Stackify is now BMC. Read theBlog

PHP Profiling: How to Find Slow Code

By: KimSia
  |  May 2, 2023
PHP Profiling: How to Find Slow Code

 I use performance monitoring tools primarily to find slow and buggy code. At the start of development, I typically use the tools more for finding software bugs. Once the codebase is at a relatively stable phase, then I shift my focus toward finding less performant code. Which is why I turn to tools like Retrace to help with profiling for better performance. In this article, I’ll focus more on the performance monitoring usage of PHP profilers, especially in terms of code-level performance. I’ll use Retrace to show how you can profile your PHP codebase and trace through your code transactions. Then I’ll dive a little deeper into the use of traces as a means to surface your slowest functions and queries. In fact, I’ll use an actual codebase for a client project to show you the basic steps of profiling.

Here’s a look at the topics I’ll cover:

  1. Why profiling?
  2. The three types of profiling
  3. The three types of APM tools
  4. Differences between tracing and profiling
  5. Detailed steps to perform PHP profiling
  6. Supported technologies for profiling via Retrace
  7. Building a more complete profile

Did that whet your appetite? Let’s dive in!

Why use code profiling?

These days, code is becoming increasingly complicated. The term “full stack” started getting popular in 2014 precisely because, by default, nobody can know the full stack any more. There’s just a huge explosion of new technologies, layers, and devices out there in general. And it’s not just your own stack. There are microservices, API calls, and serverless functions from other platforms.

But with profiling, developers can get a better understanding of how their web applications are performing. And they can do this function by function, query by query. In a nutshell, profiling gives you visibility over your web application’s performance.

With that in mind, I deliberately chose a real-life client PHP project to run profiling on. Because nothing beats an actual project to show you, in the greatest clarity, how profiling really works.

What are the types of profilers?

For profilers, there are three types:

  • Standard profilers
  • Tracing profilers
  • Application performance monitoring (APM) tools

Let me cover these briefly.

Standard profilers tend to look at method or line-level profiling. Profiling at the method or line level can be really slow. Although this means you get a highly granular picture, you wouldn’t want to do that often—maybe at most two or three times a year. In most cases, you’d turn this on for your local environment when you need to look for a weird CPU performance issue. But note that if you do turn this on, the profiling can slow down your application.

Another type of profiling, transaction tracing, is lightweight enough to be the kind you can use in day-to-day development. It doesn’t slow you down unnecessarily, and it surfaces any performance issues almost as quickly as you can write code.

Finally, APM is for you to install on your development, staging, and even production servers. You can run these tools all the time. Therefore, it’s crucial the overhead on the servers is low even when you turn on the APM tool you installed. For a more detailed breakdown of how these three types of profilers differ, check out the article here.

The three types of APM tools

Of the three types of profilers, I’m going to focus on the APM tools. This area can be further subdivided into three types. This Stackify analysis of APM tools breaks them down:

  1. App metrics-based – Several tools use various server and app metrics and call it APM. At best, they can tell you how many requests your app gets and potentially which URLs might be slow. Since they don’t do code-level profiling, they can’t tell you why.
  2. Code-level performance – Stackify RetraceNew Relic, AppDynamics, and Dynatrace are the typical type of APM products you think of, based on code profiling and transaction tracing.
  3. Network-based – Extrahop uses the term APM in regards to their ability to measure application performance based on network traffic. There is a whole product category called NPM that focuses on this type of solution.

I’m going to focus on code-level performance for my PHP web application.

The differences between tracing and profiling

Now that you know the various types of profiling, how do they differ from tracing? Tracing is probably a more tactical-level activity, while profiling is more encompassing. Also as a developer, you’re likely more motivated to employ tracing for finding bugs. If that’s the case, you may want to read this more detailed write-up of how tracing helps with bug-finding.

In contrast, profiling is about building an inventory of performance events and timings for the execution throughout your web application usage cycles. If you run profiling on the production environment, you can even build a detailed picture of how performance is affecting your users in real life.

The five steps of profiling PHP code to find inefficiencies

And now finally, it’s time for the main event! In the next five sections, I’ll use a real PHP code project to show you how I use Stackify’s Retrace tool to do a simple profiling to find slow-performing queries and functions. For confidentiality reasons, I can’t show you the actual code. However, by trying out Retrace properly with a real PHP codebase, you can get a good sense of how useful profiling can be. So let’s get started!

Step 1: Install on the development machine

Step 1: Install on the development machine
Figure 1

Begin with signup and installation. I recommend starting with the local development environment so you can start dipping your toes into PHP profiling. This way, you’ll get the best of both worlds: minimizing the risk to the production environment, while running as close to actual code profiling as possible.

