All Products
Search
Document Center

Simple Application Server:FAQ about Simple Application Server

Last Updated:Feb 20, 2024

This topic provides answers to frequently asked questions (FAQ) about Simple Application Server.

In which regions can simple application servers be deployed?

Simple application servers can be deployed in regions inside and outside the Chinese mainland. For more information, see Regions.

What are the valid status of simple application servers?

Status of simple application servers is classified into console status and API status based on your query modes. If you query the status of a server by using the Simple Application Server console, the status on the console is console status. If you query the status of a server by calling the ListInstances API operation, the returned status is API status.

The status of servers is classified into stable status and transitory status based on the properties of the status. Transitory status is the status that servers temporarily stay before they enter a stable status. If a server remains in a transitory status for an extended period of time, an exception occurs on the server.

The following table describes all status of servers.

Console status

API status

Status property

Status description

Starting

Starting

Transitory

Simple application servers enter this state after they are created. Existing servers that are started or restarted also enter this state. After servers exit the state, the servers enter the Running state.

Running

Running

Stable

Simple application servers stay in this state when they run as expected. Servers can be accessed only when they are in this state.

Note

Simple application servers that are about to expire also stay in this state. You must pay attention to the remaining service life if a server enters this state.

Stopping

Stopping

Transitory

Simple application servers enter this state if you perform the Stop action on them. After servers exit the state, the servers enter the Stopped state.

Resetting

Resetting

Transitory

Simple application servers enter this state after you perform the Reset action on them.

Upgrading

Upgrading

Transitory

Simple application servers enter this state after you perform the Upgrade action on them.

Stopped

Stopped

Stable

Simple application servers enter this state after they are stopped.

Disabled

Disabled

Stable

Simple application servers enter this state if they are locked. Servers can be locked for reasons such as overdue payments and security risks. You can renew or unlock the servers based on your business requirements. For more information, see Upgrade and renew a simple application server. You can also submit a ticket to apply for unlocking the servers.

Can I upgrade simple application servers?

Yes, you can upgrade simple application servers to improve server performance when the server configurations cannot meet your business requirements. For more information, see Upgrade a simple application server.

Can I transfer my simple application servers to another Alibaba Cloud account?

No, you cannot transfer your simple application servers to another Alibaba Cloud account.

What do I do if the resource usage of the memory and system disk is not displayed when I view the monitoring information of a simple application server in the Simple Application Server console?

In the Simple Application Server console, the resource usage of the memory and system disks of a server is obtained by using the CloudMonitor agent. After you perform actions such as resetting the server, the CloudMonitor plugin may become invalid. If you cannot query the usage data of memory and system disks in the Server Monitoring section on the Server Overview page, you must manually install the CloudMonitor plugin. For more information, see Install and uninstall the CloudMonitor agent for C++.

Why is my simple application server in the Disabled state?

If a simple application server is stopped due to expiration or overdue payments, or is locked due to security risks, the server enters the Disabled state.

  • If your simple application server is about to be stopped due to expiration or an overdue payment, the system sends you a notification. To ensure service continuity, renew the resource plan or complete the payment at the earliest opportunity. For more information, see Expiration and overdue payment.

  • If the server is locked, submit a ticket to apply for unlocking the server.

How do simple application servers ensure the security of my data?

Simple application servers use the snapshot feature and triplicate storage on cloud disks to ensure data security. Take note of the following items:

  • Triplicate storage on cloud disks

    By default, simple application servers use standard SSDs. Alibaba Cloud disks use triplicate storage to provide stable, efficient, and reliable access to data on simple application servers based on distributed file systems and ensure data durability of 99.9999999% (nine 9's) for the servers. For more information, see Triplicate storage.

  • Snapshot feature

    Simple application servers provide the snapshot feature that allows you to back up data stored on disks and roll back disks based on snapshots. For more information, see Manage snapshots.

How is network security ensured for simple application servers?

Simple Application Server uses the firewall feature and default network configurations to ensure network security of servers. Take note of the following items:

  • Default network configurations (VPCs)

    By default, simple application servers are deployed in virtual private clouds (VPCs). Simple application servers that belong to the same account and region reside within the same VPC. These servers can communicate with each other over the VPC but cannot communicate with the resources of other services over the VPC. For example, your simple application servers cannot communicate with ApsaraDB RDS instances within the same VPC.

  • Firewall feature

    Simple application servers support the firewall feature. By default, simple application servers allow traffic on ports 22, 80, and 443. You can specify the port range to open based on your business requirements. For more information, see Manage the firewall of a simple application server.

