我有一些使用默认设置运行的EB实例,但是即使它们目前几乎什么都不做(实际上只是运行静态的保持页面,没有访问者),但它们仍然陷入严重的健康问题的时刻。
为什么会这样呢?我应该担心吗?同样,它们使用默认的EB设置进行配置。

这是访问日志。他们支持@bazze的假设,即EB健康检查将几个常见的uRLs作为测试,而404作为回复:
[26/Nov/2017:17:09:46 +0000] "GET / HTTP/1.1" 200 2422 "-" "ELB-HealthChecker/1.0"
[26/Nov/2017:17:09:46 +0000] "HEAD /sql/sql-admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:47 +0000] "HEAD /sql/phpmyadmin2/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:47 +0000] "HEAD /sql/phpMyAdmin2/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:47 +0000] "HEAD /sql/phpMyAdmin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:47 +0000] "HEAD /db/myadmin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:48 +0000] "HEAD /db/webadmin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:48 +0000] "HEAD /db/dbweb/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:48 +0000] "HEAD /db/websql/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:48 +0000] "HEAD /db/webdb/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:49 +0000] "HEAD /db/dbadmin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:49 +0000] "GET / HTTP/1.1" 200 2422 "-" "ELB-HealthChecker/1.0"
[26/Nov/2017:17:09:49 +0000] "HEAD /db/db-admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:49 +0000] "HEAD /db/phpmyadmin3/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:49 +0000] "HEAD /db/phpMyAdmin3/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:50 +0000] "HEAD /db/phpMyAdmin-3/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:50 +0000] "HEAD /administrator/phpmyadmin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:50 +0000] "HEAD /administrator/phpMyAdmin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:51 +0000] "HEAD /administrator/db/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:51 +0000] "HEAD /administrator/web/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:51 +0000] "HEAD /administrator/pma/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:51 +0000] "HEAD /administrator/PMA/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:52 +0000] "HEAD /administrator/admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:52 +0000] "HEAD /phpMyAdmin2/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:52 +0000] "HEAD /phpMyAdmin3/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:52 +0000] "HEAD /phpMyAdmin4/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:53 +0000] "HEAD /phpMyAdmin-3/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"
[26/Nov/2017:17:09:53 +0000] "HEAD /php-my-admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 Jorgee"发布于 2017-10-11 20:11:05
您可以在事件的详细信息中看到原因。它说,100%的请求与4XX状态代码失败。所以我的猜测是,根据你问题中的信息,这些网站基本上是闲置的,而不是被使用的,你只是不时地从一个机器人那里得到一个访问,寻找共同的目录和文件来找到一些要黑客的东西。检查访问日志,您可以快速确认是否是这种情况。
更新:当为EB环境启用了增强的健康报告,并且没有操作正在进行时,HTTP请求是环境健康的主要来源。在文档中读到更多关于它的信息。
https://serverfault.com/questions/877800
复制相似问题