24.11 on SG-2100 first impression (and issues)
-
@SteveITS said in 24.11 on SG-2100 first impression (and issues):
I would imagine “already exists” means the subnet is in there twice…?
Yes. I have DHCPv6 enabled on LAN1 and VLAN10 and the subnets are identical. No changes from my side compared to what I had with 24.03 so these issues are new as from 24.11.
As I currently don't have any ipv6 clients on LAN1, I disabled DHCPv6 for LAN1 and now my clients on VLAN10 get ipv6 leases.All I see in DHCP logs now are some warnings about multithreading.
So for now it's been solved but I hope these KEA issues will be looked into soon.
And Steve: thanks for your help!
-
@Cabledude said in 24.11 on SG-2100 first impression (and issues):
on LAN1 and VLAN10 and the subnets are identical
Hm, normally that's a problem for pfSense in that it won't know where to route those packets.
-
What is using the CPU cycles as shown in the top output?
For example I expect to see something like:
last pid: 43534; load averages: 1.06, 1.19, 1.15 up 0+03:08:08 14:39:09 293 threads: 3 running, 267 sleeping, 23 waiting CPU 0: 6.7% user, 0.0% nice, 14.5% system, 0.4% interrupt, 78.4% idle CPU 1: 9.0% user, 0.0% nice, 11.0% system, 0.4% interrupt, 79.6% idle Mem: 106M Active, 295M Inact, 322M Wired, 2584M Free ARC: 133M Total, 50M MFU, 76M MRU, 544K Anon, 1035K Header, 5207K Other 103M Compressed, 242M Uncompressed, 2.36:1 Ratio PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 11 root 187 ki31 0B 32K CPU1 1 166:11 80.29% [idle{idle: cpu1}] 11 root 187 ki31 0B 32K RUN 0 166:13 79.11% [idle{idle: cpu0}] 531 root 68 0 140M 59M accept 1 0:18 1.82% php-fpm: pool nginx (php-fpm) 0 root -12 - 0B 1040K - 1 0:30 0.68% [kernel{z_wr_iss}] 37128 root 20 0 14M 4496K CPU0 0 0:00 0.54% top -HaSP 61254 root 20 0 33M 11M kqread 0 0:03 0.39% nginx: worker process (nginx) 7 root -16 - 0B 16K pftm 1 0:17 0.37% [pf purge] 17 root -16 - 0B 16K mmcsd 0 0:15 0.34% [mmcsd0: mmc/sd card] 38317 root 20 0 140M 57M accept 1 0:18 0.28% php-fpm: pool nginx (php-fpm) 0 root -16 - 0B 1040K - 0 0:11 0.26% [kernel{z_wr_int}] 73138 root 68 0 107M 46M accept 1 0:00 0.22% php-fpm: pool nginx (php-fpm) 2 root -60 - 0B 32K WAIT 0 0:30 0.18% [clock{clock (0)}] 4898 root 20 0 1300M 64M uwait 0 0:08 0.16% /usr/local/bin/pfnet-controller -conf /var/etc/pfnet-controller/pfnet-contThat's actually with the dashboard open but in 25.03-beta.
-
@stephenw10 said in 24.11 on SG-2100 first impression (and issues):
What is using the CPU cycles as shown in the top output?
Well what I showed you above is all I get to see. I go to Menu / Diagnostics / Command Prompt, type "top -HaSP" in the Execute Shell Command box and click Execute.
When I go to System Activity I see the processes like in your example.
