Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl

    Scheduled Pinned Locked Moved Development
    112 Posts 33 Posters 37.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      https://forum.netgate.com/topic/154337/pfsense-2-4-5-release-p1-now-available

      Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 4
      • M
        mjh_ca
        last edited by mjh_ca

        2.4.5-p1 did not fix the issue for me. Or it is a different issue with very similar symptoms?

        Netgate C2758 hardware, HA configuration. LAGG to switches. Configuration has been rock solid for years and unchanged, since upgrading to 2.4.5 I have had issues with unexpected CARP failovers. Thought the L2 switches had gone bad so I replaced them with Cisco switches, no improvement.

        Correction - the 2.4.5-p1 high CPU fix does fix my issue.

        Somehow both units were incorrectly in "Persistent CARP Maintenance Mode" (likely that way before the upgrade). Taking them out of maintenance mode, and the upgrade to 2.4.5-p1 for high CPU fix, seems to have resolved my CARP state change issues. Thank you Netgate!

        1 Reply Last reply Reply Quote 0
        • Cool_CoronaC
          Cool_Corona
          last edited by

          Disabling promiscious mode triggers the CARP failover since it talks to the NIC?

          Can you adjust failover latency?

          1 Reply Last reply Reply Quote 1
          • K
            Krisbe
            last edited by

            2.4.5-RELEASE-p1 solved this problem for me.
            Thanks!

            1 Reply Last reply Reply Quote 0
            • G
              Gektor
              last edited by Gektor

              Hyper-V 2 CPU cores with pfBlockerNG and Table Usage Count: 24691 is every 2 seconds unbound using 1CPU at 100%. When pfBlockerNG is disabled, all ok. With same lists on 2.4.4 there is no noticeable CPU usage at all. Problem still there. but not so critical as it was.
              p.s.
              And memory usage with pfBlockerNG is increased twice compare to 2.4.4.

              1 Reply Last reply Reply Quote 0
              • daNutzD
                daNutz
                last edited by

                been running 2.4.5-RELEASE-p1 (amd64) since release and all ok however since a recent reboot i now have unbound causing 100%+ CPU spikes. This was present in 2.4.5-RELEASE (amd64) but not in 2.4.4-RELEASE-p3 (amd64)

                daNutzD 1 Reply Last reply Reply Quote 0
                • daNutzD
                  daNutz @daNutz
                  last edited by

                  this causes DNS outages frequently for 10-15 seconds at a time.

                  daNutzD 1 Reply Last reply Reply Quote 0
                  • daNutzD
                    daNutz @daNutz
                    last edited by

                    unbound-c

                    1 Reply Last reply Reply Quote 0
                    • K
                      Krisbe
                      last edited by

                      What do you see in the logs?
                      System logs, Resolver log ...

                      Cool_CoronaC 1 Reply Last reply Reply Quote 0
                      • Cool_CoronaC
                        Cool_Corona @Krisbe
                        last edited by

                        @Krisbe said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

                        What do you see in the logs?
                        System logs, Resolver log ...

                        a7083b65-cb4f-4cce-9562-ccfc777a13ed-billede.png

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          That has nothing to do with this thread. Start your own thread for that issue. Locking.

                          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • C cclarke69 referenced this topic on
                          • M maliaga referenced this topic on
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.