How do I protect my simple application servers against attacks?

Simple application servers use Alibaba Cloud Security to defend against DDoS attacks. CloudMonitor that is deployed on simple application servers can automatically detect network attacks and scrub suspicious traffic. Alibaba Cloud implements blackhole filtering to protect the servers against high-volume attacks. To strengthen security protection, we recommend that you install security software and disable ports that are not commonly used.

What security services does Alibaba Cloud provide?

Alibaba Cloud Security Center is backed by the robust data analysis capabilities of the cloud computing platform of Alibaba Cloud and provides a comprehensive set of security services, such as security vulnerability detection, website trojan detection, host intrusion detection, and anti-DDoS protection.

For more information about security services, visit Alibaba Cloud Security Services.

How do I check for mining programs on a simple application server?

You can use one of the following methods to check for mining programs on your simple application server. For more information, see Characteristics of mining programs.

  • Check whether the CPU of your server works as expected.

    Note

    If the CPU utilization of your server significantly increases, for example, to 80% or higher, and an unknown process continuously transmits packets, a mining program is running on your server.

  • Go to the Alerts page in the Security Center console and check for unhandled alerts of mining programs. If mining programs run on your server, alerts are generated and need to be handled.

For more information, see Defend against mining programs and Best practices for handling mining programs.

How do I handle mining programs or apply for unlocking affected simple application servers?

Handle mining programs

You can handle mining programs or apply for unlocking affected servers in the Security Center console or handle mining worms in the Cloud Firewall console. For more information, see Defend against mining programs and Best practices for handling mining programs.

Unlock servers

If a server is locked due to infection by a mining virus or attack, you can apply for unlocking the server. To apply for unlocking servers, go to the Penalties page of the Security Center console.

When you apply for unlocking servers, take note of the following items:

  • For each server, you can apply for unlocking it only once.

  • A server that has been unlocked is automatically checked three days later. If a mining program is detected on the server again, the server is locked and cannot be unlocked.

  • After the server is unlocked, back up the data on the server at your earliest opportunity.

Can simple application servers communicate with ApsaraDB RDS instances in the same VPC?

Yes, simple application servers can communicate with ApsaraDB RDS instances in the same VPC by using the service interconnection feature. By default, simple application servers that belong to the same Alibaba Cloud account and region are deployed in the same VPC. These servers can communicate with each other over the VPC but cannot communicate with the resources of other Alibaba Cloud services over VPCs. However, you can connect simple application servers to ApsaraDB RDS instances over VPCs by configuring service interconnection. For more information, see Manage service interconnection.

Important

In the Simple Application Server console, you can enable service interconnection. This way, your simple application server is interconnected with other services that belong to the same Alibaba Cloud account and reside in the same region as the simple application server. This feature is provided free of charge. If you want to make your simple application server interconnected with other services that belong to different Alibaba Cloud accounts or reside in different regions from your server, you must perform relevant operations in the Cloud Enterprise Network (CEN) console. You are charged for the feature. For more information, see Billing, Grant a transit router permissions on a network instance that belongs to another Alibaba Cloud account, and Manage inter-region connections.

Why is the speed of access to the websites and applications on my simple application server slow?

Various factors such as the location of the simple application server and local network conditions may result in high latency and the inaccessibility of websites or applications. For information about how to troubleshoot the issue, see Network speed of a simple application server does not match the expected network bandwidth of the server.

How do I obtain the public IP address of my simple application server?

You can obtain the public IP address from the card of your simple application server in the Simple Application Server console. For more information, see View server information.

Can I change the public IP address of my simple application server?

No, you cannot change the public IP address of your simple application server. By default, each simple application server is assigned a public IP address. The public IP address cannot be changed. The public IP address cannot be retained after the server expires.

Is traffic allowed on port 25 of simple application servers?

No, traffic is not allowed on port 25 of simple application servers. For security reasons, simple application servers cannot send emails over port 25. If you want to send emails, use port 465. For more information, see Manage the firewall of a simple application server.

Why am I unable to access a simple application server from an IP address?

You may be unable to access a simple application server from an IP address for the following reasons:

  • The firewall port of the simple application server is not available. For example, when you connect to a MySQL database on a simple application server, if default firewall port 3306 of MySQL is not available, a timeout error occurs. For information about how to configure a firewall rule, see Manage the firewall of a simple application server.

