Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl

    Scheduled Pinned Locked Moved Development
    112 Posts 33 Posters 34.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JeGrJ
      JeGr LAYER 8 Moderator
      last edited by

      @jimp said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

      Main thing we're waiting on now is internal testing of the release images.

      Any way we could help with testing an "RC" kinda version?

      Don't forget to upvote ๐Ÿ‘ those who kindly offered their time and brainpower to help you!

      If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Not in this case since there aren't many changes and we were able to confirm the original issue and the fix internally. We're not going to have a long RC period and if testing goes well, it should be out next week sometime.

        If it was going to be in RC for a while we might have made public snapshots but in this case a short cycle is warranted.

        Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 6
        • JeGrJ
          JeGr LAYER 8 Moderator
          last edited by

          Thought so but wanted to offer the help nonetheless :)

          Don't forget to upvote ๐Ÿ‘ those who kindly offered their time and brainpower to help you!

          If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

          1 Reply Last reply Reply Quote 1
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            https://forum.netgate.com/topic/154337/pfsense-2-4-5-release-p1-now-available

            Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 4
            • M
              mjh_ca
              last edited by mjh_ca

              2.4.5-p1 did not fix the issue for me. Or it is a different issue with very similar symptoms?

              Netgate C2758 hardware, HA configuration. LAGG to switches. Configuration has been rock solid for years and unchanged, since upgrading to 2.4.5 I have had issues with unexpected CARP failovers. Thought the L2 switches had gone bad so I replaced them with Cisco switches, no improvement.

              Correction - the 2.4.5-p1 high CPU fix does fix my issue.

              Somehow both units were incorrectly in "Persistent CARP Maintenance Mode" (likely that way before the upgrade). Taking them out of maintenance mode, and the upgrade to 2.4.5-p1 for high CPU fix, seems to have resolved my CARP state change issues. Thank you Netgate!

              1 Reply Last reply Reply Quote 0
              • Cool_CoronaC
                Cool_Corona
                last edited by

                Disabling promiscious mode triggers the CARP failover since it talks to the NIC?

                Can you adjust failover latency?

                1 Reply Last reply Reply Quote 1
                • K
                  Krisbe
                  last edited by

                  2.4.5-RELEASE-p1 solved this problem for me.
                  Thanks!

                  1 Reply Last reply Reply Quote 0
                  • G
                    Gektor
                    last edited by Gektor

                    Hyper-V 2 CPU cores with pfBlockerNG and Table Usage Count: 24691 is every 2 seconds unbound using 1CPU at 100%. When pfBlockerNG is disabled, all ok. With same lists on 2.4.4 there is no noticeable CPU usage at all. Problem still there. but not so critical as it was.
                    p.s.
                    And memory usage with pfBlockerNG is increased twice compare to 2.4.4.

                    1 Reply Last reply Reply Quote 0
                    • daNutzD
                      daNutz
                      last edited by

                      been running 2.4.5-RELEASE-p1 (amd64) since release and all ok however since a recent reboot i now have unbound causing 100%+ CPU spikes. This was present in 2.4.5-RELEASE (amd64) but not in 2.4.4-RELEASE-p3 (amd64)

                      daNutzD 1 Reply Last reply Reply Quote 0
                      • daNutzD
                        daNutz @daNutz
                        last edited by

                        this causes DNS outages frequently for 10-15 seconds at a time.

                        daNutzD 1 Reply Last reply Reply Quote 0
                        • daNutzD
                          daNutz @daNutz
                          last edited by

                          unbound-c

                          1 Reply Last reply Reply Quote 0
                          • K
                            Krisbe
                            last edited by

                            What do you see in the logs?
                            System logs, Resolver log ...

                            Cool_CoronaC 1 Reply Last reply Reply Quote 0
                            • Cool_CoronaC
                              Cool_Corona @Krisbe
                              last edited by

                              @Krisbe said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

                              What do you see in the logs?
                              System logs, Resolver log ...

                              a7083b65-cb4f-4cce-9562-ccfc777a13ed-billede.png

                              1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                That has nothing to do with this thread. Start your own thread for that issue. Locking.

                                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                1 Reply Last reply Reply Quote 0
                                • C cclarke69 referenced this topic on
                                • M maliaga referenced this topic on
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.