Slower internet behind SG 3100
-
I have a Netgate SG 3100 appliance running 22.05-RELEASE (arm) FreeBSD 12.3-STABLE.
About two years ago I noticed that this appliance (different software version at the time) was reducing my internet speed from my ISP . My ISP guarantees 800Mbps download and the pfsense appliance was only allowing me to get maybe 500Mbps down at the most.
This was proven by connecting my computer directly to the ISP's modem bypassing the SG 3100.
I found a non Netgate article at the time that I did not bookmark and can't find again. It had me go through some configuration changes such as changing the "Firewall Optimization Options" and possibly checking or unchecking some of the network interface options such as Hardware Checksum Offloading, Hardware TCP Segmentation Offloading, etc. Unfortunately I didn't document my changes. Whatever I changed at the time worked like magic as I started getting the full throughput behind the pfsense.
At some point in the last two years I had to rebuild this pfsense after a software update went bad and also have upgraded the software a few times.
Fast forward to now and I am having the same symptoms again.
I can't help but wonder if some of these changes reverted back or now need to be modified.
Right now my "Firewall Optimization Option" is set to "Conservative", and checkboxes are checked for "Disable hardware checksum offload", "Disable hardware TCP segmentation offload", "Disable hardware large receive offload" and "Enable the ALTQ support for hn NICs".
CPU usage stays around 68%, memory 12% and state table size 1%.
Any recommendations are greatly appreciated.
-
@mikej47 The firewall optimization setting controls how fast states are terminated. It’s not speed related.
What is using the CPU? Diagnostics/System Activity. 60-70% seems absurdly high. Do you have any packages installed? Do you have log compression enabled (?) and if so turn it off.
-
@steveits Log compression is currently set to "bzip2". I will go ahead and change that to "none".
The CPU keeps fluctuating up and down.
I have pfblocker installed and OpenVPN which is being used for remote access only.
last pid: 73021; load averages: 1.04, 1.19, 0.83 up 0+00:15:14 22:57:51 142 threads: 4 running, 116 sleeping, 22 waiting CPU: 16.5% user, 0.2% nice, 21.0% system, 2.6% interrupt, 59.7% idle Mem: 81M Active, 6752K Inact, 186M Wired, 84M Buf, 1704M Free PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 10 root 155 ki31 0B 16K RUN 0 9:08 76.86% [idle{idle: cpu0}] 10 root 155 ki31 0B 16K RUN 1 9:01 69.29% [idle{idle: cpu1}] 9533 root 73 0 49M 35M CPU0 0 0:14 5.86% /usr/local/bin/php_pfb -f /usr/local/pkg/pfblockerng/pfblockerng.inc filterlog 11 root -92 - 0B 176K WAIT 0 0:34 1.56% [intr{mpic0: mvneta2}] 85094 root 24 0 123M 38M piperd 0 0:04 1.17% php-fpm: pool nginx (php-fpm){php-fpm} 27523 root 52 20 5084K 2608K wait 0 0:00 0.20% /bin/sh /var/db/rrd/updaterrd.sh 71013 root 52 20 4156K 1896K nanslp 0 0:00 0.20% sleep 60 11 root -92 - 0B 176K WAIT 1 0:11 0.00% [intr{mpic0: mvneta1}] 22150 root 52 0 123M 38M accept 0 0:10 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 388 root 52 0 121M 38M accept 1 0:08 0.00% php-fpm: pool nginx (php-fpm) 81120 root 52 0 123M 38M accept 0 0:08 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 55695 root 52 0 123M 38M accept 1 0:04 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 46002 root 52 0 121M 37M accept 0 0:03 0.00% php-fpm: pool nginx (php-fpm) 45040 root 52 0 121M 37M accept 1 0:02 0.00% php-fpm: pool nginx (php-fpm) 78146 root 20 0 5760K 2636K bpf 0 0:02 0.00% /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid 8 root -16 - 0B 8192B pftm 1 0:02 0.00% [pf purge] 58742 root 20 0 4916K 2472K select 0 0:02 0.00% /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -P /var/run/syslog.pid -f /etc/syslog.conf -b 192.168.5.1 11 root -60 - 0B 176K WAIT 0 0:01 0.00% [intr{swi4: clock (0)}] 0 root -16 - 0B 144K swapin 1 0:01 0.00% [kernel{swapper}] 42377 root 20 0 22M 7800K kqread 0 0:01 0.00% nginx: worker process (nginx) 41331 root 20 0 11M 5588K select 1 0:01 0.00% /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid{ntpd} 16 root -16 - 0B 24K psleep 1 0:00 0.00% [pagedaemon{dom0}] 11 root -72 - 0B 176K WAIT 0 0:00 0.00% [intr{swi1: netisr 0}] 15035 root 20 0 5204K 2372K nanslp 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 5 root -16 - 0B 16K - 1 0:00 0.00% [cam{doneq0}] 11 root -72 - 0B 176K WAIT 1 0:00 0.00% [intr{swi1: pf send}] 6 root -16 - 0B 8192B e6000s 0 0:00 0.00% [e6000sw tick kproc] 15 root -16 - 0B 8192B mx25jq 0 0:00 0.00% [task: mx25l flash] 0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{softirq_1}] 69554 dhcpd 20 0 13M 8960K select 1 0:00 0.00% /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid mvneta1 mvneta1.5 mvneta0.15 mvneta1.3 mvneta0.25 mvneta0.12 18 root 20 - 0B 24K sdflus 1 0:00 0.00% [bufdaemon{/ worker}] 9 root -16 - 0B 8192B - 1 0:00 0.00% [rand_harvestq] 11 root -92 - 0B 176K