  • The IP address is intercepted by Alibaba Cloud Security if Alibaba Cloud identifies the IP address as malicious. This occurs if the IP address has suspicious behaviors on cloud resources. For example, an excessive amount of access requests are sent to a website from the IP address. If you are sure that the IP address is secure and is incorrectly intercepted by Alibaba Cloud Security, submit a ticket to apply for unlocking the IP address. We also recommend that you use Security Center to detect your server and its IP address. For more information, see Quick start.

Why am I unable to create a simple application server based on a custom image?

Do not perform the following operations before a simple application server is created based on a custom image. If you perform one of the following operations, the server cannot be created.

  • Delete the custom image.

  • Delete the snapshot from which the custom image was created.

  • Change the OS or replace the image of the simple application server from which the custom image is derived.

  • Release the simple application server from which the custom image is derived.

How do I reset the OS of my simple application server?

You can re-install the OS of a simple application server or replace the image of a simple application server to reset the OS of the server. Simple Application Server provides application images or OS images to create simple application servers.

  • Application images: Simple Application Server provides multiple application images. You can use these images to create simple application servers and deploy application environments or build websites on the servers with ease.

  • OS images: Simple Application Server provides Windows Server OS images and mainstream Linux OS images. You can use these images to create safe and stable runtimes that have no applications installed.

You can reset the OS of your simple application server based on your business requirements. For more information, see Reset a simple application server.

Why am I unable to reset the OS of my simple application server?

You can re-install the OS of a simple application server or replace the image of a simple application server to reset the OS of the server and re-initialize the server. If you cannot reset the OS of your simple application server in the Simple Application Server console, check whether the requirements for resetting the OSs of simple application servers are met. For more information about requirements for resetting the OSs of simple application servers, see Limits.

Why is the option for HTTPS configuration not displayed in the Simple Application Server console?

If a domain name is bound to your simple application server, you must configure secure HTTPS access to the domain name. This access method uses encryption and identity authentication to ensure the security of data transfers. If the option for HTTPS configuration is not displayed in the Simple Application Server console, this may be caused by one of the following reasons:

Can I migrate data between simple application servers?

Yes, you can migrate data between simple application servers. If your simple application server cannot meet your business requirements by upgrading the configurations, you can migrate the data on the server to another server in the same or different region. For more information, see Migrate data between simple application servers.

Can I migrate data from a simple application server to an ECS instance?

Yes, you can migrate data from a simple application server to an ECS instance. If your simple application server cannot meet your business requirements, you can smoothly migrate data from the simple application server to an ECS instance to obtain more flexible resource configuration solutions. For more information, see Migrate data from a simple application server to an ECS instance by using a shared image.

Can data be migrated from a simple application server in the China (Hong Kong) region to a server in the Chinese mainland?

Yes, you can migrate data from a simple application server in the China (Hong Kong) region to a server in the Chinese mainland. After a simple application server is created, you cannot directly modify its region. However, you can migrate data from a simple application server in the China (Hong Kong) region to a server in the Chinese mainland. For more information, see Migrate data between simple application servers.

Can I transfer data on my simple application server to another Alibaba Cloud account?

No, you cannot transfer a simple application server and the data on the server to another Alibaba Cloud account.

How do I obtain common application management commands?

Application management commands vary based on OSs, runtime environments, and application versions. For example, in the CentOS 7 OS:

  • If MySQL has been added to the system services, the command that is used to log on to MySQL is mysql -uroot -p.

  • If MySQL has not been added to the system services, you must go to the bin directory of the MySQL installation path and use the executable file to manage MySQL. An example of the commands that are used to log on to MySQL: ./mysql -uroot -p.

If you need to maintain the applications in your server, we recommend that you learn the O&M knowledge of the applications by visiting official websites of the applications or third-party websites. For more information, visit the following websites:

After you create a simple application server based on an application image, you can view the image tag, basic operation steps of the application, and the installation path of the application in the Simple Application Server console. For more information, see Manage applications on a server that is created based on an application image.

What do I do if the CPU utilization of a simple application server is exceptionally high due to mining programs?

For more information, see Best practices for handling mining programs.

Why is my server unable to access GitHub?

If you try to access GitHub from a simple application server in the Chinese mainland, you may fail to access GitHub due to cross-border network issues. We recommend that you try again later or use third-party tools to resolve the issue.

You can also use Alibaba Cloud Global Accelerator (GA) to accelerate access from the simple application server to GitHub. This method may also fail due to cross-border network issues. For more information, see What is GA?

