To store PHP sessions in Memcached on a Debian server, install the memcached daemon and PHP’s memcached extension, then set session.save_handler = memcached and a Memcached session.save_path in the PHP-FPM runtime. Nginx only forwards requests to PHP-FPM; it does not store or serialize the session.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
What handles the session
A request passes through three separate components:
As an Amazon Associate I earn from qualifying purchases.
- Nginx accepts HTTP requests and sends PHP requests through FastCGI.
- PHP-FPM executes the application and loads the PHP configuration used by that FPM service.
- Memcached stores the serialized session record when PHP’s
memcachedsession handler writes it.
The session cookie normally contains only an identifier such as PHPSESSID. PHP-FPM uses that identifier to read and update the corresponding value in Memcached. Adding an Nginx memcached_pass directive does not configure PHP sessions: that Nginx module serves cached response content and does not implement PHP session serialization, expiration, or locking.
Prerequisites and package installation
You need a Debian host running Nginx, PHP-FPM, and an application that uses PHP’s normal session API. Install the daemon and extension from Debian packages so service files, dependencies, and upgrades are managed by the distribution.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
- Refresh package metadata:
sudo apt update- Install Memcached and the PHP extension:
sudo apt install memcached php-memcachedphp-memcached is a virtual package. It resolves to the extension for Debian’s default PHP version. If the machine has several PHP versions, install the package matching the FPM version that serves the site, such as:
sudo apt install php8.2-memcachedThe version in that example is illustrative; use the version actually installed on the host. List FPM services with:
systemctl list-units 'php*-fpm.service'Then identify the matching PHP binary and socket. Checking the command-line SAPI alone is not enough because CLI PHP and PHP-FPM can load different ini files or extensions.
Keep Memcached on a private network
Memcached is a volatile cache, not a durable database. It should listen only on a private interface or an address protected by a network ACL. Do not expose an unauthenticated Memcached daemon to the public Internet.
After installation, inspect the listening address and port:
ss -ltnp | grep 11211The usual TCP port is 11211. The address should match your topology: loopback for a single host, or a private address reachable by the application servers for a dedicated cache host. Apply host-firewall rules so only the intended PHP-FPM clients can connect.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhere your deployment supports it, enable SASL and configure the same username and password in the PHP connection. Authentication does not replace network isolation; use both when they are available and appropriate.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Configure PHP-FPM to use Memcached sessions
Set the session options in the php.ini loaded by FPM, or in an FPM configuration file that is applied to the relevant pool. Do not change only the CLI php.ini; web requests will continue using the FPM values.
The essential single-server configuration is:
session.save_handler = memcached
session.save_path = "127.0.0.1:11211"Use the correct handler name
memcached and memcache are different PHP extensions. The configuration above is for the newer memcached extension supplied by the php-memcached package. Examples written for the older memcache extension may use session.save_handler = memcache or a tcp:// prefix. Do not mix those syntaxes with this setup.
PHP’s built-in default is files. If that value remains effective in the FPM runtime, PHP will continue writing local files regardless of whether the Memcached daemon is running.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsPoint to several Memcached servers
For a pool, use a comma-separated list of host-and-port entries:
session.save_path = "cache-a.example:11211,cache-b.example:11211"This is the syntax implemented by the memcached extension. Ensure that every PHP-FPM host can resolve and reach each name, and that firewall rules permit the connections. A pool is not the same as durable replication: an eviction or restart can still remove a session.
Choose session lifetime deliberately
PHP documents a default session.gc_maxlifetime of 1,440 seconds. The default session-cookie lifetime is zero, which means the browser normally treats the cookie as lasting for the browser session. Those defaults do not automatically define your application’s idle timeout.
Set a policy that agrees across three layers:
- PHP:
session.gc_maxlifetimeand any session-cookie settings. - Application: its own idle timeout, logout behavior, and “remember me” rules.
- Memcached: the expiration used by the session handler and any cache eviction caused by memory pressure.
A longer lifetime is not automatically safer. It can leave stolen session identifiers useful for longer, while an unreasonably short value causes unexpected logouts.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Connect Nginx to the correct PHP-FPM socket
Nginx must forward PHP requests to the FPM service whose configuration you changed. A minimal location on Debian commonly looks like this:
location ~ .php$ {
include snippets/fastcgi-php.conf;
include fastcgi_params;
fastcgi_pass unix:/run/php/php8.2-fpm.sock;
}The snippet name and socket path vary by Debian release and PHP version. Replace php8.2-fpm.sock with the socket exposed by the active service. The FastCGI parameters must include at least the script filename and query string; Debian’s packaged snippets normally provide these, and Nginx’s FastCGI documentation describes their role.
