...

...

@@ -186,7 +186,7 @@

186

186

<listitem>

187

187

<para>

188

188

Set open file descriptor rlimit for the master process.

189

-

Default value: Set open file descriptor rlimit for the master process.

189

+

Default value: system defined value.

190

190

</para>

191

191

</listitem>

192

192

</varlistentry>

...

...

@@ -260,8 +260,9 @@

260

260

</term>

261

261

<listitem>

262

262

<para>

263

-

Set listen(2) backlog. A value of '-1' means unlimited. Default value:

264

-

-1.

263

+

Set listen(2) backlog. A value of <literal>-1</literal> means maximum on BSD systems.

264

+

Default value: <literal>-1</literal> (FreeBSD or OpenBSD) or <literal>511</literal>

265

+

(Linux and other platforms).

265

266

</para>

266

267

</listitem>

267

268

</varlistentry>

...

...

@@ -272,12 +273,11 @@

272

273

</term>

273

274

<listitem>

274

275

<para>

275

-

List of IPv4 addresses of FastCGI clients which are allowed to

276

-

connect. Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the

277

-

original PHP FastCGI (5.2.2+). Makes sense only with a tcp listening socket.

278

-

Each address must be separated by a comma. If this value is left blank,

279

-

connections will be accepted from any ip address. Default value: any.

280

-

IPv6 addresses are allowed.

276

+

List of IPv4 or IPv6 addresses of FastCGI clients which are allowed to connect. Equivalent

277

+

to the FCGI_WEB_SERVER_ADDRS environment variable in the original PHP FastCGI (5.2.2+).

278

+

Makes sense only with a tcp listening socket. Each address must be separated by a comma.

279

+

If this value is left blank, connections will be accepted from any ip address.

280

+

Default value: not set (any ip address accepted).

281

281

</para>

282

282

</listitem>

283

283

</varlistentry>

...

...

@@ -452,6 +452,19 @@

452

452

</para>

453

453

</listitem>

454

454

</varlistentry>

455

+

<varlistentry xml:id="pm.max-spawn-rate">

456

+

<term>

457

+

<parameter>pm.max_spawn_rate</parameter>

458

+

<type>int</type>

459

+

</term>

460

+

<listitem>

461

+

<para>

462

+

The number of rate to spawn child processes at once. Used only when

463

+

<literal>pm</literal> is set to <literal>dynamic</literal>.

464

+

Default value: 32

465

+

</para>

466

+

</listitem>

467

+

</varlistentry>

455

468

<varlistentry xml:id="pm.process-idle-timeout">

456

469

<term>

457

470

<parameter>pm.process_idle_timeout</parameter>

...

...

@@ -480,6 +493,22 @@

480

493

</para>

481

494

</listitem>

482

495

</varlistentry>

496

+

<varlistentry xml:id="pm.status-listen">

497

+

<term>

498

+

<parameter>pm.status_listen</parameter>

499

+

<type>string</type>

500

+

</term>

501

+

<listitem>

502

+

<para>

503

+

The address on which to accept FastCGI status request. This creates a new invisible pool

504

+

that can handle requests independently. This is useful if the main pool is busy with long

505

+

running requests because it is still possible to get the

506

+

<link linkend="fpm.status">FPM status page</link> before finishing the long running

507

+

requests. The syntax is the same as for <link linkend="listen">listen</link> directive.

508

+

Default value: none.

509

+

</para>

510

+

</listitem>

511

+

</varlistentry>

483

512

<varlistentry xml:id="pm.status-path">

484

513

<term>

485

514

<parameter>pm.status_path</parameter>

...

...

@@ -487,8 +516,9 @@

487

516

</term>

488

517

<listitem>

489

518

<para>

490

-

The URI to view the FPM status page. If this value is not set, no URI

491

-

will be recognized as a status page. Default value: none.

519

+

The URI to view the <link linkend="fpm.status">FPM status page</link>. This value must

520

+

start with a leading slash (/). If this value is not set, no URI will be recognized as

521

+

a status page. Default value: none.

492

522

</para>

493

523

</listitem>

494

524

</varlistentry>

...

...

@@ -572,6 +602,22 @@

572

602

</para>

573

603

</listitem>

574

604

</varlistentry>

605

+

<varlistentry xml:id="request-terminate-timeout-track-finished">

606

+

<term>

607

+

<parameter>request_terminate_timeout_track_finished</parameter>

608

+

<type>bool</type>

609

+

</term>

610

+

<listitem>

611

+

<para>

612

+

The timeout set by

613

+

<link linkend="request-terminate-timeout">request_terminate_timeout</link> is not engaged

614

+

after a <link linkend="function.fastcgi-finish-request">fastcgi_finish_request</link> or

615

+

when application has finished and internal shutdown functions are being called. This

616

+

directive will enable timeout limit to be applied unconditionally even in such cases.

617

+

Default value: no. Since PHP 7.3.0.

618

+

</para>

619

+

</listitem>

620

+

</varlistentry>

575

621

<varlistentry xml:id="request-slowlog-timeout">

576

622

<term>

577

623

<parameter>request_slowlog_timeout</parameter>

...

...

@@ -586,6 +632,18 @@

586

632

</para>

587

633

</listitem>

588

634

</varlistentry>

635

+

<varlistentry xml:id="request-slowlog-trace-depth">

636

+

<term>

637

+

<parameter>request_slowlog_trace_depth</parameter>

638

+

<type>int</type>

639

+

</term>

640

+

<listitem>

641

+

<para>

642

+

The depth of slowlog log stack trace.

