Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Memory Leak since 22.01 Upgrade

    Scheduled Pinned Locked Moved Virtualization
    6 Posts 3 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      ironmonkey
      last edited by ironmonkey

      Hello,

      Since we upgraded our pfSense to 22.01 I have noticed that after about 2 weeks Memory will slowly creep up from ~30% to max'd out before it starts logging swap related errors in the system logs. We then need to reboot and it is good for another 2 weeks before this happens again.

      This is only a T2 Nano however we have not had this issue before and configuration/usage remains the same. We have other pfSense devices in AWS that do not have this issue. The primary difference is that this is the only one running IPSEC. I have confirmed that I do not see the pcsd process running as described in here. And we only have a few packages installed.

      Below is a "top -aSH -o res -w". Can anyone advise if it is expected to see so many ipsec processes running at the same time? Or is there anything else of concern?

      last pid: 14331;  load averages:  1.00,  0.92,  0.83                                                                                                                                                                                                                                                 up 7+17:46:10  16:19:26
      152 threads:   3 running, 132 sleeping, 17 waiting
      CPU:  0.0% user,  0.0% nice,  0.0% system,  0.0% interrupt,  100% idle
      Mem: 39M Active, 36M Inact, 28M Laundry, 238M Wired, 51M Buf, 96M Free
      
        PID USERNAME    PRI NICE   SIZE    RES SWAP STATE    TIME    WCPU COMMAND
      79468 root         52    0    77M    30M   0B accept   0:01   0.00% php-fpm: pool nginx (php-fpm){php-fpm}
      89985 root         52    0    77M    28M   0B accept   0:01   0.00% php-fpm: pool nginx (php-fpm){php-fpm}
      79125 root         52    0    76M    28M   0B accept   0:00   0.00% php-fpm: pool nginx (php-fpm){php-fpm}
        360 root         20    0    75M    17M   0B kqread   0:12   0.00% php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm)
      71390 root         20    0    37M    16M   0B uwait    0:12   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:28   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:27   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:27   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:27   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:27   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B select   0:26   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B uwait    0:09   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         20    0    37M    16M   0B select   0:07   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      71390 root         52    0    37M    16M   0B sigwai   0:00   0.00% /usr/local/libexec/ipsec/charon --use-syslog{charon}
      44471 unbound      20    0    32M  7000K 5476K kqread   0:00   0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf
      
      
      fireodoF 1 Reply Last reply Reply Quote 0
      • fireodoF
        fireodo @ironmonkey
        last edited by

        @ironmonkey

        Maybe its correlated to this:

        https://forum.netgate.com/topic/171653/continuously-increasing-memory-usage-since-the-update-to-2-6/6?_=1655233409927

        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
        pfsense 2.7.2 CE
        Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

        I 1 Reply Last reply Reply Quote 0
        • I
          ironmonkey @fireodo
          last edited by

          @fireodo
          OK, thanks for that information. I'll take and look and see if its mentioned as a fix in the release notes for 22.05.

          R 1 Reply Last reply Reply Quote 0
          • R
            rcoleman-netgate Netgate @ironmonkey
            last edited by

            @ironmonkey If it is in the system patches already then it's likely in the 22.05 builds.

            I haven't gone looking for this specific issue, though, so YMMV.

            Ryan
            Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
            Requesting firmware for your Netgate device? https://go.netgate.com
            Switching: Mikrotik, Netgear, Extreme
            Wireless: Aruba, Ubiquiti

            I 1 Reply Last reply Reply Quote 0
            • I
              ironmonkey @rcoleman-netgate
              last edited by

              Hi @rcoleman-netgate
              Is there a way I can search the system patches to see if it's included in 22.05?

              Thanks.

              R 1 Reply Last reply Reply Quote 0
              • R
                rcoleman-netgate Netgate @ironmonkey
                last edited by

                @ironmonkey If the Redmine catalog indicates something is included in 22.05 then it would be in the next release.

                Ryan
                Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                Requesting firmware for your Netgate device? https://go.netgate.com
                Switching: Mikrotik, Netgear, Extreme
                Wireless: Aruba, Ubiquiti

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.