PHP会话处理器搭配ElastiCache传输加密超时问题求助

环境：Ubuntu 24.04 + PHP 8.3，已启用php8.3-memcached扩展
目标：将强制加密的ElastiCache Memcached无服务器实例配置为PHP会话处理器
现状：直接连接加密实例失败，未加密实例正常；通过stunnel转发后，telnet和PHP Memcached类可正常操作，但PHP会话使用时出现超时错误

初始PHP会话配置（连接失败） #

session.save_handler = memcached
session.save_path = "xxxxxxx:11211"

stunnel配置 #

fips = no
setuid = root
setgid = root
pid = /var/run/stunnel4/stunnel.pid
delay = yes
options = NO_SSLv2
options = NO_SSLv3

[elasticache-memcached]
client = yes
accept = 127.0.0.1:11211
connect = xxxxxxx:11211

验证情况（操作正常） #

1. telnet测试

telnet 127.0.0.1:11211
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
stats
STAT version 1.6.22
STAT accepting_conns 1
STAT curr_items 0
END

2. PHP Memcached类测试

$memcached = new Memcached('test_pool');
$memcached->addServer('127.0.0.1', 11211, 1);

echo print_r($memcached->getStats(), true);

返回结果：

Array ( [127.0.0.1:11211] => Array ( [version] => 1.6.22 [accepting_conns] => 1 [curr_items] => 0 ) )

PHP会话测试脚本（执行失败） #

<?php
    error_reporting(E_ALL);
    ini_set('display_errors', 1);
    
    session_start();

    $_SESSION['test_session'] = 'session_value';

    print('<pre>');
    print_r($_SESSION);
    print('</pre>');

    session_write_close();
?>

PHP错误日志 #

PHP Warning:  session_start(): Failed to write session lock: A TIMEOUT OCCURRED in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Failed to write session lock: A TIMEOUT OCCURRED in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Failed to write session lock: A TIMEOUT OCCURRED in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Failed to write session lock: A TIMEOUT OCCURRED in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Failed to write session lock: A TIMEOUT OCCURRED in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Failed to write session lock: A TIMEOUT OCCURRED in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Unable to clear session lock record in /var/www/public_html/test.php on line 5
PHP Warning:  session_start(): Failed to read session data: memcached (path: 127.0.0.1:11211) in /var/www/public_html/test.php on line 5

解决建议 #

1. 调整PHP会话的Memcached超时参数
   PHP的memcached会话扩展有独立的超时配置，在php.ini中添加或修改：

   memcached.sess_connect_timeout = 2000
   memcached.sess_send_timeout = 2000
   memcached.sess_recv_timeout = 2000
   

   单位为毫秒，适当调高以适配加密转发的延迟。

2. 优化stunnel连接复用
   在stunnel的[elasticache-memcached]区块中添加连接复用配置，适配PHP的持久连接需求：

   reuse = yes
   

3. 直接使用Memcached扩展的SSL支持
   无需stunnel，让PHP直接通过SSL连接加密实例。修改php.ini：

   session.save_handler = memcached
   session.save_path = "tcp://xxxxxxx:11211?ssl=true"
   

   先通过php -i | grep memcached确认扩展已启用SSL支持（显示SSL support => enabled），若未启用，需安装libmemcached-dev和libssl-dev后重新安装php8.3-memcached。

4. 调整PHP会话锁参数
   超时可能与会话锁机制有关，临时调整锁参数排查：

   session.lock_timeout = 2
   session.use_strict_mode = 0
   

   若测试正常，说明锁超时设置过短，需根据实际延迟调整。

5. 排查系统层面限制

   • 检查SELinux/AppArmor是否限制PHP进程连接本地端口
   • 查看/var/log/syslog中的stunnel日志，确认是否有连接中断或异常

内容的提问来源于stack exchange，提问作者Praemon