On Windows simple application servers, the message "Content from the website listed below is being blocked by the Internet Explorer Enhanced Security Configuration" appears when I use Internet Explorer to visit a website. What do I do?

For information about how to resolve this issue, see What do I do if I am prompted with the error message "Content from the website listed below is being blocked by the Internet Explorer Enhanced Security Configuration"?

What are the paths to the configuration files of databases for common third-party open source programs?

Paths to configuration files vary based on third-party open source programs and the types of the databases used.

Important
  • Before you perform high-risk operations such as modifying the configurations or data of an Alibaba Cloud instance, we recommend that you check the disaster recovery and fault tolerance capabilities of the instance to ensure data security.

  • Before you modify the configurations or data of an instance, such as an ECS instance or an ApsaraDB RDS instance, we recommend that you create snapshots or enable backup for the instance. For example, you can enable log backup for an ApsaraDB RDS instance.

  • If you granted permissions or submitted sensitive information such as usernames and passwords in Alibaba Cloud Management Console, we recommend that you modify relevant information at the earliest opportunity.

The following table describes the paths to the configurations files when the system calls MySQL database by using PHP.

Software

Path to the configuration file

UCenter

/data/config.inc.php

Discuz!

/config.inc.php

UCH

/config.php

EmpireCMS

/e/class/config.php

ECShop

/data/config.php

ShopEX

/config/config.php

WordPress

/wp-config.php

Joomla!

/configuration.php

HDWiki

/config.php

PHPwind 8.0

/data/sql_config.php

DEDE

/data/common.inc.php

PHPCMS

/include/config.inc.php

.Net program

/web.config

After I uninstall or stop Cloud Assistant Agent on my simple application server, the features of the server such as HTTPS settings, load balancing, OS resetting, and remote connection are affected. What do I do?

By default, Cloud Assistant Agent is installed on each simple application server. If you uninstall or stop Cloud Assistant Agent, the features of the server such as HTTPS settings, load balancing, OS resetting, and remote connection may be affected. Do not manually uninstall or stop Cloud Assistant Agent on your simple application server.

If a preceding issue occurs on your server, use the following solutions to troubleshoot the issue:

  1. Log on to the simple application server. For more information, see Connect to a Linux server or Connect to a Windows server.

  2. Check whether the process of Cloud Assistant Agent runs as expected.

    • For Linux servers, run the following command:

      ps -ef |grep aliyun-service

      If an output that is similar to the following output is returned, the process of Cloud Assistant Agent is running as expected.

      root     30758 30703  0 16:38 pts/0    00:00:00 grep --color=auto aliyun-service
      root     31161     1  0  2021 ?        00:34:31 /usr/local/share/aliyun-assist/2.2.3.256/aliyun-service
    • For Windows servers, check whether the aliyun_assist_service process exists in the Task Manager.

  3. If the process is not found, start Cloud Assistant Agent.

    • For Linux servers, run the following command:

      # If the Linux servers support systemctl, run the following command:
      systemctl start aliyun.service
      
      # If the Linux servers do not support systemctl, run the following command:
      /etc/init.d/aliyun-service start
    • For Windows servers, use the Server Manager to start AliyunService.

Note

If Cloud Assistant Agent still cannot be started after you perform the preceding operations, re-install Cloud Assistant Agent. For more information, see Install Cloud Assistant Agent.

How do I configure a Windows simple application server to allow multiple users to log on to the server at the same time?

You can configure a Windows simple application server to allow multiple users to log on to the server at the same time. For more information, see Enable multiple users to log on to a Windows ECS instance.

How do I upload files to a simple application server?

You can use the WinSCP client and the FTP protocol to upload files to a simple application server and then perform other operations on the files, such as downloading or deleting the files. Select an uploading method based on the OS of the server.

How do I install applications on a simple application server?

If your simple application server is created based on an application image, an application or a runtime environment is already installed on your server. If your simple application server is created based on a system image, you can log on to the server to install an application or a runtime environment.

The following example describes how to install a Python environment:

  1. Connect to the simple application server. For more information, see Connect to a Linux server.

  2. Run the following command to install a Python environment.

    In this example, the Python 2.7 environment is installed.

    sudo yum install python

    When the following output is returned, enter y as prompted.

    Loaded plugins: fastestmirror 
    ... 
    Is this ok [y/d/N]: y
     ...
  3. Run the following command to check whether the Python environment is installed:

    python -V

    If the following message is returned, the Python 2.7 environment is installed:

    [admin@iZbp176xsi6ct73elzq**** ~]$ python -V
    Python 2.7.5

How many service identification codes for ICP filings does a simple application server support?