WAIT 1 0:00 0.00% [intr{mpic0: mvneta0}] 9868 unbound 20 0 30M 15M kqread 0 0:00 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound} 20 root 16 - 0B 8192B syncer 0 0:00 0.00% [syncer] 11 root -88 - 0B 176K WAIT 1 0:00 0.00% [intr{gic0,s26: ahci0}] 386 root 20 0 91M 22M kqread 1 0:00 0.00% php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm) 9868 unbound 20 0 30M 15M kqread 0 0:00 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound} 97149 _dhcp 20 0 5072K 2444K select 1 0:00 0.00% dhclient: mvneta2 (dhclient) 1 root 20 0 3260K 764K wait 0 0:00 0.00% [init] 426 root 41 20 4956K 2464K kqread 0 0:00 0.00% /usr/local/sbin/check_reload_status 11 root -52 - 0B 176K WAIT 0 0:00 0.00% [intr{swi6: Giant taskq}] 13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_event}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -68 - 0B 80K - 1 0:00 0.00% [usb{usbus1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{softirq_0}] 11 root -52 - 0B 176K WAIT 0 0:00 0.00% [intr{swi6: task queue}] 0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{thread taskq}] 15035 root 20 0 5204K 2372K sbwait 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 11 root -72 - 0B 176K WAIT 1 0:00 0.00% [intr{swi1: netisr 1}] 706 root 20 0 3660K 1100K select 1 0:00 0.00% /sbin/devd -q -f /etc/pfSense-devd.conf 2302 root 52 0 5044K 2568K wait 0 0:00 0.00% login [pam] (login) 24760 root 20 0 9788K 6320K select 1 0:00 0.00% /usr/local/sbin/openvpn --config /var/etc/openvpn/server1/config.ovpn{openvpn} 39509 root 20 0 4848K 2280K nanslp 1 0:00 0.00% /usr/sbin/cron -s 9239 root 20 0 4264K 1980K pipewr 0 0:00 0.00% /usr/bin/tail_pfb -n0 -F /var/log/filter.log 13632 root 26 0 4992K 2576K wait 0 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid 5 root -16 - 0B 16K - 1 0:00 0.00% [cam{scanner}] 5926 root 52 0 5372K 2700K wait 0 0:00 0.00% -sh (sh) 19951 root -52 r0 4288K 4312K nanslp 1 0:00 0.00% /usr/sbin/watchdogd -t 128 73021 root 26 0 6044K 2840K CPU1 1 0:00 0.00% /usr/bin/top -baHS 999 42264 root 20 0 20M 6776K kqread 0 0:00 0.00% nginx: worker process (nginx) 15035 root 20 0 5204K 2372K nanslp 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 14623 root 24 0 5200K 2368K piperd 1 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker} 13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_down}] 6985 root 52 0 4908K 2568K ttyin 0 0:00 0.00% /bin/sh /etc/rc.initial 18 root -16 - 0B 24K psleep 0 0:00 0.00% [bufdaemon{bufdaemon}] 19 root -16 - 0B 8192B vlruwt 1 0:00 0.00% [vnlru] 26 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0: mmc/sd card] 15173 root 34 0 4920K 2544K piperd 0 0:00 0.00% /bin/sh /usr/local/libexec/sshg-fw-pf 16 root -16 - 0B 24K umarcl 0 0:00 0.00% [pagedaemon{uma}] 14422 root 23 0 11M 4060K piperd 1 0:00 0.00% /usr/local/libexec/sshg-parser 18 root 20 - 0B 24K - 1 0:00 0.00% [bufdaemon{bufspacedaemon-0}] 11 root -80 - 0B 176K WAIT 1 0:00 0.00% [intr{gic0,s25:-dhci_fdt0}] 15035 root 20 0 5204K 2372K accept 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 1181 root 20 0 4648K 2192K select 0 0:00 0.00% /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog 13876 root 21 0 4200K 1912K piperd 1 0:00 0.00% /bin/cat 13 root -8 - 0B 24K - 1 0:00 0.00% [geom{g_up}] 98100 root 20 0 4704K 2260K select 0 0:00 0.00% /usr/local/sbin/dhcp6c -c /var/etc/dhcp6c.conf -p /var/run/dhcp6c.pid mvneta2 41924 root 25 0 20M 6308K pause 0 0:00 0.00% nginx: master process /usr/local/sbin/nginx -c /var/etc/nginx-webConfigurator.conf (nginx) 11 root -76 - 0B 176K WAIT 1 0:00 0.00% [intr{swi0: uart uart}] 14 root -68 - 0B 80K - 1 0:00 0.00% [usb{usbus1}] 31920 root 27 0 12M 6544K select 1 0:00 0.00% sshd: /usr/sbin/sshd [listener] 0 of 10-100 startups (sshd) 78024 root 52 0 4972K 2336K select 1 0:00 0.00% dhclient: mvneta2 [priv] (dhclient) 15035 root 52 0 5204K 2372K uwait 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 428 root 52 20 4896K 2300K kqread 0 0:00 0.00% check_reload_status: Monitoring daemon of check_reload_status (check_reload_status) 11 root -80 - 0B 176K WAIT 0 0:00 0.00% [intr{gic0,s2: twsi0}] 60253 root 28 0 4292K 1940K nanslp 0 0:00 0.00% minicron: helper /usr/local/bin/ipsec_keepalive.php (minicron) 60304 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts 59484 root 20 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/bin/ping_hosts.sh (minicron) 59648 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 300 /var/run/ipsec_keepalive.pid /usr/local/bin/ipsec_keepalive.php 14914 root 26 0 4992K 2572K wait 1 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid 61153 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data 59329 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh 60813 root 52 0 4292K 1940K nanslp 0 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts (minicron) 7 root -16 - 0B 8192B waitin 1 0:00 0.00% [sctp_iterator] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{inm_free taskq}] 61458 root 52 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data (minicron) 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{in6m_free taskq}] 14623 root 20 0 5200K 2368K nanslp 0 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker} 25 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod4] 24 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod3] 22 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod1] 23 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod2] 27 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot0: mmc/sd] 28 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot1: mmc/sd] 24760 root 52 0 9788K 6320K kqread 0 0:00 0.00% /usr/local/sbin/openvpn --config /var/etc/openvpn/server1/config.ovpn{openvpn} 0 root -8 - 0B 144K - 1 0:00 0.00% [kernel{CAM taskq}] 16 root -16 - 0B 24K launds 1 0:00 0.00% [pagedaemon{laundry: dom0}] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta0: tx_taskq(0}] 0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_0}] 0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{firmware taskq}] 2 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_io_tqg_0}] 0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{if_io_tqg_1}] 12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue0}] 21 root -16 - 0B 8192B aldslp 0 0:00 0.00% [ALQ Daemon] 3 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 0] 4 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 1] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta1: tx_taskq(0}] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta2: tx_taskq(0}] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{kqueue_ctx taskq}] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{aiod_kick taskq}] 12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue1}] 17 root -16 - 0B 8192B psleep 0 0:00 0.00% [vmdaemon] 0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_1}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_config_tqg_0}] 11 root -56 - 0B 176K WAIT -1 0:00 0.00% [intr{swi5: fast taskq}] 11 root -60 - 0B 176K WAIT -1 0:00 0.00% [intr{swi4: clock (1)}] 11 root -64 - 0B 176K WAIT -1 0:00 0.00% [intr{swi3: vm}] 11 root -72 - 0B 176K WAIT -1 0:00 0.00% [intr{swi1: pfsync}] 11 root -80 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s1: spi0}] 11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s17: xhci0}] 11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s18: ehci0}] 11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s20: cesa1}] 11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s19: cesa0}] -
@mikej47 There’s a bug in pfBlocker due to a logging change in 22.05. I believe it was finally fixed in the last week or two. Try updating that package.
-
@steveits I upgraded pfBlocker last night and the CPU seems to stay a little lower. I will keep an eye on it and maybe try uninstalling pfBlocker and see if that makes a difference.
Should I enable hardware checksum offloading, hardware tcp segmentation offloading, or hardware large receive offloading? From the descriptions these seem like things I should have turned on but I could be wrong.
-
@mikej47 Since I'm at a PC now, for reference the bug was: https://redmine.pfsense.org/issues/13154
"Fixes are merged and working:
3.1.0_6 for pfSense CE
3.1.0_7 for pfSense Plus"There were many posts about it causing slowness and often high CPU so I'm pretty confident that's it.
The bzip log compression can also cause excessive CPU, and Netgate recommends disabling that on slower CPUs:
"The best practice is to disable Log Compression for rotation of System Logs manually for not only existing ZFS installations, but also for any system with slower CPUs. This setting can be changed under Status > System Logs on the Settings tab."re: the networking settings, sorry for skipping that but I would just leave them at the defaults.
https://docs.netgate.com/pfsense/en/latest/config/advanced-networking.html#hardware-checksum-offloading
Per that page "Hardware TCP Segmentation Offloading" and "Hardware Large Receive Offloading" should be disabled. "hn ALTQ support" is irrelevant as that's for Hyper-V NICs. "Hardware Checksum Offloading" I believe defaults to unchecked, though we often have to check it for Suricata so that software doesn't throw false positives on packets. -
I assume the above system activity wasn't taken whilst you were testing the available bandwidth?
Really I would want to see what's using the CPU cycles at that time.
-
@stephenw10 correct, that system activity was not during a speed test.
When I am back at my pc I will post a new system activity not running a speed test now that log compression has been turned off and pfblocker upgraded.
I will also post a system activity taken during a speed test.
-
@stephenw10 Since log compression was turned off and pfBlocker updated my CPU stays around 15 - 25% without any real demanding load on my network.
The first system activity shown below is without a speed test going and the second was is about 5 seconds into a speed test.
