now, you can't: https://forums.aws.amazon.com/thread.jspa?messageID=505301&#505301 ... at least they are aware of people wanting this. My guess is this will be available when they add custom Option Groups for PostgreSQL.


0

An instance could be attached to any number of ELBs. You could use the API to search all ELBs for your instance. You might want to consider adding a TAG to your EC2 with information about which ELB it's attached to, so you can query it (the EC2) directly.


1

Sure. Use the aws cli: $ aws elb describe-load-balancers --load-balancer-name "your-elb-name" The information you're looking for is in LoadBalancerDescriptions.Instances.


1

Your FCGI module is compiled against Perl 5.14. Reinstall it with cpan -f -i FCGI.


1

You could simply use a master-slave configuration for MySQL, simply specify the SSD machine as master, and replicate off of it. However, I strongly recommend using RDS unless you have a truly unique setup. RDS allows for provisioned IOPS and will take care of a lot of things you need to manually do for a mysql server.


0

You need to tell your local machine which key to use now. You can add it at a root level, but if you have both keys added, it will simply try both of them. The preferred method is to create a conf file for ssh touch ~/.ssh/config then add in Host [remote-ip-address] IdentityFile [path to pem file (must be chmod 600)] User [login user] ...


2

Why don't you try a couple out. You can always launch a different one, with the same image. If you use amazons build-in loadbalancer, it's very easy to do so. I have found out, that using a cluster of micro instances works well for image processing.



Top 50 recent answers are included