High memory use ?
-
Thanks guys. Based on your info, I started looking into the pfBlockerNG config.
The culprit was the experimental feature ‘TLD’ that is clearly marked beta.
I turned it on to see if it would help, and then completely forgot about it.Memory is now back to 2 GB used, which feels normal with the lists I’ve loaded.
-
Didn't help my problem, before the upgrade I was only using 20% of 8 gig, now I'm using over 94% plus hitting swap file.
-
packages?
-
Didn't help my problem, before the upgrade I was only using 20% of 8 gig, now I'm using over 94% plus hitting swap file.
Providing to us some more detailed information at first, would be nice!
- Likes asked before, how many and what kind of packages did you installing?
- And on top of this which version of pfSense you are running?
- How many NICs or LAN ports the pfSense box own or has?
- Is this a VM or bare metal installation?
- Any VLANs at the WAN?
- Is SNMP activated?
-
Rebooted last night and as of right not its sitting at 16%
Qotom J1900 barebones with 8 gig of ram 128 gig ssd, 4 intel nics, 1 WAN, 1 LAN, 1 used as "DMZ"
Following packages installed:
Squid
Squidguard
Lightsquid
OpenVPN
Snort
pfBlockerNGHome use Cable modem 400/40 connection ~30+ clients
-
Rebooted last night and as of right not its sitting at 16%
Rebooting mostly flush the entire DNS, DHCP and other caches so it might be based on something in that direction
as I see it.Qotom J1900 barebones with 8 gig of ram 128 gig ssd, 4 intel nics, 1 WAN, 1 LAN, 1 used as "DMZ"
You could try out, if it turns once more again so high;
-
Enable PowerD (high adaptive) if not done but not really realted to this cirumstance
-
set the num.queues to 1, 2 or 4 for each NIC
-
set the mbuf size to 125000, 250000, 500000 or 1000000
Following packages installed:
SquidWas there the base or default amount of memory high up?
OpenVPN
Was there set up the send and receive buffer higher then normal?
Snort
How many rules you where performing and setting up?
pfBlockerNG
Is DNSBL and/or TLD activated?
Home use Cable modem 400/40 connection ~30+ clients
Is this a real and pure modem or a router?
-
-
Squid, Snortpf, BlockerNG = The usual suspects when memory starts blowing up. You have them all running. This should be fun.
-
2 Days and 10 hours since last reboot, using 21-27% memory, hopefully it was just a fluke.
Answer some questions above:
Cable Modem (not router): ARRIS CM3200
PowerD is on, I didnt have it on when I was running 2.3.4
pfBlockerNG: DNSBL=on TLD=On
Snort: WAN Interface only, still messing with this, when i have them all on, it sure is block happy :)Thats all I have for now…
-
now I'm using over 94% plus hitting swap file.
1st
Rebooted last night and as of right not its sitting at 16%
2nd
2 Days and 10 hours since last reboot, using 21-27% memory, hopefully it was just a fluke.
It is uprising be careful and wathing out what is coming next.
pfBlockerNG: DNSBL=on TLD=On
TLD can be eating much more pending on the used or subscribed IP addresses.
-
2 Days and 10 hours since last reboot, using 21-27% memory, hopefully it was just a fluke.
It is uprising be careful and wathing out what is coming next.
I expect to rise a little with squid caching turned on and Memory set to 1024, on 2.3.4 i never saw over 40%
pfBlockerNG: DNSBL=on TLD=On
TLD can be eating much more pending on the used or subscribed IP addresses.
Hasn't been a problem when I was on 2.3.4
