Simple Application Server FAQ - Simple Application Server

This topic summarizes the frequently asked questions about Simple Application Server.

Remote connection and billing
- Remote connection FAQ
- Billing FAQ
Server management
Security
Network
Firewall
- Can port 25 be unblocked for a simple application server?
- Why is a simple application server inaccessible from a specific IP address?
Image
Migration
O&M
ICP filing

In which regions are simple application servers deployed?

Simple Application Server is available on the China site (aliyun.com) and the international site (alibabacloud.com). For more information, see Supported regions.

What are the statuses of simple application servers?

The statuses of simple application servers are classified into console statuses and API statuses based on the query method. A console status is the server status that you query in the Simple Application Server console. An API status is the status that is returned after you call the ListInstances operation.

Server statuses are classified into stable statuses and intermediate statuses based on their properties. An intermediate status is a transitional state before a server enters a stable status. If a server remains in an intermediate status for an extended period, an exception has occurred.

The following table describes the server statuses.

Console status	API status	Status property	Description
Starting	Starting	Intermediate	The intermediate status of a server after it is created, started, or restarted. The server then enters the Running state.
Running	Running	Stable	The simple application server is running as expected. The server can be accessed only in this state. Note A simple application server that is about to expire is also in this state. Pay attention to the remaining subscription duration of the server.
Stopping	Stopping	Intermediate	The intermediate status of a server after you stop it. The server then enters the Stopped state.
Resetting	Resetting	Intermediate	The intermediate status of a server after you reset its system.
Upgrading	Upgrading	Intermediate	The intermediate status of a server after you upgrade its configuration.
Stopped	Stopped	Stable	The stable status of a simple application server after it is stopped.
Disabled	Disabled	Stable	The simple application server is locked due to reasons such as overdue payments or security risks. Renew the server as needed. For more information, see Renewal policy. You can also submit a ticket to request to unlock the server.

Can I upgrade the configuration of a simple application server?

Yes. If your server configuration is insufficient for your business needs, you can upgrade the configuration to improve server performance. For more information, see Upgrade a simple application server.

Can I transfer a simple application server to another Alibaba Cloud account?

No.

What do I do if the memory and system disk usage are not displayed when I view the monitoring information of a server in the console?

In the Simple Application Server console, memory and system disk data is obtained by the CloudMonitor agent. After you reset the system or perform other operations, the CloudMonitor agent may become invalid. If you cannot query the memory and system disk usage of the server in the Server Monitoring Information section when you view the server details in the Simple Application Server console, you must manually install the CloudMonitor agent. For more information, see Install and uninstall the CloudMonitor agent.

Why is my server in the Disabled state?

A simple application server enters the Disabled state if the instance has expired, is stopped due to an overdue payment, or is locked due to security risks.

If your instance is at risk of being stopped due to expiration or an overdue payment, the system will send you a reminder or notification. Renew the instance promptly to avoid business disruptions. For more information, see Expiration or overdue payments.
If the instance is locked, submit a ticket to request to unlock it.

How do simple application servers ensure data security?

Simple Application Server ensures data security through the triplicate technology of cloud disks and the snapshot feature. The details are as follows:

Triplicate technology of cloud disks
The data protection mechanism for cloud disks is implemented using Alibaba Cloud's triplicate technology. This technology uses a distributed file system to provide stable, efficient, and reliable random data access for simple application servers, ensuring 99.9999999% data reliability. For more information, see Triplicate technology of cloud disks.
Snapshot feature
Simple Application Server provides a snapshot backup feature. You can back up snapshots or use snapshots to restore the cloud disk data of your server at any time. For more information about how to back up and restore snapshots, see Manage snapshots.

How do simple application servers ensure network security?

Simple Application Server ensures network security through default network configurations and firewall features. The details are as follows:

Default network configuration (VPC)
Simple application servers use a virtual private cloud (VPC) by default. Multiple simple application servers under the same account and in the same region are in the same VPC by default. Service interconnection between multiple servers can be achieved over the internal network, but they are not interconnected with other products under the same account over the internal network. For example, you cannot directly associate an ApsaraDB RDS instance over a VPC.
Firewall feature
Simple Application Server provides a firewall feature. Ports 22, 80, and 443 are open by default, while other ports are closed. You can select the range of ports to open as needed. For more information, see Manage firewalls.

How do I harden the operating system?

