Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl

    Scheduled Pinned Locked Moved Development
    112 Posts 33 Posters 37.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mjh_ca
      last edited by mjh_ca

      2.4.5-p1 did not fix the issue for me. Or it is a different issue with very similar symptoms?

      Netgate C2758 hardware, HA configuration. LAGG to switches. Configuration has been rock solid for years and unchanged, since upgrading to 2.4.5 I have had issues with unexpected CARP failovers. Thought the L2 switches had gone bad so I replaced them with Cisco switches, no improvement.

      Correction - the 2.4.5-p1 high CPU fix does fix my issue.

      Somehow both units were incorrectly in "Persistent CARP Maintenance Mode" (likely that way before the upgrade). Taking them out of maintenance mode, and the upgrade to 2.4.5-p1 for high CPU fix, seems to have resolved my CARP state change issues. Thank you Netgate!

      1 Reply Last reply Reply Quote 0
      • Cool_CoronaC
        Cool_Corona
        last edited by

        Disabling promiscious mode triggers the CARP failover since it talks to the NIC?

        Can you adjust failover latency?

        1 Reply Last reply Reply Quote 1
        • K
          Krisbe
          last edited by

          2.4.5-RELEASE-p1 solved this problem for me.
          Thanks!

          1 Reply Last reply Reply Quote 0
          • G
            Gektor
            last edited by Gektor

            Hyper-V 2 CPU cores with pfBlockerNG and Table Usage Count: 24691 is every 2 seconds unbound using 1CPU at 100%. When pfBlockerNG is disabled, all ok. With same lists on 2.4.4 there is no noticeable CPU usage at all. Problem still there. but not so critical as it was.
            p.s.
            And memory usage with pfBlockerNG is increased twice compare to 2.4.4.

            1 Reply Last reply Reply Quote 0
            • daNutzD
              daNutz
              last edited by

              been running 2.4.5-RELEASE-p1 (amd64) since release and all ok however since a recent reboot i now have unbound causing 100%+ CPU spikes. This was present in 2.4.5-RELEASE (amd64) but not in 2.4.4-RELEASE-p3 (amd64)

              daNutzD 1 Reply Last reply Reply Quote 0
              • daNutzD
                daNutz @daNutz
                last edited by

                this causes DNS outages frequently for 10-15 seconds at a time.

                daNutzD 1 Reply Last reply Reply Quote 0
                • daNutzD
                  daNutz @daNutz
                  last edited by

                  unbound-c

                  1 Reply Last reply Reply Quote 0
                  • K
                    Krisbe
                    last edited by

                    What do you see in the logs?
                    System logs, Resolver log ...

                    Cool_CoronaC 1 Reply Last reply Reply Quote 0
                    • Cool_CoronaC
                      Cool_Corona @Krisbe
                      last edited by

                      @Krisbe said in 2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl:

                      What do you see in the logs?
                      System logs, Resolver log ...

                      a7083b65-cb4f-4cce-9562-ccfc777a13ed-billede.png

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        That has nothing to do with this thread. Start your own thread for that issue. Locking.

                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • C cclarke69 referenced this topic on
                        • M maliaga referenced this topic on
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.