Pete
Home: SG-2100 + UniFi + Synology. SG-1100 retired
Parents: SG-1100 + UniFi + Synology
Testing: SG-1100 w/ 120GB SSD via ext USB (eMMC dead). Works great -
This is what I see when I leave the dash open and the cpu in the dash shows close to 100%, but it's changing all the time:
last pid: 22481; load averages: 3.26, 1.96, 1.03 up 0+03:53:56 16:09:54 257 threads: 5 running, 233 sleeping, 19 waiting CPU: 11.2% user, 0.9% nice, 7.6% system, 2.0% interrupt, 78.4% idle Mem: 162M Active, 275M Inact, 480M Wired, 2381M Free ARC: 197M Total, 80M MFU, 107M MRU, 1216K Anon, 1396K Header, 6983K Other 157M Compressed, 419M Uncompressed, 2.67:1 Ratio PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 11 root 187 ki31 0B 32K RUN 0 185:20 52.69% [idle{idle: cpu0}] 99138 root 100 0 34M 23M CPU1 1 0:03 28.17% /usr/local/bin/python3.11 11 root 187 ki31 0B 32K RUN 1 181:12 17.19% [idle{idle: cpu1}] 27 root 68 0 112M 45M piperd 0 0:02 14.45% php-fpm: pool nginx (php-fpm) 49103 root 53 0 112M 49M accept 1 0:16 12.89% php-fpm: pool nginx (php-fpm) 26105 root 68 0 141M 63M accept 1 0:21 10.99% php-fpm: pool nginx (php-fpm) 5217 root 68 0 141M 56M accept 0 0:03 10.69% php-fpm: pool nginx (php-fpm) 7323 root 68 0 141M 62M piperd 0 0:14 9.86% php-fpm: pool nginx (php-fpm) 11530 root 68 0 145M 66M lockf 0 0:29 9.67% php-fpm: pool nginx (php-fpm){php-fpm} 35200 root 68 0 112M 49M accept 0 0:11 6.98% php-fpm: pool nginx (php-fpm) -
@Cabledude said in 24.11 on SG-2100 first impression (and issues):
I go to Menu / Diagnostics / Command Prompt, type "top -HaSP" in the Execute Shell Command box and click Execute.
Ah OK. That's not the CLI (command line interface). I meant to run that command at the real command prompt so either via SSH or using the console directly. The command prompt page in the webgui is only for commands with a static output. And in fact anything run using the webgui uses significant CPU by itself.
-
@stephenw10 Ah I see. Never used CLI except wired. I enabled SSH since I had to learn sometime
This is what I get, without dashboard opened or active:
last pid: 76645; load averages: 0.56, 0.49, 0.40 up 0+06:10:24 18:26:22 258 threads: 3 running, 236 sleeping, 19 waiting CPU 0: 18.6% user, 0.0% nice, 9.1% system, 5.9% interrupt, 66.4% idle CPU 1: 21.4% user, 0.0% nice, 9.1% system, 5.9% interrupt, 63.6% idle Mem: 170M Active, 251M Inact, 506M Wired, 2371M Free ARC: 199M Total, 78M MFU, 112M MRU, 770K Anon, 1406K Header, 7176K Other 159M Compressed, 424M Uncompressed, 2.67:1 Ratio PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 11 root 187 ki31 0B 32K RUN 0 306:59 64.97% [idle{idle: cpu0}] 11 root 187 ki31 0B 32K CPU1 1 302:40 64.56% [idle{idle: cpu1}] 97139 unbound 55 0 137M 113M kqread 1 0:20 32.05% /usr/local/sbin/unbound -c /var 97139 unbound 52 0 137M 113M kqread 0 0:16 23.78% /usr/local/sbin/unbound -c /var 12 root -64 - 0B 272K WAIT 1 4:25 2.43% [intr{gic0,s45: mvneta1}] 12 root -64 - 0B 272K WAIT 0 3:12 2.09% [intr{gic0,s42: mvneta0}] 12 root -60 - 0B 272K WAIT 1 2:23 1.97% [intr{swi1: netisr 1}] 12 root -60 - 0B 272K WAIT 0 3:23 1.88% [intr{swi1: netisr 0}] 2 root -60 - 0B 32K WAIT 0 4:13 1.38% [clock{clock (0)}] 0 root -12 - 0B 992K - 1 2:06 1.03% [kernel{z_wr_iss}] 94582 root 20 0 19M 9584K kqread 1 0:15 0.91% /usr/local/sbin/lighttpd_pfb -f 0 root -16 - 0B 992K - 1 0:42 0.56% [kernel{z_wr_int}] 12 root -64 - 0B 272K WAIT 1 0:25 0.49% [intr{gic0,s27: ahci0}] 36084 SPK 20 0 14M 4424K CPU0 0 0:01 0.46% top -HaSP 4 root -16 - 0B 48K - 1 0:15 0.40% [cam{doneq0}] 76679 avahi 20 0 14M 4524K select 1 1:25 0.17% avahi-daemon: running [SPK.loca 0 root -16 - 0B 992K - 1 0:03 0.16% [kernel{z_null_int}] 0 root -16 - 0B 992K - 1 0:02 0.12% [kernel{z_flush_int}] 7 root -16 - 0B 16K pftm 1 0:37 0.11% [pf purge] 20652 SPK 20 0 22M 11M select 1 0:00 0.09% sshd: SPK@pts/0 (sshd)Looking at this output and seeing the cpu is largely idle and any significant usage is down to pfBlocker, I must assume that the high cpu I get with dashboard open is caused by the new dashboard widget build in 24.11.