Do not add memcached_pass to this location for session storage. That directive belongs to Nginx content caching, while PHP-FPM must invoke the session handler.
After changing modules or ini files, restart the matching FPM service:
sudo systemctl restart php8.2-fpmUse the actual service name reported by systemctl list-units 'php*-fpm.service'. Reloading Nginx alone does not make a newly installed PHP extension available to already-running FPM workers.
Verify the FPM runtime, not just the shell
Verification should prove four things: the extension is loaded by FPM, the effective session settings are correct, the daemon is reachable, and a browser session survives a second request.
1. Confirm the extension in FPM
For a temporary diagnostic page, create a document containing:
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
<?php phpinfo();Request it through Nginx and check that the memcached module appears. Check the effective values for session.save_handler and session.save_path in the same output. Remove the page immediately after testing; never leave a production phpinfo() endpoint publicly accessible.
Recommended Free Tools
2. Check the daemon and network path
Confirm that Memcached is listening on the intended address with:
ss -ltnp | grep 11211If PHP-FPM runs on another host, run the equivalent connectivity check from that host and verify the private firewall path. A daemon bound only to 127.0.0.1 cannot accept connections from a separate web server.
3. Test the same cookie twice
Use a temporary application endpoint that starts a session, writes a value, and displays it on the next request. The first response should set PHPSESSID; the second request must send that same cookie and display the previously written value. Test through the real Nginx virtual host, not by invoking a PHP script from the shell, because the CLI SAPI can use different settings.
4. Inspect operational evidence
Check Memcached statistics and the PHP-FPM and Nginx logs while making the test requests. Look for connection failures, authentication errors, lock wait timeouts, or warnings about an unavailable server. A successful page response does not prove that the intended handler was used if the application never called session_start() or if the cookie changed between requests.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Session locking and concurrent requests
Several simultaneous requests can use one session identifier: an HTML page may trigger parallel AJAX calls, or a user may open multiple tabs. Debian’s Memcached configuration documents session-specific controls, including:
memcached.sess_locking, enabled by default, to prevent concurrent requests from corrupting one session.- Minimum and maximum lock-wait times, retry count, and lock expiry.
- Consistent hashing for a session pool.
- Failed-server removal and optional replicas.
- Binary-protocol selection, connection timeout, and SASL username/password settings.
Begin with the packaged defaults. Change one behavior at a time while observing real application concurrency. Disabling locking can increase parallelism for some workloads, but it allows overlapping writes to race; the last write may overwrite data produced by another request. Very short lock expiry can release a lock while the original request is still working, producing the same kind of collision.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
If users report intermittent logouts after adding a second web server, confirm that every server points to the same session pool and uses the same session-cookie name, domain, path, and encryption/signing policy. A browser that alternates between servers must present an identifier that each server can resolve to the same Memcached record.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What happens during restarts, evictions, and outages
Memcached intentionally trades durability for cache behavior. A process restart, host reboot, memory pressure, or eviction can remove session records. When that happens, PHP cannot reconstruct the old server-side value from the cookie alone; the user is normally treated as logged out and must establish a new session.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Plan for that behavior before adopting Memcached for login state:
- Do not promise users that a login survives a cache restart unless the application has another recovery mechanism.
- Monitor available memory, evictions, rejected connections, and command errors.
- Size the cache so ordinary session growth does not immediately evict active records.
- Ensure the application handles a missing session as an unauthenticated or expired session rather than displaying a server error.
If durable login state is a requirement, evaluate a database- or Redis-backed design separately. Compare persistence after restart, locking semantics, eviction behavior, topology and failover, operational complexity, and whether your application already operates that service. No general benchmark follows from the configuration alone.
Security boundaries that are easy to miss
Protect the Memcached endpoint
Memcached session values can contain authentication state and other user data. Bind the daemon to a private interface, restrict source addresses with a firewall or network ACL, and use SASL consistently where supported. Never rely on an Internet-facing, unauthenticated listener.
Protect the FastCGI listener
The PHP-FPM Unix socket or TCP listener also needs access control. PHP-FPM documentation warns that a client able to open a FastCGI connection can influence request configuration, including auto_prepend_file, and can execute arbitrary code. Nginx should be the only intended FastCGI client. Use filesystem ownership and mode bits for a Unix socket, or bind a TCP listener to a private address and firewall it.