You can ensure the security of your operating system by managing access security, hardening the operating system, and implementing advanced security measures. For more information, see Operating system security.

Can simple application servers defend against network attacks?

Alibaba Cloud Simple Application Server is equipped with Alibaba Cloud Security to defend against DDoS flood attacks. When a network attack occurs, the Alibaba Cloud monitoring system automatically detects and scrubs unusual traffic. If the attack volume is very large, Alibaba Cloud applies blackhole routing to protect your simple application server instance. For security reasons, we recommend that you install protection software to enhance the protection effect and close infrequently used ports. For more information, see Network Security.

What security services does Alibaba Cloud offer?

Alibaba Cloud Security Center, combined with the powerful data analytics capabilities of the Alibaba Cloud platform, provides you with one-stop security services, such as security vulnerability detection, web Trojan detection, host intrusion detection for cloud server users, and defense against DDoS flood attacks.

For more information about security services, see the Security Products page.

How do I detect mining programs on a server?

Based on the features of mining programs, you can use the following methods to detect whether a server is being used for mining.

Check if the server's CPU is functioning normally.
Note
If your server's CPU utilization increases significantly, for example, to over 80%, and an unknown process continuously sends network packets, you can determine that there is a mining threat on your server.
Log on to the Security Alerts page of the Security Center console and check for attack reminders in the processing list.

For more information, see Best practices for defending against mining programs and Best practices for handling mining programs.

How do I handle mining programs or request to unblock a server?

Solution 1: Handle mining programs
You can check for mining programs in Security Center and mining worms in Cloud Firewall. For more information, see Best practices for defending against mining programs and Best practices for handling mining programs.
Solution 2: Request to unblock the server
A server may be locked due to mining viruses or attacks. You can request to unblock it. To do so, see Penalty List.
Note the following points about unblocking:
- You can request self-service unblocking only once.
- After the unblocking request is approved, the system automatically performs a check after three days. If mining behavior is detected again, the server will be blocked again and cannot be unblocked.
- After unblocking, back up your data promptly.

Why is the server download speed slow at times? Is it throttled?

The public bandwidth of a Simple Application Server plan specifies the upper limit of inbound and outbound traffic. It is not a guaranteed performance metric. During peak hours, resource contention may cause bandwidth throttling and packet loss. Simple application servers are not suitable for scenarios that have high requirements for public network quality. If your business has high requirements for public network quality, we recommend that you purchase an Elastic Compute Service (ECS) instance that uses the pay-by-bandwidth billing method.

Can a simple application server connect to ApsaraDB RDS over a VPC?

Yes. By default, multiple simple application servers that belong to the same account and are in the same region are in the same VPC and can communicate with each other over the internal network. However, they cannot communicate with other products over the internal network by default.

Why is the network latency high when I access a website or application on the server?

Factors such as the server's region and the local network environment can cause high network latency or even inaccessibility. For troubleshooting and solutions, see The network speed of a simple application server is slow and does not match the expected bandwidth.

How do I obtain the public IP address of a simple application server?

You can obtain the public IP address from the simple application server card. For more information, see View simple application server information.

Can I change the public IP address of a simple application server?

No. Each simple application server is configured with one public IP address by default. This public IP address cannot be changed and cannot be retained after the server expires.

Why is the public IP address of an instance purchased in the China (Hong Kong) region detected as not belonging to Hong Kong?

The IP address databases of third-party or game service providers may have significant update delays. The geographic attribution of a network IP address is related to its announcement. The previous geographic attribution of an IP address does not represent its current attribution. The region specified at the time of purchase prevails.

Can port 25 be unblocked for a simple application server?

No. For security reasons, port 25 of an Alibaba Cloud simple application server cannot be used to send emails externally. To send emails, use port 465. For more information, see Manage firewalls.

Why is a simple application server inaccessible from a specific IP address?

Possible reasons are as follows:

The corresponding firewall port on the simple application server is not open. For example, when you need to remotely connect to a MySQL database on the server, if the firewall does not allow traffic on the default MySQL port 3306, you will receive a connection timeout error. For information about how to set firewall rules, see Manage firewalls.
The IP address may be blocked by Security Center if Alibaba Cloud determines that it is engaging in attack behavior against cloud resources, such as frequent website access or other improper operations. If you can ensure that the IP address is normal and safe, and its blocking by Security Center affects your business operations, submit a ticket to have it unblocked.

Why does creating a server from a custom image fail?

