Shulou(Shulou.com)06/02 Report--

This article is about setting Windows instance bandwidth and CPU running full or running high troubleshooting methods. Xiao Bian thinks it is quite practical, so share it for everyone to make a reference. Let's follow the editor and have a look.

Windows instance bandwidth and CPU running full or high troubleshooting

When using Cloud Virtual Machine ECS, if the service speed slows down or the ECS instance is suddenly disconnected, you can consider whether the server bandwidth and CPU run full or high. If you create alarm tasks in advance, the system will automatically alert you when bandwidth and CPU run full or high. Under Windows, you can troubleshoot as follows:

Positioning problem. Find specific processes that affect bandwidth and CPU running full or high.

Analytical processing. Check whether the processes affecting bandwidth and CPU running full or high are normal, and classify them for processing.

For normal processes: You need to optimize the program or upgrade the server configuration.

For exception processes: You can kill processes manually, or you can have third-party security tools kill them.

positioning problem

Microsoft has several tools to locate CPU and bandwidth running full or high, such as Task Manager, Resource Monitor, Performance Monitor, Process Explorer, Xperf (Windows Server 2008 onwards), and the Capture System Full Memory Dump Check. In the case of heavy traffic, you can also use Wireshark to grab network packets for a period of time and analyze traffic usage.

Note: Windows 2008 and above usually use the system's own resource monitor to monitor CPU and bandwidth.

operation steps

Click the Start menu at the bottom of the desktop and select Run.

After opening the Run box, type perfmon -res in the box and click OK.

In the Resource Monitor page, check whether each process is running full/high CPU or bandwidth.

For processes with high resource consumption, check the corresponding process ID and process program name.

After locating the process ID, the task manager is combined to determine whether the program is abnormal and locate the specific position of the program.

To locate the exception process, select View> Select Columns…in Task Manager.

Select PID (Process Identifier) in the pop-up box and click OK.

PID will be added to the progress page of Task Manager.

Click the PID entry and sort to find the exception process that Resource Monitor saw earlier. Right-click on the process name, select Open File Location, and locate whether the process is malicious.

CPU and bandwidth running full or running high analysis processing

You need to determine whether the processes that affect CPU and bandwidth running full or high are normal processes or abnormal processes, and classify them for processing.

Analysis and treatment of normal running full or high

Under normal circumstances, when customers frequently access the business, or due to Windows 'own services (update services, etc.), it may consume high network traffic and CPU. For CPU and bandwidth running full or running high caused by normal processes, please investigate them one by one in the following order.

Note: Windows 2008 / Windows 2012 server recommended memory configuration of 2G or more.

Check the background for Windows Update behavior.

It is recommended to install antivirus software on the server for antivirus. If anti-virus software is installed, please check whether the anti-virus software performs scanning operation in the background when CPU or bandwidth is high. If possible, upgrade your antivirus software to the latest version or remove it.

Check if the application within this ECS has significant disk access/network access behavior/high compute requirements. Solve resource bottlenecks, such as upgrading bandwidth, by trying to augment instance specifications with more cores/memory specifications.

If your server configuration is high, it doesn't make much sense to upgrade the configuration. The architecture aspect is not that the higher the server configuration, the better. At this point, you need to try application separation and optimize the related programs. Examples are as follows:

Problem description: When a server is deployed with MySQL, PHP, Web and other applications at the same time, even if the configuration is relatively high, it is easy to have abnormal resource load.

Solution: Try application separation and host different applications on different servers. For example, the database is completely hosted by RDS, reducing the resource consumption of the server itself and a large number of calls within the server. In terms of program optimization, you can adjust it according to your own configuration, such as adjusting the number of connections and cache configuration, as well as various parameters during Web and database calls.

Analysis and treatment of abnormal running full or high

For CPU and bandwidth abnormal run full or run high, may be caused by malicious viruses, Trojan horse intrusion. Sometimes a three-party malicious program may exploit the operating system's svchost.exe, or Tcpsvcs.exe masquerading as causing high bandwidth consumption. You need to manually kill the exception process.

Note: If you are unable to determine whether the process is a virus or Trojan, it is recommended that the process name be confirmed after searching online. In addition, it is recommended that you create a snapshot to complete the backup before proceeding with the process deletion operation.

Use commercial antivirus software, or use Microsoft Safety Scanner, a free security tool from Microsoft, to scan antivirus in safe mode. The link is as follows: https://www.example.com. www.microsoft.com/security/scanner/zh-cn/default.aspx

Run Windows Update to install the latest Microsoft security patches.

Use MSconfig to disable all non-Microsoft native service drivers and check if the problem occurs again. For details, see: How to perform a clean boot in Windows.

If the server or site suffers DDOS attacks or CC attacks, a large number of access requirements will be generated in the short term. You can log in to Alibaba Cloud Management Console to check whether the DDOS attack protection threshold in Cloud Shield is adjusted, and verify whether CC protection is enabled. If the attack does not trigger the threshold, cloud shield has not been cleaned, you can contact after-sales assistance to start cleaning.

Thank you for reading! About setting Windows instance bandwidth and CPU running full or running high troubleshooting methods to share here, I hope the above content can be of some help to everyone, so that you can learn more knowledge. If you think the article is good, you can share it so that more people can see it!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.