I would really like to understand what some of these processes are....CPU Activity
last pid: 15854; load averages: 0.32, 0.41, 0.32 up 1+22:03:25 20:46:02 142 threads: 3 running, 117 sleeping, 22 waiting CPU: 0.5% user, 0.2% nice, 1.4% system, 0.4% interrupt, -4.4% idle Mem: 40M Active, 135M Inact, 186M Wired, 79M Buf, 1618M Free PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 10 root 155 ki31 0B 16K RUN 0 44.9H 99.66% [idle{idle: cpu0}] 10 root 155 ki31 0B 16K CPU1 1 44.9H 97.07% [idle{idle: cpu1}] 11 root -92 - 0B 176K WAIT 1 3:50 1.56% [intr{mpic0: mvneta1}] 11 root -92 - 0B 176K WAIT 1 17:26 1.17% [intr{mpic0: mvneta2}] 55695 root 23 0 123M 39M piperd 1 0:50 0.68% php-fpm: pool nginx (php-fpm){php-fpm} 11 root -60 - 0B 176K WAIT 1 3:16 0.00% [intr{swi4: clock (0)}] 8 root -16 - 0B 8192B pftm 1 1:38 0.00% [pf purge] 78146 root 20 0 5760K 2676K bpf 0 1:26 0.00% /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid 96884 root 20 0 4864K 2464K select 1 1:19 0.00% /usr/sbin/syslogd -O rfc3164 -s -c -c -l /var/dhcpd/var/run/log -P /var/run/syslog.pid -f /etc/syslog.conf -b 192.168.5.1 81120 root 52 0 123M 39M accept 1 0:54 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 22150 root 52 0 123M 40M accept 0 0:52 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 388 root 52 0 123M 41M accept 0 0:48 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 85094 root 52 0 123M 39M accept 1 0:45 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 46002 root 52 0 121M 39M accept 1 0:44 0.00% php-fpm: pool nginx (php-fpm) 45040 root 52 0 121M 39M accept 1 0:43 0.00% php-fpm: pool nginx (php-fpm) 6 root -16 - 0B 8192B e6000s 1 0:29 0.00% [e6000sw tick kproc] 84579 dhcpd 20 0 13M 8932K select 0 0:18 0.00% /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid mvneta1 mvneta1.5 mvneta0.15 mvneta1.3 mvneta0.25 mvneta0.12 16 root -16 - 0B 24K psleep 1 0:17 0.00% [pagedaemon{dom0}] 41331 root 20 0 11M 5628K select 0 0:15 0.00% /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid{ntpd} 20 root 16 - 0B 8192B syncer 0 0:11 0.00% [syncer] 9 root -16 - 0B 8192B - 0 0:09 0.00% [rand_harvestq] 11 root -92 - 0B 176K WAIT 1 0:09 0.00% [intr{mpic0: mvneta0}] 386 root 20 0 91M 22M kqread 0 0:05 0.00% php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm) 18 root 20 - 0B 24K sdflus 1 0:04 0.00% [bufdaemon{/ worker}] 42377 root 20 0 21M 7408K kqread 1 0:04 0.00% nginx: worker process (nginx) 5 root -16 - 0B 16K - 0 0:04 0.00% [cam{doneq0}] 39509 root 20 0 4848K 2276K nanslp 0 0:02 0.00% /usr/sbin/cron -s 7419 root 20 0 12M 6524K select 0 0:02 0.00% /usr/local/sbin/openvpn --config /var/etc/openvpn/server1/config.ovpn{openvpn} 42264 root 20 0 21M 7340K kqread 0 0:02 0.00% nginx: worker process (nginx) 62425 unbound 20 0 31M 16M kqread 1 0:02 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound} 11 root -88 - 0B 176K WAIT 1 0:01 0.00% [intr{gic0,s26: ahci0}] 18 root -16 - 0B 24K psleep 1 0:01 0.00% [bufdaemon{bufdaemon}] 0 root -16 - 0B 144K swapin 0 0:01 0.00% [kernel{swapper}] 19 root -16 - 0B 8192B vlruwt 0 0:01 0.00% [vnlru] 62425 unbound 20 0 31M 16M kqread 1 0:01 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound} 19951 root -52 r0 4288K 4312K nanslp 1 0:01 0.00% /usr/sbin/watchdogd -t 128 14 root -68 - 0B 80K - 0 0:01 0.00% [usb{usbus0}] 16 root -16 - 0B 24K umarcl 1 0:01 0.00% [pagedaemon{uma}] 14 root -68 - 0B 80K - 1 0:01 0.00% [usb{usbus1}] 11 root -72 - 0B 176K WAIT 0 0:01 0.00% [intr{swi1: netisr 0}] 18 root 20 - 0B 24K - 1 0:01 0.00% [bufdaemon{bufspacedaemon-0}] 23354 root 20 0 51M 37M piperd 1 0:01 0.00% /usr/local/bin/php_pfb -f /usr/local/pkg/pfblockerng/pfblockerng.inc filterlog 11 root -72 - 0B 176K WAIT 1 0:01 0.00% [intr{swi1: pf send}] 67669 _dhcp 20 0 5072K 2444K select 1 0:00 0.00% dhclient: mvneta2 (dhclient) 15137 root 20 0 4648K 2192K select 0 0:00 0.00% /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog 0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{softirq_1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{softirq_0}] 68557 root 20 0 4704K 2260K select 0 0:00 0.00% /usr/local/sbin/dhcp6c -c /var/etc/dhcp6c.conf -p /var/run/dhcp6c.pid mvneta2 26043 root 52 20 5084K 2608K wait 0 0:00 0.00% /bin/sh /var/db/rrd/updaterrd.sh 23193 root 20 0 4264K 1976K kqread 0 0:00 0.00% /usr/bin/tail_pfb -n0 -F /var/log/filter.log 0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{thread taskq}] 11 root -72 - 0B 176K WAIT 1 0:00 0.00% [intr{swi1: netisr 1}] 15 root -16 - 0B 8192B mx25jq 0 0:00 0.00% [task: mx25l flash] 706 root 20 0 3660K 1100K