Runbook Migrasi PHP-FPM ke FrankenPHP Worker Mode: Menghadapi Memory Leak dan Stateful Worker di Lingkungan Produksi

+-----------------------------------------------------------------------------------+
|              ALIRAN REQUEST RUNTIME: PHP-FPM VS FRANKENPHP WORKER                 |
+-----------------------------------------------------------------------------------+

[Model PHP-FPM Tradisional]
Client Request ---> Nginx ---> FastCGI Protocol ---> PHP-FPM Pool Worker
                                                      |--> Bootstrap Framework
                                                      |--> Eksekusi Logika
                                                      |--> Teardown & Free Memory (Die)

[Model FrankenPHP Worker Mode]
Client Request ---> Caddy Engine (Go) ---> Direct CGO Call ---> Persistent Worker Thread
                                                                 |--> (Framework Sudah Ada di RAM)
                                                                 |--> Reset Request State
                                                                 |--> Eksekusi Logika
                                                                 |--> Flush Output (Worker Tetap Hidup)

<?php
// public/frankenphp-worker.php

use Illuminate\Contracts\Http\Kernel;
use Illuminate\Http\Request;

ignore_user_abort(true);

require __DIR__ . '/../vendor/autoload.php';
$app = require_once __DIR__ . '/../bootstrap/app.php';
$kernel = $app->make(Kernel::class);

// Handler loop yang dieksekusi terus-menerus oleh FrankenPHP engine
$handler = static function () use ($kernel): void {
    $request = Request::capture();
    
    // Eksekusi request melalui kernel framework
    $response = $kernel->handle($request);
    $response->send();
    
    $kernel->terminate($request, $response);
    
    // Pembersihan state konteks request secara eksplisit
    if (function_exists('gc_collect_cycles')) {
        gc_collect_cycles();
    }
};

// Menjalankan persistent worker loop dengan kuota restart request
$maxRequests = (int)($_ENV['MAX_REQUESTS'] ?? 1000);
for ($nbRequests = 0; $nbRequests < $maxRequests; ++$nbRequests) {
    $keepRunning = \frankenphp_handle_request($handler);
    if (!$keepRunning) {
        break;
    }
}

// Worker keluar secara natural untuk mencegah memory accumulation
exit(0);

{
    # Matikan admin endpoint jika tidak digunakan di production
    admin off
    
    # Konfigurasi global FrankenPHP engine
    frankenphp {
        # Tentukan skrip entrypoint worker dan jumlah thread worker
        worker /var/www/html/public/frankenphp-worker.php {
            num 16
            env MAX_REQUESTS 1500
        }
    }
}

:8080 {
    root * /var/www/html/public
    encode zstd gzip
    
    # Header keamanan dasar
    header {
        X-Content-Type-Options nosniff
        X-Frame-Options DENY
        Referrer-Policy strict-origin-when-cross-origin
    }
    
    # Lewatkan request ke PHP runtime
    php_server {
        resolve_root_symlink
    }
    
    # Nonaktifkan akses langsung ke hidden files
    @hidden {
        path /.* */.* /vendor/*
    }
    error @hidden 404
    
    log {
        output file /var/log/frankenphp/access.log {
            roll_size 50mb
            roll_keep 10
        }
        format json
    }
}

[Unit]
Description=FrankenPHP High-Performance Server Engine
After=network.target network-online.target
Wants=network-online.target

[Service]
Type=notify
User=www-data
Group=www-data
WorkingDirectory=/var/www/html
ExecStart=/usr/local/bin/frankenphp run --config /etc/frankenphp/Caddyfile
ExecReload=/usr/local/bin/frankenphp reload --config /etc/frankenphp/Caddyfile
TimeoutStopSec=15s
LimitNOFILE=1048576
LimitNPROC=512
PrivateTmp=true
ProtectSystem=full
Restart=always
RestartSec=2s

# Batasan memori cgroups untuk mencegah OOM Killer mematikan seluruh instance
MemoryHigh=3500M
MemoryMax=4000M

[Install]
WantedBy=multi-user.target

                    [Load Balancer / Reverse Proxy]
                                   |
               +-------------------+-------------------+
               | (Bobot 90%)                           | (Bobot 10% -> 50% -> 100%)
               v                                       v
       [Klaster PHP-FPM]                      [Klaster FrankenPHP]
        (Port 9000 Unix)                        (Worker Mode :8080)

# Verifikasi versi dan ekstensi FrankenPHP
frankenphp php-cli -v
frankenphp php-cli -m | sort > /tmp/frankenphp_modules.txt
php-fpm8.3 -m | sort > /tmp/phpfpm_modules.txt

# Periksa apakah ada ekstensi yang hilang
diff -u /tmp/phpfpm_modules.txt /tmp/frankenphp_modules.txt

# Validasi konfigurasi Caddyfile
frankenphp validate --config /etc/frankenphp/Caddyfile

# Kirimkan 50 request beruntun untuk mengecek kebocoran konteks session
for i in {1..50}; do
    TOKEN=$(curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/api/v1/auth-check \
         -H 'Authorization: Bearer test-token-user-alpha')
    if [ "$TOKEN" != "200" ]; then
        echo "Peringatan: Response code menyimpang pada iterasi $i: $TOKEN"
        exit 1
    fi
done
echo "Smoke test berhasil tanpa anomali response."

# Contoh manipulasi bobot upstream via HAProxy Runtime API
echo 'set weight backend_app/frankenphp_node1 5' | socat stdio /run/haproxy/admin.sock
echo 'set weight backend_app/phpfpm_node1 95' | socat stdio /run/haproxy/admin.sock

#!/usr/bin/env bash
# /usr/local/bin/check-worker-memory.sh

set -euo pipefail

PID=$(pgrep -f 'frankenphp run' || true)

if [ -z "$PID" ]; then
    echo "CRITICAL: FrankenPHP service tidak berjalan!"
    exit 2
fi

# Ambil RSS memory dalam Megabytes
RSS_MEM_KB=$(ps -p "$PID" -o rss=)
RSS_MEM_MB=$((RSS_MEM_KB / 1024))

THRESHOLD_WARN=2500
THRESHOLD_CRIT=3500

echo "FrankenPHP PID $PID menggunakan ${RSS_MEM_MB} MB RAM."

if [ "$RSS_MEM_MB" -ge "$THRESHOLD_CRIT" ]; then
    echo "CRITICAL: Penggunaan memori melampaui batas kritis (${THRESHOLD_CRIT} MB)!"
    # Kirim sinyal graceful reload ke FrankenPHP
    systemctl reload frankenphp
    exit 2
elif [ "$RSS_MEM_MB" -ge "$THRESHOLD_WARN" ]; then
    echo "WARNING: Penggunaan memori mendekati batas ambang (${THRESHOLD_WARN} MB)."
    exit 1
else
    echo "OK: Alokasi memori berada dalam rentang normal."
    exit 0
fi

*/5 * * * * root /usr/local/bin/check-worker-memory.sh > /dev/null 2>&1