A simple application server can support up to five service identification codes for ICP filings. The five service identification codes allow you to apply for five ICP filings. A website can be associated with multiple domain names. For example, you applied for ICP filings for two websites. The first website is associated with the aliyundoc.com domain name. The second website is associated with the example.com and example.org domain names. After your ICP filing application is approved, you can use the domain names to access their associated websites.

Note
  • Ensure that all domain names that are associated with a website point to the same website. After the ICP filing application is approved, these domain names cannot be associated with other websites. For example, example.org that is associated with the second website cannot be associated with another website.

  • ICP filings only involve top-level domain names. You can build a new website on your simple application server and associate the website with the blog.aliyundoc.com domain name. Then you can build another website and associate the website with the new.example1.com domain name. Websites that are bound to lower-level domain names do not count towards your limit of service identification codes for ICP filings.

What do I need to take note of before I apply for an ICP filing for a simple application server?

  • Before you use a simple application server that is deployed inside the Chinese mainland to host your websites, you must apply for ICP filings for the server. For more information, see What is an ICP filing?

  • If you use a simple application server that is deployed outside the Chinese mainland to host your websites, you do not need to apply for ICP filings.

  • For more information, see ICP filing application overview.

  • When you submit an ICP filing application in the Alibaba Cloud ICP Filing system, a service identification code is used to associate the applied simple application server with the website that you want to host on the server. For more information, see Apply for service identification numbers for free. When you apply for service identification codes, take note of the following items:

    • Starting from May 21, 2018, only when the subscription period of the simple application server that hosts your website is three months or longer, you need to apply for an ICP filing for your server. The subscription period includes the renewal period.

    • A public IP address of a simple application server can be associated with up to five service identification codes, which can be used for five ICP filing applications. Filing of a website consumes a service identification code. Then the service identification code is in use. You cannot reuse the code to apply for an ICP filing for another website. If you deregister the website or remove Alibaba Cloud from your cloud service provider list, the service identification code is still considered used. You cannot reuse the service identification code to apply for an ICP filing for another website.

    • The following list describes the number of domain names that you can associate with a service identification code.

      • If no ICP filing number has issued for the entity and domain names of your website, you can submit up to five websites and multiple domain names for each website.

      • If an ICP filing number has issued for the entity and domain names of your website and you want to add new domain names for the existing ICP filing number, you only need to submit one domain name for each website. You can submit multiple websites in multiple ICP filing applications. For example, if the ICP Bei # 1200000 - 1 ICP filing number is associated with multiple domain names and you add one of the domain names to the new ICP filing application, after this domain name is approved in the Alibaba Cloud ICP Filing system, other domain names that are associated with the ICP Bei # 1200000 - 1 ICP filing number are automatically approved. After the ICP Bei # 1200000 - 1 ICP filing number is submitted, you can continue to submit another ICP filing number.

    • Before the ICP filing application that you submit is approved, your websites cannot provide services on the server.

    • If you already obtain an ICP filing number through another cloud service provider, you need to transfer the ICP filing to Alibaba Cloud. After your application for transferring the ICP filing is approved by the communications administration, your websites on the server can provide services. You must complete the transfer procedure within 30 days. Otherwise, your websites remain inaccessible.

What ICP filing policy is applicable to simple application servers?

For simple application servers that were purchased on or after May 21, 2018 and have a cumulative subscription period of three months or longer, you can apply for ICP filings. Other rules remain unchanged.

Simple application servers that are purchased before May 21, 2018 are not subject to this new policy and are still subject to the original rules on applying for ICP filings.

I subscribed a one-month simple application server and renewed it for additional two months. Can I apply for ICP filings?

Yes, you can apply for ICP filings for the server. After the simple application server is renewed for additional two months, the cumulative subscription period of this server is three months, which meets the minimum requirements to apply for an ICP filing.

I subscribed a simple application server whose subscription period is longer than three months. The server is about to expire. Can I still apply for ICP filings?

Yes, you can apply for ICP filings for the server. Simple application servers whose subscription period is three months or longer and that have not expired are eligible to apply for ICP filings.

Important

When an ICP filing is being applied for or after an ICP filing number is issued for a website on a simple application server, if the server is not renewed and is released due to expiration, traffic destined for the website cannot be directed to the simple application server. In this case, the ICP filing number may be revoked, which affects access to the website.