select 0 0:00 0.00% /sbin/devd -q -f /etc/pfSense-devd.conf 426 root 41 20 4956K 2464K kqread 0 0:00 0.00% /usr/local/sbin/check_reload_status 59484 root 20 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/bin/ping_hosts.sh (minicron) 60253 root 28 0 4292K 1940K nanslp 1 0:00 0.00% minicron: helper /usr/local/bin/ipsec_keepalive.php (minicron) 1 root 20 0 3260K 764K wait 0 0:00 0.00% [init] 7079 root 20 0 5204K 2372K nanslp 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 11 root -52 - 0B 176K WAIT 0 0:00 0.00% [intr{swi6: Giant taskq}] 13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_event}] 22 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod1] 23 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod2] 24 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod3] 25 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod4] 11 root -52 - 0B 176K WAIT 1 0:00 0.00% [intr{swi6: task queue}] 7079 root 20 0 5204K 2372K sbwait 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 2302 root 52 0 5044K 2568K wait 0 0:00 0.00% login [pam] (login) 74950 root 24 0 5204K 2676K wait 0 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid 5 root -16 - 0B 16K - 1 0:00 0.00% [cam{scanner}] 5926 root 52 0 5372K 2700K wait 0 0:00 0.00% -sh (sh) 7079 root 20 0 5204K 2372K nanslp 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 15854 root 24 0 6044K 2840K CPU0 0 0:00 0.00% /usr/bin/top -baHS 999 75957 root 23 0 5200K 2368K piperd 1 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker} 75619 root 22 0 11M 4060K piperd 1 0:00 0.00% /usr/local/libexec/sshg-parser 13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_down}] 6985 root 52 0 4908K 2568K ttyin 1 0:00 0.00% /bin/sh /etc/rc.initial 76406 root 31 0 5192K 2676K piperd 1 0:00 0.00% /bin/sh /usr/local/libexec/sshg-fw-pf 60813 root 20 0 4292K 1940K nanslp 1 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts (minicron) 26 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0: mmc/sd card] 11 root -80 - 0B 176K WAIT 1 0:00 0.00% [intr{gic0,s25:-dhci_fdt0}] 75364 root 22 0 4288K 1992K piperd 1 0:00 0.00% /bin/cat 13 root -8 - 0B 24K - 1 0:00 0.00% [geom{g_up}] 7079 root 20 0 5204K 2372K accept 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 7079 root 52 0 5204K 2372K uwait 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 11 root -76 - 0B 176K WAIT 1 0:00 0.00% [intr{swi0: uart uart}] 60834 root 4 0 4972K 2336K select 1 0:00 0.00% dhclient: mvneta2 [priv] (dhclient) 41924 root 25 0 20M 6308K pause 0 0:00 0.00% nginx: master process /usr/local/sbin/nginx -c /var/etc/nginx-webConfigurator.conf (nginx) 12322 root 52 20 4156K 1896K nanslp 1 0:00 0.00% sleep 60 14 root -68 - 0B 80K - 1 0:00 0.00% [usb{usbus1}] 31920 root 27 0 12M 6544K select 1 0:00 0.00% sshd: /usr/sbin/sshd [listener] 0 of 10-100 startups (sshd) 428 root 52 20 4896K 2300K kqread 0 0:00 0.00% check_reload_status: Monitoring daemon of check_reload_status (check_reload_status) 7419 root 20 0 12M 6524K kqread 1 0:00 0.00% /usr/local/sbin/openvpn --config /var/etc/openvpn/server1/config.ovpn{openvpn} 11 root -80 - 0B 176K WAIT 0 0:00 0.00% [intr{gic0,s2: twsi0}] 60304 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts 59648 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 300 /var/run/ipsec_keepalive.pid /usr/local/bin/ipsec_keepalive.php 61153 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data 59329 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh 61458 root 20 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data (minicron) 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{inm_free taskq}] 7 root -16 - 0B 8192B waitin 1 0:00 0.00% [sctp_iterator] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{in6m_free taskq}] 76110 root 25 0 5204K 2680K wait 0 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid 27 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot0: mmc/sd] 28 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot1: mmc/sd] 75957 root 20 0 5200K 2368K nanslp 1 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker} 0 root -8 - 0B 144K - 1 0:00 0.00% [kernel{CAM taskq}] 16 root -16 - 0B 24K launds 1 0:00 0.00% [pagedaemon{laundry: dom0}] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta0: tx_taskq(0}] 0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_0}] 0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{firmware taskq}] 2 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{if_io_tqg_1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_io_tqg_0}] 12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue0}] 