Protect the browser-side identifier
Memcached controls the server-side value; it does not protect the cookie while it travels between browser and site. Serve the application over HTTPS and set cookie attributes appropriate to the application: Secure, HttpOnly, and an intentional SameSite value. Configure those at the application or framework layer, and review domain and path scope so the identifier is not sent to unrelated hosts.
Troubleshooting by symptom
| Symptom | Likely cause | Checks and correction |
|---|---|---|
session.save_handler still shows files |
The change was made in CLI PHP or an ini file that FPM does not load. | Inspect the temporary FPM phpinfo() output, locate the loaded configuration file, set the value there, and restart the matching FPM service. |
| “Memcached class” or extension errors | The extension is missing from the active PHP version, or the wrong package was installed. | Install the versioned phpX.Y-memcached package that matches the FPM service, restart FPM, and verify the module in FPM diagnostics. |
| Sessions vanish on every request | The cookie is not returned, the save path is wrong, or PHP cannot reach Memcached. | Inspect the response and request cookies, confirm the effective session.save_path, test port 11211 from the FPM host, and read FPM logs. |
| Works on one server but not after load balancing | Servers use different Memcached endpoints or incompatible cookie/session settings. | Use the same comma-separated pool and application session configuration on every server; confirm all nodes can resolve and reach every cache host. |
| Intermittent “already in use” or stale values during AJAX calls | Lock waits, retries, or lock expiry are unsuitable for the request duration. | Observe lock warnings, retain locking while diagnosing, then adjust one session-lock setting at a time and test concurrent requests. |
| Users are logged out after a cache restart | Expected Memcached volatility or eviction. | Treat the event as session loss, investigate memory and restart events, and choose a durable session backend if that behavior is unacceptable. |
| Nginx returns a gateway error after PHP changes | The socket path or FPM service name in fastcgi_pass is wrong, or FPM is stopped. |
Check systemctl status for the active FPM service, verify the socket under /run/php/, test Nginx configuration, and review both service logs. |
Single-server deployment checklist
- Install
memcachedand the extension matching the active PHP-FPM version. - Bind Memcached to loopback or another private address and enforce firewall rules.
- Set
session.save_handler = memcached. - Set
session.save_pathto the correcthost:port, using comma-separated entries for a pool. - Set lifetime and cookie policy to match the application’s idle-timeout requirements.
- Point Nginx’s
fastcgi_passat the same FPM version whose configuration you edited. - Restart FPM after installing the module or changing its ini files.
- Verify the extension and effective settings through FPM, then remove diagnostic pages.
- Test a value across two requests carrying the same
PHPSESSID. - Monitor Memcached, FPM, and Nginx logs and plan for session loss during evictions or restarts.
Multi-server deployment checklist
- Provide every PHP-FPM host with identical handler, cookie, and lifetime settings.
- Use a shared Memcached pool in
session.save_path; do not silently fall back to local files on one node. - Confirm private DNS, routing, ACLs, and firewall rules from every PHP-FPM host to every cache endpoint.
- Keep session locking enabled while measuring concurrency, then tune waits and retries based on observed request duration.
- Decide how failed servers, replicas, and consistent hashing should behave before a node outage.
- Document that cache loss logs users out, and provide an application response that safely starts a fresh session.
Memcached versus other session backends
The right backend depends on what “session” means for your application. Memcached is attractive when fast, shared, non-durable state is acceptable and the service is already operated. A database or Redis design may be more appropriate when restart survival or a different operational model matters.
| Decision axis | Memcached sessions | Database or Redis sessions |
|---|---|---|
| Persistence after restart | Not durable; restart or eviction can remove sessions. | Depends on the database or Redis persistence configuration; verify it for the chosen deployment. |
| Locking | PHP’s extension exposes session-locking controls and related wait, retry, and expiry settings. | Locking semantics depend on the driver and the service configuration. |
| Eviction behavior | Cache pressure can evict active session records. | Behavior depends on the selected database or Redis policy; do not assume it matches Memcached. |
| Topology and failover | Use the extension’s pool, hashing, failed-server, and optional replica controls. | Use the topology and failover mechanisms supplied by the chosen service and driver. |
| Operational complexity | A separate cache daemon, private networking, capacity monitoring, and restart-loss planning are required. | Operational work varies with the service; reuse an existing, well-monitored platform when it meets the application’s needs. |
| Best fit | Shared sessions where losing login state during cache failure is an acceptable trade-off. | Applications that require a different durability or failover contract and can operate that backend reliably. |
The configuration itself does not provide a performance guarantee. Measure your application’s request concurrency, session size, lock contention, and cache-failure behavior before changing production defaults.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