After you select the configuration based on your environment, you can copy and paste the installation command. The installation command is also provided to you right in the same page. Note: Make sure to change the last argument to “QA”.

Here’s your installation command:

wget https://s1.stackify.com/Account/AgentDownload/Linux --output-document=stackify.tar.gz 
&& tar -zxvf stackify.tar.gz stackify-agent-install-32bit && cd stackify-agent-install-32bit 
&& sudo ./agent-install.sh --key <your-activation-key> --environment QA

Your follow-up step would be to update the php.ini to include the Stackify extension. In my case, I have a legacy PHP 5.6 web application running php5.6-fpm on nginx. So I went to /etc/php/5.6/fpm/php.ini to append the following code:

[stackify]
extension=stackify.so
stackify.application_name=Test Application
stackify.environment_name=QA

Notice that the environment_name matches the last argument of our installation command.

Step 2: Restart all services

Restart all your services. In my case, that will be the following:

sudo service php5.6-fpm restart
sudo service nginx restart

Your commands may differ depending on your Linux operating system version and the services you use.

Run the phpinfo web page, and you should see a Stackify extension being turned on:

Run the phpinfo web page, and you should see a Stackify extension being turned on:
Figure 2

Ta-da! You had a successful installation of Stackify.

Now, go back to your Stackify dashboard and check under Monitoring > Servers. If you see what’s represented in Figure 3, great news! Your server was detected on the Stackify dashboard.

https://www.hitsubscribe.com/wp-content/uploads/2018/10/Screen-Shot-2018-10-09-at-12.55.57-PM.png
Figure 3 

More importantly, your server is rated as Available and Online.

Monitoring and Diagnostics

Step 3: Visit the service, and profile the PHP code

Now that I’m done with installing and setting up, I’m ready to go ahead with profiling. These are the next steps:

  1. On the Dashboard, visit Web Apps > click on the app.
  2. Select the tab Performance (APM+), the section By Request, and the criteria: PHP and Database.
Visit the service, and profile the PHP code
Figure 5

Step 4: Drill into the code

Now, let’s consider if we want to look at the requested action with the biggest time spent in the PHP section. In this case, that will be SitesController::index. When I click on it, I get this breakdown:

https://www.hitsubscribe.com/wp-content/uploads/2018/10/Screen-Shot-2018-10-09-at-8.56.43-PM-1024x248.png
Figure 6

Another great way to drill in is to click on “Traces.” For example, I want to improve this particular requested action: GET-quotationscontroller::edit.

Another great way to drill in is to click on "Traces." For example, I want to improve this particular requested action: GET-quotationscontroller::edit.
Figure 7

Before optimization, my GET-quotationscontroller::edittook around 721ms. When I click on “View” to drill down further, I see the exact time spent per query and PHP function:

Before optimization, my GET-quotationscontroller::edittook around 721ms. When I click on "View" to drill down further, I see the exact time spent per query and PHP function:
Figure 8

Step 5: Time to optimize

On the left-hand side of the Figure 8 image, you can see how much time each function or query takes in milliseconds (ms). Furthermore, those that take too long based on the profiler are highlighted. In my case, as you can see in this screenshot, Controller::invokeAction is highlighted for taking too long.

To address this, I decide to focus on those queries that take the most time. As a developer, this is like playing a game. I start by targeting the most inefficient queries. After I select one, I get into a tight change-check-change loop until I get the results I need.

Another great way to optimize is to look through all those slow queries and single out the ones that are no longer necessary. The best code is no code.

After I remove or optimize the performance of the highlighted item(s), I refresh the Traces tab and get this:

After I remove or optimize the performance of the highlighted item(s), I refresh the Traces tab and get this:
Figure 9

Now, my time taken for GET-quotationscontroller::edit has gone down from 721 ms to about 575 ms. Which is pretty amazing, given that I wasn’t even aware there was inefficiency there in the first place!

Supported technologies for php profiling via Retrace

After seeing this demonstration of an actual PHP codebase being put through its paces by Retrace, you may be wondering, “What stack are you using? Does this apply to my PHP stack?”

My client profiling project uses CakePHP 2.x, PHP 5.6, and MySQL. You can use other popular technologies and frameworks as well, such as the following:

  • Laravel, Zend, CodeIgniter, Symfony, CakePHP
  • Eloquent, PDO, MySQL, MongoDB
  • Curl, SOAP, Memcached, Redis
  • WordPress, Magento, Drupal

You can view a complete list of supported frameworks in Stackify’s documentation. As long as you’re running popular PHP frameworks and CMS systems, there should be no issue with using Retrace to produce the same results I did.