Before the simple application server is created, avoid the following operations. Otherwise, the server creation will fail:

Delete the corresponding custom image.
Delete the source snapshot of the custom image.
Reset the system or replace the image of the source simple application server for the custom image.
Release the source simple application server of the custom image.

How do I change the operating system of a simple application server?

Alibaba Cloud Simple Application Server provides application images and OS images to create servers by default.

Application image: Simple Application Server provides a variety of application images. You can use different application images to quickly deploy application environments or websites.
OS image: Simple Application Server provides Windows Server OS images and mainstream Linux OS images. You can use these images to create a clean, secure, and stable runtime environment.

You can change the operating system of your simple application server as needed. For more information, see Reset the system.

Why can't I change the operating system of a simple application server?

Resetting the system lets you reinstall the server's application or operating system to reinitialize the server. If you cannot change the operating system of your simple application server in the Alibaba Cloud Simple Application Server console, check whether the requirements for resetting the system are met. For more information, see Limits on resetting the system.

How do I set the preferred language for a Windows operating system?

If the default language of the Windows operating system does not meet your needs, you can change the language within the operating system. For more information, see Set the preferred language for a Windows operating system.

How do I download an image of a simple application server?

Custom images of simple application servers cannot be downloaded directly. If needed, you can download them as follows:

Share the simple application server image to ECS. For more information, see Share an image to ECS.
On the Shared Images tab in the ECS console, copy the image to a custom image. For more information, see Copy a custom image.
On the Custom Images tab in the ECS console, export the custom image. For more information, see Export a custom image.
Note
Due to image copyright restrictions, you cannot export custom images created from application images, nor can you export images of the Windows Server operating system.

What do I do if the initialization of a Plesk application image gets stuck at 95%?

Enable the following firewall rules in the instance where the Plesk application image is located. For more information, see Firewall settings.
- Enable TCP ports 80, 443, 8880, 8443, and 8447.
- Enable UDP ports 443 and 8443.
Use the root account to remotely connect to the instance where the Plesk application image is located. For more information, see Connect to a Linux server.

Run the following command to update the configuration parameters.

/usr/local/psa/bin/cloning --update -prepare-public-image true -reset-init-conf false -reset-license true -skip-update true

Run the following command to restart the instance.
```
reboot
```
Re-initialize the Plesk application image according to the prompts on the console interface.

For more information about Plesk images, see the official Plesk documentation.

Can I migrate data between simple application servers?

Yes. If a simple application server cannot meet your current business needs through configuration upgrades, or to migrate the server to another region, you can migrate the website data from the server to another server in the same or a different region. For more information, see Migrate data between simple application servers.

Can I migrate a simple application server to an ECS instance?

Yes. If your current simple application server cannot meet your business needs, you can smoothly migrate it to an Elastic Compute Service (ECS) instance to obtain more flexible resource configuration solutions. For more information, see Migrate data from a simple application server to an ECS instance.

Can a simple application server in the China (Hong Kong) region be moved to the Chinese mainland?

Yes. After a simple application server is created, you cannot directly change its region, but you can migrate the server to the Chinese mainland. For more information, see Migrate data between simple application servers.

Can I transfer a simple application server to another Alibaba Cloud account?

No. You cannot directly transfer a simple application server and its data to another Alibaba Cloud account.

How do I find common commands for application software management?

Application software management commands vary depending on the operating system, runtime environment, and software version. For example, in CentOS 7:

If MySQL has been added to the system services, the command to log on to MySQL is mysql -uroot -p.
If MySQL has not been added to the system services, you need to go to the bin directory of the MySQL installation path and manage MySQL using the executable file. For example, the command to log on to MySQL is ./mysql -uroot -p.

Therefore, to maintain the application software on your server, we recommend that you first obtain the relevant O&M knowledge from the official website of the software or other third-party websites. The official documentation for common application software is as follows:

If you selected an application image when creating the simple application server, you can obtain the image version, basic operation steps for the application, and installation path from the console after the server is successfully created. For more information, see Manage applications (for application images).

How do I handle abnormal CPU usage caused by mining programs?

For more information, see Best practices for handling mining programs.

We also recommend that you perform security compliance checks and hardening on your Linux server. For more information, see Operating system security.

Why is the server unable to access GitHub?

When you access GitHub from a server deployed in the Chinese mainland, you may be unable to access it due to cross-border network issues. We recommend that you try again later or resolve the issue yourself using third-party tools.