4 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 1] 3 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 0] 21 root -16 - 0B 8192B aldslp 0 0:00 0.00% [ALQ Daemon] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta1: tx_taskq(0}] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta2: tx_taskq(0}] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{aiod_kick taskq}] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{kqueue_ctx taskq}] 12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue1}] 17 root -16 - 0B 8192B psleep 0 0:00 0.00% [vmdaemon] 0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_1}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_config_tqg_0}] 11 root -56 - 0B 176K WAIT -1 0:00 0.00% [intr{swi5: fast taskq}] 11 root -60 - 0B 176K WAIT -1 0:00 0.00% [intr{swi4: clock (1)}] 11 root -64 - 0B 176K WAIT -1 0:00 0.00% [intr{swi3: vm}] 11 root -72 - 0B 176K WAIT -1 0:00 0.00% [intr{swi1: pfsync}] 11 root -80 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s1: spi0}] 11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s17: xhci0}] 11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s18: ehci0}] 11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s19: cesa0}] 11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s20: cesa1}]================================================================================
CPU Activity
last pid: 35438; load averages: 0.56, 0.44, 0.34 up 1+22:04:55 20:47:32 142 threads: 4 running, 117 sleeping, 21 waiting CPU: 0.5% user, 0.2% nice, 1.4% system, 0.5% interrupt, -4.3% idle Mem: 41M Active, 135M Inact, 186M Wired, 80M Buf, 1617M Free PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 10 root 155 ki31 0B 16K RUN 1 44.9H 77.69% [idle{idle: cpu1}] 10 root 155 ki31 0B 16K RUN 0 44.9H 64.45% [idle{idle: cpu0}] 11 root -92 - 0B 176K CPU0 0 17:34 48.00% [intr{mpic0: mvneta2}] 11 root -92 - 0B 176K WAIT 1 3:54 10.89% [intr{mpic0: mvneta1}] 388 root 23 0 123M 41M piperd 0 0:48 0.78% php-fpm: pool nginx (php-fpm){php-fpm} 11 root -60 - 0B 176K WAIT 1 3:16 0.00% [intr{swi4: clock (0)}] 8 root -16 - 0B 8192B pftm 1 1:38 0.00% [pf purge] 78146 root 20 0 5760K 2676K bpf 1 1:26 0.00% /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid 96884 root 20 0 4864K 2464K select 1 1:19 0.00% /usr/sbin/syslogd -O rfc3164 -s -c -c -l /var/dhcpd/var/run/log -P /var/run/syslog.pid -f /etc/syslog.conf -b 192.168.5.1 81120 root 52 0 123M 39M accept 1 0:54 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 22150 root 52 0 123M 40M accept 1 0:52 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 55695 root 52 0 123M 39M accept 1 0:51 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 85094 root 52 0 123M 39M accept 0 0:45 0.00% php-fpm: pool nginx (php-fpm){php-fpm} 46002 root 52 0 121M 39M accept 0 0:44 0.00% php-fpm: pool nginx (php-fpm) 45040 root 52 0 121M 39M accept 1 0:43 0.00% php-fpm: pool nginx (php-fpm) 6 root -16 - 0B 8192B e6000s 1 0:29 0.00% [e6000sw tick kproc] 84579 dhcpd 20 0 13M 8932K select 1 0:18 0.00% /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid mvneta1 mvneta1.5 mvneta0.15 mvneta1.3 mvneta0.25 mvneta0.12 16 root -16 - 0B 24K psleep 0 0:17 0.00% [pagedaemon{dom0}] 41331 root 20 0 11M 5628K select 1 0:15 0.00% /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid{ntpd} 20 root 16 - 0B 8192B syncer 1 0:11 0.00% [syncer] 9 root -16 - 0B 8192B - 1 0:09 0.00% [rand_harvestq] 11 root -92 - 0B 176K WAIT 1 0:09 0.00% [intr{mpic0: mvneta0}] 386 root 20 0 91M 22M kqread 1 0:05 0.00% php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm) 18 root 20 - 0B 24K sdflus 1 0:04 0.00% [bufdaemon{/ worker}] 42377 root 20 0 21M 7408K kqread 1 0:04 0.00% nginx: worker process (nginx) 5 root -16 - 0B 16K - 1 0:04 0.00% [cam{doneq0}] 39509 root 20 0 4848K 2276K nanslp 0 0:02 0.00% /usr/sbin/cron -s 7419 root 20 0 12M 6524K select 0 0:02 0.00% /usr/local/sbin/openvpn --config /var/etc/openvpn/server1/config.ovpn{openvpn} 42264 root 20 0 21M 7340K kqread 0 0:02 0.00% nginx: worker process (nginx) 62425 unbound 20 0 31M 16M kqread 1 0:02 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound} 11 root -88 - 0B 176K WAIT 1 0:01 0.00% [intr{gic0,s26: ahci0}] 18 root -16 - 0B 24K psleep 1 0:01 0.00% [bufdaemon{bufdaemon}] 0 root -16 - 0B 144K swapin 1 0:01 0.00% [kernel{swapper}] 19 root -16 - 0B 8192B vlruwt 1 0:01 0.00% [vnlru] 62425 unbound 20 0 31M 16M kqread 0 0:01 0.00% /usr/local/sbin/unbound -c /var/unbound/unbound.conf{unbound} 19951 root -52 r0 4288K 4312K nanslp 1 0:01 