643

+

Default value: 20. Since PHP 7.2.0.

644

+

</para>

645

+

</listitem>

646

+

</varlistentry>

589

647

<varlistentry xml:id="slowlog">

590

648

<term>

591

649

<parameter>slowlog</parameter>

...

...

@@ -702,6 +760,18 @@

702

760

</para>

703

761

</listitem>

704

762

</varlistentry>

763

+

<varlistentry xml:id="apparmor-hat">

764

+

<term>

765

+

<parameter>apparmor_hat</parameter>

766

+

<type>string</type>

767

+

</term>

768

+

<listitem>

769

+

<para>

770

+

If AppArmor is enabled, it allows to change a hat.

771

+

Default value: not set

772

+

</para>

773

+

</listitem>

774

+

</varlistentry>

705

775

<varlistentry xml:id="access-log">

706

776

<term>

707

777

<parameter>access.log</parameter>

...

...

@@ -735,109 +805,109 @@

735

805

<tbody>

736

806

<row>

737

807

<entry>

738

-

<constant>%C</constant>

808

+

<literal>%C</literal>

739

809

</entry>

740

810

<entry>%CPU</entry>

741

811

</row>

742

812

<row>

743

813

<entry>

744

-

<constant>%d</constant>

814

+

<literal>%d</literal>

745

815

</entry>

746

816

<entry>duration µs</entry>

747

817

</row>

748

818

<row>

749

819

<entry>

750

-

<constant>%e</constant>

820

+

<literal>%e</literal>

751

821

</entry>

752

822

<entry>fastcgi env</entry>

753

823

</row>

754

824

<row>

755

825

<entry>

756

-

<constant>%f</constant>

826

+

<literal>%f</literal>

757

827

</entry>

758

828

<entry>script</entry>

759

829

</row>

760

830

<row>

761

831

<entry>

762

-

<constant>%l</constant>

832

+

<literal>%l</literal>

763

833

</entry>

764

834

<entry>content length</entry>

765

835

</row>

766

836

<row>

767

837

<entry>

768

-

<constant>%m</constant>

838

+

<literal>%m</literal>

769

839

</entry>

770

840

<entry>method</entry>

771

841

</row>

772

842

<row>

773

843

<entry>

774

-

<constant>%M</constant>

844

+

<literal>%M</literal>

775

845

</entry>

776

846

<entry>memory</entry>

777

847

</row>

778

848

<row>

779

849

<entry>

780

-

<constant>%n</constant>

850

+

<literal>%n</literal>

781

851

</entry>

782

852

<entry>pool name</entry>

783

853

</row>

784

854

<row>

785

855

<entry>

786

-

<constant>%o</constant>

856

+

<literal>%o</literal>

787

857

</entry>

788

858

<entry>header output</entry>

789

859

</row>

790

860

<row>

791

861

<entry>

792

-

<constant>%p</constant>

862

+

<literal>%p</literal>

793

863

</entry>

794

864

<entry>PID</entry>

795

865

</row>

796

866

<row>

797

867

<entry>

798

-

<constant>%q</constant>

868

+

<literal>%q</literal>

799

869

</entry>

800

870

<entry>query string</entry>

801

871

</row>

802

872

<row>

803

873

<entry>

804

-

<constant>%Q</constant>

874

+

<literal>%Q</literal>

805

875

</entry>

806

876

<entry>the glue between %q and %r</entry>

807

877

</row>

808

878

<row>

809

879

<entry>

810

-

<constant>%r</constant>

880

+

<literal>%r</literal>

811

881

</entry>

812

882

<entry>request URI</entry>

813

883

</row>

814

884

<row>

815

885

<entry>

816

-

<constant>%R</constant>

886

+

<literal>%R</literal>

817

887

</entry>

818

888

<entry>remote IP address</entry>

819

889

</row>

820

890

<row>

821

891

<entry>

822

-

<constant>%s</constant>

892

+

<literal>%s</literal>

823

893

</entry>

824

894

<entry>status</entry>

825

895

</row>

826

896

<row>

827

897

<entry>

828

-

<constant>%T</constant>

898

+

<literal>%T</literal>

829

899

</entry>

830

900

<entry>time</entry>

831

901

</row>

832

902

<row>

833

903

<entry>

834

-

<constant>%t</constant>

904

+

<literal>%t</literal>

835

905

</entry>

836

906

<entry>time</entry>

837

907

</row>

838

908

<row>

839

909

<entry>

840

-

<constant>%u</constant>

910

+

<literal>%u</literal>

841

911

</entry>

842

912

<entry>remote user</entry>

843

913

</row>

...

...

@@ -904,6 +974,12 @@ fastcgi_param PHP_ADMIN_VALUE "open_basedir=/var/www/htdocs";

904

974

<link linkend="listen-allowed-clients">listen.allowed_clients</link>.

905

975

</para>

906

976

</caution>

977

+

<note>

978

+

<simpara>

979

+

Pools are not a security mechanism, because they do not provide full

980

+

separation; e.g. all pools would use a single OPcache instance.

981

+

</simpara>

982

+

</note>

907

983

</para>

908

984

</sect2>

909

985

910

986