PfBlockerNG high CPU



  • Hi,

    i noticed a High CPU usage since a few days

    17939 root 84 0 51908K 38228K CPU0 0 9:30 43.78% /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc index
    17596 root 27 0 12548K 7440K kqread 1 3:47 13.74% /usr/local/sbin/lighttpd_pfb -f /var/unbound/pfb_dnsbl_lighty.conf
    17853 root 23 0 51908K 38232K piperd 0 2:06 8.37% /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc dnsbl

    it never decreases. I already tried go remove PfBlockerNG and reinstalled it from scratch. Went fine for a few hours than it started with high CPU usage

    I'm using 2.2 version

    Any help is appreciated.

    BR
    Frosch1482



  • what I don´t understand is:

    Disabling DNSBL, Update Reload all & immediately after
    Enabling DNSBL, Update reload all
    solves the problem for a time.

    After a few hours the issue comes back.



  • Dont see it at all on 2.2.6

    Running very stable on all the appliances both with and without DNSBL.



  • Really no one an idea where this CPU load comes from? Currelty no traffic nothing, only a few idle clients
    i looks to me, that I´ve activated some feature, which is simply to much for the pc engines hardware (APU), but I can´t figure out what.

    11682 root        32    0 51908K 38264K piperd  3 170:52  22.36% /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc index
    11320 root        24    0 14596K  8564K kqread  1  89:11   7.08% /usr/local/sbin/lighttpd_pfb -f /var/unbound/pfb_dnsbl_lighty.conf
    11584 root        22    0 51908K 38264K piperd  2  45:19   4.33% /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc dnsbl
    


  • I see the same thing :

    12506  -  I        0:00.47 /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc dnsbl
    12638  -  I        0:00.44 /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc index
    12863  -  S        0:00.51 /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc queries
    

    These 3 stay in the process list.
    I guess it depend on the options you choose.

    edit : but it's normal that they are there - they are launched and pushed in the background. Quiet are for php script files, but it can be done.
    Running process as interpreted script code like PHP will ask a lot of resources, true.



  • Hi Gertjan,

    That is crystal clear. These processes are always running.
    If everything is running normal, the processes are running but not consuming a lot of CPU (max 2-3%). After some time (12-36 hours) especially the index command starts consuming about 25% CPU - constantly, without any drops.

    I don´t understand the reason.

    Because my system is fanless, i just want to understand the reason and if possible avoid this kind of situation to not heat up unnecessarily the CPU (after 36h it touches 70 degree celsius).

    To be more precise:
    It is clear that the processes are running. The question is: Why does the process pfblocking.inc index start to consume a lot of CPU after time, and why does he continuosly consume the resources until:

    • I reboot the system or
    • I disable DNSBL, Update and reload and immedately after enable DNSBL and update reload again

    In both cases the "high" CPU load disapears and for the next 12-36 hours everything is running fine :)

    Regards,
    Frosch1482


Log in to reply