I made a short video showing the "top -HaSP" command CLI output with/without dash open. It's 1.3MB in size.
Not sure how I can make the video available to you though.Takeaway is it's mostly idle now with dash off:
last pid: 28321; load averages: 0.30, 0.33, 0.40 up 0+06:29:57 18:45:55 258 threads: 3 running, 236 sleeping, 19 waiting CPU 0: 0.0% user, 0.0% nice, 1.2% system, 1.6% interrupt, 97.3% idle CPU 1: 0.0% user, 0.0% nice, 0.8% system, 0.8% interrupt, 98.4% idle Mem: 197M Active, 233M Inact, 493M Wired, 2375M Free ARC: 199M Total, 78M MFU, 113M MRU, 276K Anon, 1406K Header, 7113K Other 159M Compressed, 425M Uncompressed, 2.68:1 Ratio PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 11 root 187 ki31 0B 32K CPU1 1 318:59 98.50% [idle{idle: cpu1}] 11 root 187 ki31 0B 32K RUN 0 323:28 97.43% [idle{idle: cpu0}] 2 root -60 - 0B 32K WAIT 0 4:27 1.15% [clock{clock (0)}] 12 root -64 - 0B 272K WAIT 1 4:39 0.83% [intr{gic0,s45: mvneta1}] 12 root -60 - 0B 272K WAIT 0 3:33 0.79% [intr{swi1: netisr 0}] 47523 SPK 20 0 14M 4848K CPU0 0 0:03 0.40% top -HaSP 12 root -64 - 0B 272K WAIT 0 3:19 0.15% [intr{gic0,s42: mvneta0}] 76679 avahi 20 0 14M 4524K select 0 1:30 0.13% avahi-daemon: running [SPK.loca 7 root -16 - 0B 16K pftm 1 0:38 0.10% [pf purge] 12 root -60 - 0B 272K WAIT 1 2:29 0.08% [intr{swi1: netisr 1}] 20652 SPKSo I suppose the unit is doing fine now with 24.11, only the dash widget refresh is problematic. Might be better on the intel models such as 4100 4200 6100 etc. but I wanted the ultimate low power firewall...
-
I mean Unbound usage there is expected. Nothing there really looks like an issue.
I would try that patch I linked to. That should help with widget refreshes on the dashboard using CPU.
-
@stephenw10 said in 24.11 on SG-2100 first impression (and issues):
I mean Unbound usage there is expected. Nothing there really looks like an issue.
I agree, I had that feeling myself too, when I wrote it's doing fine now, but I appreciate your opinion because you're the master 8-)
I would try that patch I linked to. That should help with widget refreshes on the dashboard using CPU.
I appreciate the link, I reverted and now the cpu in the dashboard page is much lower, but the number updates only every 30 seconds, where before it was more like between 5-8 seconds.
Do you reckon more work will be done on the widget refresh engine? So that it will perform on the ARM units like 24.03 and before?
-
@Cabledude :)
@SteveITS said in 24.11 on SG-2100 first impression (and issues):
25.03 will have a fix also. https://docs.netgate.com/pfsense/en/latest/releases/25-03.html#dashboard
-
Yes it's better in 25.03