0.00% /usr/sbin/watchdogd -t 128 14 root -68 - 0B 80K - 0 0:01 0.00% [usb{usbus0}] 16 root -16 - 0B 24K umarcl 1 0:01 0.00% [pagedaemon{uma}] 14 root -68 - 0B 80K - 0 0:01 0.00% [usb{usbus1}] 11 root -72 - 0B 176K WAIT 1 0:01 0.00% [intr{swi1: netisr 0}] 18 root 20 - 0B 24K - 1 0:01 0.00% [bufdaemon{bufspacedaemon-0}] 23354 root 20 0 51M 37M piperd 1 0:01 0.00% /usr/local/bin/php_pfb -f /usr/local/pkg/pfblockerng/pfblockerng.inc filterlog 11 root -72 - 0B 176K WAIT 0 0:01 0.00% [intr{swi1: pf send}] 67669 _dhcp 20 0 5072K 2444K select 1 0:00 0.00% dhclient: mvneta2 (dhclient) 15137 root 20 0 4648K 2192K select 0 0:00 0.00% /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog 0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{softirq_1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{softirq_0}] 26043 root 52 20 5084K 2608K wait 0 0:00 0.00% /bin/sh /var/db/rrd/updaterrd.sh 68557 root 20 0 4704K 2260K select 0 0:00 0.00% /usr/local/sbin/dhcp6c -c /var/etc/dhcp6c.conf -p /var/run/dhcp6c.pid mvneta2 23193 root 20 0 4264K 1976K kqread 1 0:00 0.00% /usr/bin/tail_pfb -n0 -F /var/log/filter.log 0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{thread taskq}] 11 root -72 - 0B 176K WAIT 1 0:00 0.00% [intr{swi1: netisr 1}] 15 root -16 - 0B 8192B mx25jq 0 0:00 0.00% [task: mx25l flash] 706 root 20 0 3660K 1100K select 1 0:00 0.00% /sbin/devd -q -f /etc/pfSense-devd.conf 426 root 41 20 4956K 2464K kqread 0 0:00 0.00% /usr/local/sbin/check_reload_status 59484 root 20 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/bin/ping_hosts.sh (minicron) 60253 root 28 0 4292K 1940K nanslp 1 0:00 0.00% minicron: helper /usr/local/bin/ipsec_keepalive.php (minicron) 1 root 20 0 3260K 764K wait 0 0:00 0.00% [init] 7079 root 20 0 5204K 2372K nanslp 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 11 root -52 - 0B 176K WAIT 0 0:00 0.00% [intr{swi6: Giant taskq}] 13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_event}] 22 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod1] 23 root -16 - 0B 8192B - 0 0:00 0.00% [soaiod2] 24 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod3] 25 root -16 - 0B 8192B - 1 0:00 0.00% [soaiod4] 7079 root 20 0 5204K 2372K sbwait 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 11 root -52 - 0B 176K WAIT 1 0:00 0.00% [intr{swi6: task queue}] 2302 root 52 0 5044K 2568K wait 0 0:00 0.00% login [pam] (login) 28710 root 24 0 5204K 2676K wait 0 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid 7079 root 20 0 5204K 2372K nanslp 1 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 5 root -16 - 0B 16K - 1 0:00 0.00% [cam{scanner}] 5926 root 52 0 5372K 2700K wait 0 0:00 0.00% -sh (sh) 35438 root 24 0 6044K 2840K CPU0 0 0:00 0.00% /usr/bin/top -baHS 999 29389 root 24 0 5200K 2368K piperd 0 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker} 13 root -8 - 0B 24K - 0 0:00 0.00% [geom{g_down}] 6985 root 52 0 4908K 2568K ttyin 1 0:00 0.00% /bin/sh /etc/rc.initial 28873 root 21 0 4288K 1992K piperd 0 0:00 0.00% /bin/cat 60813 root 20 0 4292K 1940K nanslp 1 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts (minicron) 29767 root 32 0 5192K 2676K piperd 1 0:00 0.00% /bin/sh /usr/local/libexec/sshg-fw-pf 26 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0: mmc/sd card] 11 root -80 - 0B 176K WAIT 1 0:00 0.00% [intr{gic0,s25:-dhci_fdt0}] 29113 root 22 0 11M 4060K piperd 0 0:00 0.00% /usr/local/libexec/sshg-parser 13 root -8 - 0B 24K - 1 0:00 0.00% [geom{g_up}] 7079 root 20 0 5204K 2372K accept 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 7079 root 52 0 5204K 2372K uwait 0 0:00 0.00% /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 76.112.168.30 -p /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.pid -u /var/run/dpinger_WAN_DHCP~76.112.168.30~76.112.168.1.sock -C /etc/rc.gateway_alarm -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 76.112.168.1{dpinger} 11 root -76 - 0B 176K WAIT 1 0:00 0.00% [intr{swi0: uart uart}] 60834 root 4 0 4972K 2336K select 1 0:00 0.00% dhclient: mvneta2 [priv] (dhclient) 2588 root 52 20 4156K 1896K nanslp 1 0:00 0.00% sleep 60 41924 root 25 0 20M 6308K pause 0 0:00 0.00% nginx: master process /usr/local/sbin/nginx -c /var/etc/nginx-webConfigurator.conf (nginx) 14 root -68 - 0B 80K - 1 0:00 0.00% [usb{usbus1}] 31920 root 27 0 12M 6544K select 1 0:00 0.00% sshd: /usr/sbin/sshd [listener] 0 of 10-100 startups (sshd) 428 root 52 20 4896K 2300K kqread 0 0:00 0.00% check_reload_status: Monitoring daemon of check_reload_status (check_reload_status) 7419 root 20 0 12M 6524K kqread 1 0:00 