Additional considerations for building a more complete profile

So now that we’ve looked extensively at how to optimize a requested action in a PHP codebase, you may be wondering what else we can do.

You’ll recall I mentioned earlier that a profile builds an inventory of performance events. In addition to tracing all the performance of the queries and functions involved in your application’s calls, Retrace also lets you add log management.

Managing logs

Logs can easily be sent via a simple configuration change to popular logging frameworks like log4net, NLog, Serilog, Log4j, logback, and more. This means logs such as the following can contribute to building a complete picture of the performance health of your PHP application:

  • Application logs
  • Syslog
  • Windows events
  • Web server logs (IIS, Apache, NGINX)

This is how logs are shown in Retrace:

This is how logs are shown in Retrace:
Figure 10

Tracking external HTTP calls

I mentioned how complexity is increasing with microservices and platforms providing API calls. This means monitoring your application performance becomes more crucial if your application relies heavily on external services. In-depth tracing, even to the point of external calls, therefore becomes more crucial as well.

While my PHP project doesn’t directly call any external API calls (at least not yet!), I can show you how tracking external API calls should look in Retrace:

While my PHP project doesn't directly call any external API calls (at least not yet!), I can show you how tracking external API calls should look in Retrace:
Figure 11

In this .NET example (Figure 11), notice how tracking external API calls becomes part of the “Traces” view as well. If your PHP code calls external APIs, you can expect the same kind of tracking as well.

Server performance monitoring

On top of tracking performance at your application layer, Retrace also monitors server performance. The screenshot in Figure 12 displays the performance stats of my local development environment, which is essentially a VirtualBox instance:

Server performance monitoring
Figure 12

By drilling into the specific server instance, I can even get an idea about the network, storage, and other relevant server stats:

By drilling into the specific server instance, I can even get an idea about network, storage, and other relevant server stats:
Figure 13

Monitoring specific requests/transactions

Every once in a while, you may face an issue where you have a few tricky requests or transactions that you can’t immediately optimize. You need to monitor the situation more closely over a substantial period of time in a production environment. This is where the option to select key transactions can really shine.

Remember the example of optimizing the GET-quotationscontroller::edit request? What if I wanted to specifically target it for an extended period of monitoring? I can do that by directly clicking on it and adding it as my specific monitoring.

That brings up a modal window like this:

Monitoring specific requests/transactions
Figure 14

Scrolling down, there’s an option for creating a monitor:

Scrolling down, there's an option for creating a monitor
Figure 15

This lets you specify which environment (assuming you install your monitoring on multiple environments for your application) you want to set this specific monitor to.

Error tracking

I run into this all the time as a developer: No matter how extensively I tested my application using both automated and manual testing, my real-life users still manage to find errors. But when I ask them how they produced the errors or bugs, they have a hard time explaining it.

With error tracking, you can get an exact picture of how errors occur and what they really are without relying on your non-tech-savvy users. In this “Errors View” window, I can see the errors I generate in my PHP codebase while optimizing:

picture of how errors occur and what they really are without relying on your non-tech-savvy users. In this "Errors View" window, I can see the errors I generate in my PHP codebase while optimizing:
Figure 16

Conclusion: Go after low-hanging fruit

This article covered the theoretical areas of a profiling tool and the strong reasons why you need to make profiling part of your developer toolbox, given the increasing complexity of technology. From there, I took a deep dive into how I used PHP profiling to make visible and optimize a real-life PHP codebase. I also looked at the effects of profiling on code-level performance.

Next, you saw the five steps from installation to optimization I used for an actual requested action. With the “Traces” view in the APM, specific paths within an application became visible in great detail. (You can read this article to learn even more uses of the “Traces” view for profiling.) This article also covered the other information you need to build a more complete profile of your PHP application.

Before I end, here’s a gentle reminder: Once your profiling surfaces the inefficient part of your code, attack the low-hanging fruit. Target the slowest paths and delete those that are no longer needed. And trust me, all codebases will definitely have some unnecessary fat. Run a profile to find them and trim them. You’ll be glad you did.

Improve Your Code with Retrace APM

Stackify's APM tools are used by thousands of .NET, Java, PHP, Node.js, Python, & Ruby developers all over the world.
Explore Retrace's product features to learn more.

Learn More

Want to contribute to the Stackify blog?

If you would like to be a guest contributor to the Stackify blog please reach out to stackify@stackify.com