Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl

    Scheduled Pinned Locked Moved Development
    112 Posts 33 Posters 37.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate @psylenced
      last edited by

      @psylenced said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

      There are 4 more hidden bugs, so hopefully they're done soon!

      3 of those are just administrivia things like updating the docs, release notes, and blog. Just one "bug" left and it should be solved just waiting for internal confirmation. Main thing we're waiting on now is internal testing of the release images.

      Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 6
      • JeGrJ
        JeGr LAYER 8 Moderator
        last edited by

        @jimp said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

        Main thing we're waiting on now is internal testing of the release images.

        Any way we could help with testing an "RC" kinda version?

        Don't forget to upvote ๐Ÿ‘ those who kindly offered their time and brainpower to help you!

        If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          Not in this case since there aren't many changes and we were able to confirm the original issue and the fix internally. We're not going to have a long RC period and if testing goes well, it should be out next week sometime.

          If it was going to be in RC for a while we might have made public snapshots but in this case a short cycle is warranted.

          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 6
          • JeGrJ
            JeGr LAYER 8 Moderator
            last edited by

            Thought so but wanted to offer the help nonetheless :)

            Don't forget to upvote ๐Ÿ‘ those who kindly offered their time and brainpower to help you!

            If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

            1 Reply Last reply Reply Quote 1
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              https://forum.netgate.com/topic/154337/pfsense-2-4-5-release-p1-now-available

              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 4
              • M
                mjh_ca
                last edited by mjh_ca

                2.4.5-p1 did not fix the issue for me. Or it is a different issue with very similar symptoms?

                Netgate C2758 hardware, HA configuration. LAGG to switches. Configuration has been rock solid for years and unchanged, since upgrading to 2.4.5 I have had issues with unexpected CARP failovers. Thought the L2 switches had gone bad so I replaced them with Cisco switches, no improvement.

                Correction - the 2.4.5-p1 high CPU fix does fix my issue.

                Somehow both units were incorrectly in "Persistent CARP Maintenance Mode" (likely that way before the upgrade). Taking them out of maintenance mode, and the upgrade to 2.4.5-p1 for high CPU fix, seems to have resolved my CARP state change issues. Thank you Netgate!

                1 Reply Last reply Reply Quote 0
                • Cool_CoronaC
                  Cool_Corona
                  last edited by

                  Disabling promiscious mode triggers the CARP failover since it talks to the NIC?

                  Can you adjust failover latency?

                  1 Reply Last reply Reply Quote 1
                  • K
                    Krisbe
                    last edited by

                    2.4.5-RELEASE-p1 solved this problem for me.
                    Thanks!

                    1 Reply Last reply Reply Quote 0
                    • G
                      Gektor
                      last edited by Gektor

                      Hyper-V 2 CPU cores with pfBlockerNG and Table Usage Count: 24691 is every 2 seconds unbound using 1CPU at 100%. When pfBlockerNG is disabled, all ok. With same lists on 2.4.4 there is no noticeable CPU usage at all. Problem still there. but not so critical as it was.
                      p.s.
                      And memory usage with pfBlockerNG is increased twice compare to 2.4.4.

                      1 Reply Last reply Reply Quote 0
                      • daNutzD
                        daNutz
                        last edited by

                        been running 2.4.5-RELEASE-p1 (amd64) since release and all ok however since a recent reboot i now have unbound causing 100%+ CPU spikes. This was present in 2.4.5-RELEASE (amd64) but not in 2.4.4-RELEASE-p3 (amd64)

                        daNutzD 1 Reply Last reply Reply Quote 0
                        • daNutzD
                          daNutz @daNutz
                          last edited by

                          this causes DNS outages frequently for 10-15 seconds at a time.

                          daNutzD 1 Reply Last reply Reply Quote 0
                          • daNutzD
                            daNutz @daNutz
                            last edited by

                            unbound-c

                            1 Reply Last reply Reply Quote 0
                            • K
                              Krisbe
                              last edited by

                              What do you see in the logs?
                              System logs, Resolver log ...

                              Cool_CoronaC 1 Reply Last reply Reply Quote 0
                              • Cool_CoronaC
                                Cool_Corona @Krisbe
                                last edited by

                                @Krisbe said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

                                What do you see in the logs?
                                System logs, Resolver log ...

                                a7083b65-cb4f-4cce-9562-ccfc777a13ed-billede.png

                                1 Reply Last reply Reply Quote 0
                                • jimpJ
                                  jimp Rebel Alliance Developer Netgate
                                  last edited by

                                  That has nothing to do with this thread. Start your own thread for that issue. Locking.

                                  Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • C cclarke69 referenced this topic on
                                  • M maliaga referenced this topic on
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.