What do I do if the "The following signatures were invalid: KEYEXPIRED 1544811256" error occurs on an Ubuntu server?

When you run the apt-get update command on an Ubuntu server, you may receive the error The following signatures were invalid: KEYEXPIRED 1544811256. This error occurs because the signature of the software source used on the server has expired and needs to be updated. For more information, see What do I do if the "The following signatures were invalid: KEYEXPIRED 1544811256" error is reported when I run the apt-get update command?.

What do I do if "Internet Explorer Enhanced Security Configuration is blocking content from the following website" is reported when I use Internet Explorer to open a website in Windows?

For the solution, see Error "Internet Explorer Enhanced Security Configuration is blocking content from the following website" when opening a website with IE browser.

What are the database configuration file paths for common third-party open source programs?

The specific configuration file paths depend on the third-party open source program and the type of database used.

Important

If you perform high-risk operations such as modifying the instance or data, be sure to check the disaster recovery and fault tolerance capabilities of the instance to ensure data security.
If you modify the configuration and data of an instance (such as ECS or RDS), we recommend that you create a snapshot or enable RDS log backup in advance.
If you have authorized or submitted logon credentials or other security information on the Alibaba Cloud platform, we recommend that you change them promptly.

The following are the configuration file paths for PHP to call MySQL:

Software name	Configuration file path
UCenter	/data/config.inc.php
Discuz!	/config.inc.php
UCH	/config.php
EmpireCMS	/e/class/config.php
ECShop	/data/config.php
ShopEX	/config/config.php
WordPress	/wp-config.php
Joomla!	/configuration.php
HDWiki	/config.php
PHPwind 8.0	/data/sql_config.php
DedeCMS	/data/common.inc.php
PHPCMS	/include/config.inc.php
.Net program	/web.config

How do I resolve issues where features such as HTTPS settings, load balancing, system reset, and remote connection are affected after Cloud Assistant Agent is uninstalled or stopped?

Cloud Assistant Agent is installed on simple application servers by default. If you uninstall or stop Cloud Assistant Agent, features such as HTTPS settings, load balancing, system reset, and remote connection may be affected. Do not manually uninstall or stop Cloud Assistant Agent on your simple application server.

The solution is as follows:

Remotely log on to the simple application server. For more information, see Connect to a Linux server or Connect to a Windows server.
Check whether the process corresponding to Cloud Assistant Agent is running normally.
- Linux server: Run the following command.
```
ps -ef |grep aliyun-service
```
  If a response similar to the following is returned, the process corresponding to Cloud Assistant Agent is running normally.
```
root     30758 30703  0 16:38 pts/0    00:00:00 grep --color=auto aliyun-service
root     31161     1  0  2021 ?        00:34:31 /usr/local/share/aliyun-assist/2.2.3.256/aliyun-service
```
- Windows server: In Task Manager, check if the aliyun_assist_service process exists.
If the process does not exist, start Cloud Assistant Agent.
- Linux server: Run the following command.
```
# For Linux systems that support systemctl
systemctl start aliyun.service

# For Linux systems that do not support systemctl
/etc/init.d/aliyun-service start
```
- Windows server: Start the AliyunService service in Service Manager.

Note

If you still cannot start Cloud Assistant Agent after performing the above operations, reinstall Cloud Assistant. For more information, see Install Cloud Assistant Agent.

How do I configure multi-user logon for a Windows server?

By configuring multi-user logon, you can allow multiple users to remotely log on to the same simple application server at the same time. For more information, see Configure multiple concurrent remote desktop connections for Windows.

How do I upload files to a simple application server?

You can use WinSCP and FTP to upload files to an Alibaba Cloud simple application server, and perform operations such as uploading, downloading, creating, or deleting files. Select the appropriate method based on the server's operating system.

Windows server: Use Workbench to remotely connect to the Windows server and perform operations such as uploading, downloading, creating, or deleting files. For more information, see Remote connection.
Linux server: Use Workbench, WinSCP, or set up an FTP server to perform operations such as uploading, downloading, creating, or deleting files. For more information, see Use Workbench to remotely connect to a Linux server from the console, Use WinSCP to transfer files between a local Windows system and a Linux server, or Build an FTP server (Linux).

How do I install an application or software on a simple application server

If you are using a simple application server with an application image, the software or runtime environment is already installed. If you are not using a simple application server with an application image, you can also remotely log on to the server to install an application or software yourself.