0.00% /usr/local/sbin/openvpn --config /var/etc/openvpn/server1/config.ovpn{openvpn} 11 root -80 - 0B 176K WAIT 0 0:00 0.00% [intr{gic0,s2: twsi0}] 29672 root 25 0 5204K 2680K wait 1 0:00 0.00% /bin/sh /usr/local/sbin/sshguard -i /var/run/sshguard.pid 60304 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts 59648 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 300 /var/run/ipsec_keepalive.pid /usr/local/bin/ipsec_keepalive.php 61153 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data 59329 root 52 0 4272K 1936K wait 0 0:00 0.00% /usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh 61458 root 20 0 4296K 1944K nanslp 0 0:00 0.00% minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data (minicron) 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{inm_free taskq}] 7 root -16 - 0B 8192B waitin 1 0:00 0.00% [sctp_iterator] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{in6m_free taskq}] 27 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot0: mmc/sd] 28 root -16 - 0B 8192B mmcsd 0 0:00 0.00% [mmcsd0boot1: mmc/sd] 29389 root 20 0 5200K 2368K nanslp 0 0:00 0.00% /usr/local/libexec/sshg-blocker{sshg-blocker} 0 root -8 - 0B 144K - 1 0:00 0.00% [kernel{CAM taskq}] 16 root -16 - 0B 24K launds 1 0:00 0.00% [pagedaemon{laundry: dom0}] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta0: tx_taskq(0}] 0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_0}] 0 root 8 - 0B 144K - 1 0:00 0.00% [kernel{firmware taskq}] 2 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 0 root -76 - 0B 144K - 1 0:00 0.00% [kernel{if_io_tqg_1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_io_tqg_0}] 12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue0}] 4 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 1] 3 root -16 - 0B 8192B crypto 1 0:00 0.00% [crypto returns 0] 21 root -16 - 0B 8192B aldslp 0 0:00 0.00% [ALQ Daemon] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta1: tx_taskq(0}] 0 root -92 - 0B 144K - 0 0:00 0.00% [kernel{mvneta2: tx_taskq(0}] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{aiod_kick taskq}] 0 root 8 - 0B 144K - 0 0:00 0.00% [kernel{kqueue_ctx taskq}] 12 root -16 - 0B 16K sleep 1 0:00 0.00% [ng_queue{ng_queue1}] 17 root -16 - 0B 8192B psleep 0 0:00 0.00% [vmdaemon] 0 root -20 - 0B 144K - 1 0:00 0.00% [kernel{crypto_1}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -68 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -72 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus0}] 14 root -76 - 0B 80K - 0 0:00 0.00% [usb{usbus1}] 0 root -76 - 0B 144K - 0 0:00 0.00% [kernel{if_config_tqg_0}] 11 root -56 - 0B 176K WAIT -1 0:00 0.00% [intr{swi5: fast taskq}] 11 root -60 - 0B 176K WAIT -1 0:00 0.00% [intr{swi4: clock (1)}] 11 root -64 - 0B 176K WAIT -1 0:00 0.00% [intr{swi3: vm}] 11 root -72 - 0B 176K WAIT -1 0:00 0.00% [intr{swi1: pfsync}] 11 root -80 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s1: spi0}] 11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s17: xhci0}] 11 root -88 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s18: ehci0}] 11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s19: cesa0}] 11 root -92 - 0B 176K WAIT -1 0:00 0.00% [intr{gic0,s20: cesa1}] -
The only load of any significance there is the interrupt load from the WAN and LAN NICs.
Importantly neither CPU core is at 100% so, at that particular point, I would not expect the 3100 to throttling the connection.You will always see some additonal CPU use shown on the dashboard because the dashboard itself generates some load.
To see a more accurate view connect to the 3100 via SSH and then at the command line run
top -HaSP. Hit q to quit.Steve
-
@stephenw10 Is it typical to see interrupts like this between a LAN and WAN interface?
I am trying to keep this in mind for when I refresh my pfsense hardware. I am thinking a appliance with more cores than what the SG3100 has will reduce the interrupts between interfaces?
I know with Check Point firewalls / security gateways processors are split amongst what interface NIC's they handle and this can be changed. I am not sure how pfsense handles it. -
Yes, you will always see some interrupt load from the NICs when traffic is passing.
That's where both the loading from simply forwarding packets appears and the loading from pf itself.NIC queue / core affinity should be automatic. It's not really a huge issue in a 3100 because the mvneta NIC/driver is single queue.
Steve
-
S SteveITS referenced this topic on
-
S SteveITS referenced this topic on
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.