Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense short cpu load hang

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 5 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fischstäbchen
      last edited by fischstäbchen

      @Cool_Corona
      i dont really understand what you mean, update interval is setup dayly on 11pm in pfblockerng

      1 Reply Last reply Reply Quote 0
      • F
        fischstäbchen
        last edited by

        anyone got a solution?

        1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan
          last edited by Gertjan

          What are your DNS settings ?
          Default ?

          Using VM ?

          Your snort log storage is under control (/var/log/.. has space left) ?

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 0
          • F
            fischstäbchen
            last edited by fischstäbchen

            @Gertjan
            DNS:
            1.1.1.1
            1.0.0.1
            SSL/TLS for outgoing DNS Queries

            Its a bare Metal machine (Notebook)
            i3-3217U
            8GB DDR3

            128GB SSD -> 2% used

            1 Reply Last reply Reply Quote 0
            • F
              fischstäbchen
              last edited by fischstäbchen

              i found something

              when the problem apears my wan interface is down and theres "autoselect" standing

              its running on 100baseTX, my modem is max 100mbit rj45

              1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan
                last edited by

                Who or what takes the WAN down ?

                Check logs, the answer is there.

                Example : if dpinger, the gateway monitor starts missing a lot of pings, it pulls the plug = restarts the interface.

                And let me guess : when you de-*activate snort and/or pfblockerng, the problem stops ...

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                1 Reply Last reply Reply Quote 0
                • ?
                  A Former User
                  last edited by

                  What version of pfSense are you using? If it's 2.4.5 there's currently a known issue where anything that causes pfctl to be called (such as openvpn restarts) to chew all CPU, with the knockon effect of packet loss and latency.

                  Current fixes appear to be:
                  Roll back to 2.4.4p3
                  If Virtualised, reduce your system to 1vcpu

                  Netgate are aware of the problem and are, I believe, working with the freeBSD devs to come up with a solution.

                  There's a number of other threads in the forum about this problem. Hang in there and hopefully will be fixed shortly :)

                  1 Reply Last reply Reply Quote 0
                  • F
                    fischstäbchen
                    last edited by

                    i looked into the system logs, this happens

                    @muppet its a bare metal device, not an vm, its running 2.4.5, but i think befor update, the problem was allready there, is my nic maybe bad? since its going to "down", and then again to "up"


                    Apr 23 20:06:39 check_reload_status Linkup starting ue0
                    Apr 23 20:06:39 kernel ue0: link state changed to DOWN
                    Apr 23 20:06:39 kernel ue0: link state changed to UP
                    Apr 23 20:06:39 check_reload_status Linkup starting ue0
                    Apr 23 20:06:39 kernel ue0: link state changed to DOWN
                    Apr 23 20:06:39 kernel ue0: link state changed to UP
                    Apr 23 20:06:39 check_reload_status Linkup starting ue0
                    Apr 23 20:06:39 check_reload_status Linkup starting ue0
                    Apr 23 20:06:40 php-fpm 346 /rc.linkup: Hotplug event detected for WAN(wan) static IP (192.168.0.10 )
                    Apr 23 20:06:40 check_reload_status Reloading filter
                    Apr 23 20:06:40 php-fpm 345 /rc.linkup: Hotplug event detected for WAN(wan) static IP (192.168.0.10 )
                    Apr 23 20:06:40 check_reload_status rc.newwanip starting ue0
                    Apr 23 20:06:40 check_reload_status Reloading filter
                    Apr 23 20:06:40 php-fpm 53375 /rc.linkup: Hotplug event detected for WAN(wan) static IP (192.168.0.10 )
                    Apr 23 20:06:40 php-fpm 53779 /rc.linkup: Hotplug event detected for WAN(wan) static IP (192.168.0.10 )
                    Apr 23 20:06:40 check_reload_status rc.newwanip starting ue0
                    Apr 23 20:06:41 php-fpm 53375 /rc.newwanip: rc.newwanip: Info: starting on ue0.
                    Apr 23 20:06:41 php-fpm 53375 /rc.newwanip: rc.newwanip: on (IP address: 192.168.0.10) (interface: WAN[wan]) (real interface: ue0).
                    Apr 23 20:06:41 check_reload_status Reloading filter
                    Apr 23 20:06:41 php-fpm 53375 /rc.newwanip: rc.newwanip: Info: starting on ue0.
                    Apr 23 20:06:41 php-fpm 53375 /rc.newwanip: rc.newwanip: on (IP address: 192.168.0.10) (interface: WAN[wan]) (real interface: ue0).

                    ? 1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan
                      last edited by

                      Yeah, go for the bad NIC - check / exchange both sides, or bad cable.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      1 Reply Last reply Reply Quote 0
                      • ?
                        A Former User @fischstäbchen
                        last edited by

                        @fischstäbchen Yes I'm very sorry, I should have read where you said Interface flapping. My bad, I'm sorry.

                        1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan
                          last edited by

                          It's a possibility, you have to check to be sure first.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • F
                            fischstäbchen
                            last edited by fischstäbchen

                            @Gertjan @muppet

                            i changed the wan cable, insert a switch in the middle, to see if the net is going down or the ethernet adapter, it looks like my USB Ethernet Adapter is the issue, my question is now, is there a usb ethernet which works with freebsd and pfsense to get this again fully working?

                            i changed to an HP Probook 450 G1 currently, but didnt helped, so its my adapter, its an ugreen AX88179 USB Adapter

                            Its wall mounted, so i need something little but still powerful enough

                            GertjanG 1 Reply Last reply Reply Quote 0
                            • GertjanG
                              Gertjan @fischstäbchen
                              last edited by

                              @fischstäbchen said in pfsense short cpu load hang:

                              my USB Ethernet Adapter is the issue

                              At the end you mention you use one of those things ?

                              @fischstäbchen said in pfsense short cpu load hang:

                              is there a usb ethernet which works with freebsd and pfsense to get this again fully working?

                              That the one million $ question.
                              Many have asked this one.
                              Answers are very rare. FreeBSD strong point has not the word 'USB' in it.
                              Some exist .... You're good for the Find fucntion of the forum.

                              Btw : you also found out why pfSense is rarely if never used on a portable PC.

                              No "help me" PM's please. Use the forum, the community will thank you.
                              Edit : and where are the logs ??

                              1 Reply Last reply Reply Quote 0
                              • F
                                fischstäbchen
                                last edited by fischstäbchen

                                Zotac Zbox CI329 Barebone nano mini-PC, would that be a good option for pfsense, Intel N4100 quad-core with two gigabit nics.

                                1 Reply Last reply Reply Quote 0
                                • DaddyGoD
                                  DaddyGo
                                  last edited by

                                  I think this is a good choice for SOHO environment: https://www.pcengines.ch/apu4d4.htm
                                  There is also some level of forum support

                                  Cats bury it so they can't see it!
                                  (You know what I mean if you have a cat)

                                  1 Reply Last reply Reply Quote 0
                                  • DaddyGoD
                                    DaddyGo
                                    last edited by

                                    @fischstäbchen said in pfsense short cpu load hang:

                                    Zotac Zbox CI329 Barebone nano

                                    https://www.reddit.com/r/PFSENSE/comments/8kasfm/celeron_n4100_fanless_dual_nic_zotac_any_good_for/

                                    Cats bury it so they can't see it!
                                    (You know what I mean if you have a cat)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.