This example shows how to install Python:

Remotely connect to the simple application server. For more information, see Connect to a Linux instance.
Run the following command to install the Python environment.
This example installs the Python 2.7 environment.
```
sudo yum install python
```
The system displays a response similar to the following. Enter y as prompted.
```
Loaded plugins: fastestmirror 
... 
Is this ok [y/d/N]: y
 ...
```
Run the following command to check if the Python environment is installed successfully.
```
python -V
```
If the following response is returned, Python 2.7 has been installed successfully.
```
[admin@iZbp176xsi6ct73elzq**** ~]$ python -V
Python 2.7.5
```

How many service identification numbers does a simple application server support for ICP filings?

A simple application server supports up to five service identification numbers (SNs), which allow you to complete five website ICP filings. Each website can be attached to multiple domain names. For example, you have filed for two websites. The first website is attached to the domain name aliyundoc.com, and the second website is attached to the domain names example.com and example.org. After the ICP filing is approved, you can use each attached domain name to access the website normally.

Note

If the second website is attached to multiple domain names, you need to ensure that these domain names open the same website content. You cannot use example.org to attach to another website after the ICP filing is approved.
ICP filings are only for top-level domain names. You can build a new website on a simple application server and attach it to blog.aliyundoc.com, and then build another website and attach it to new.example1.com. This method of building websites is not restricted and does not count towards the limit of filing for a maximum of five websites.

What do I need to know before I apply for an ICP filing for a simple application server?

Before you use a simple application server in the Chinese mainland region to provide external website services, you need to apply for an ICP filing. For more information, see What is an ICP filing?
Simple application servers in regions outside the Chinese mainland do not require an ICP filing.
For more information about the ICP filing process, see ICP filing process.
A service identification number is a verification code used to associate your simple application server when you submit ICP filing information in the Alibaba Cloud ICP Filing system. For information about how to apply for a service identification number, see (Optional) Authorize another account for ICP filing. Note the following when applying for a service identification number:
- Starting from May 21, 2018, the subscription duration of a simple application server for which a service identification number is requested must be three months or longer (including renewals).
- The public IP address of a server can be attached to up to five service identification numbers, allowing you to complete five website ICP filings. A successful ICP filing for one website consumes one service identification number, which is then considered used and cannot be used for another website's ICP filing. If you later unregister the website or remove Alibaba Cloud from the service provider list, the service identification number remains in a used state and cannot be used for another website's ICP filing.
- The number of domain names that can be submitted for each service identification number is as follows:
  - If it is your first ICP filing, you can submit five separate websites, and each website will correspond to multiple domain names.
  - If it is a new ICP filing, you only need to submit one domain name for each website, and you can submit multiple websites multiple times. For example, if there are multiple domain names under the ICP filing number ICP Bei No. 1200000-1, you can add any one of the domain names under ICP Bei No. 1200000-1, and the other domain names will be automatically added. After ICP Bei No. 1200000-1 is submitted, you can continue to submit other ICP filing numbers.
- Domain names without an ICP filing do not support launching a website for access in advance. You need to shut down the website for ICP filing according to relevant regulations.
- If the website's domain name has already been successfully filed through other channels, you need to transfer the ICP filing to Alibaba Cloud. After the ICP filing transfer request is approved by the system, the website can be opened for access. In addition, you need to complete the transfer procedure within 30 days. Otherwise, the page will still be inaccessible.

What is the ICP filing policy for simple application servers?

Starting from May 21, 2018, the subscription duration of your purchased simple application server must be three months or longer (including the cumulative duration of multiple renewals) to be eligible to apply for a service identification number. Other rules remain unchanged.

Simple application servers purchased before May 21, 2018, are still subject to the original service identification number application rules and are not affected by this adjustment.

I purchased a one-month simple application server and then renewed it for two months. Can I apply for a service identification number for an ICP filing?

Yes. After renewing for two more months, your subscription duration has reached three months, and you can apply for a service identification number for an ICP filing.

I purchased a simple application server for more than three months, but it is about to expire. Can I still apply for a service identification number for an ICP filing?

Yes. If the server's subscription duration is three months or longer, you can apply for a service identification number before it expires.

Important

During or after the ICP filing process, if the simple application server is not renewed and is released upon expiration, the successfully filed website will no longer be able to point to that server. The ICP filing number may be canceled, and website access will be affected.