1.2-RELEASE on net5501-70 hangs randomly on heavy load



  • Hello,

    we use Soekris net5501-70 and vpn1411 with pfSense 1.2-RELEASE to
    connect our two sites together and to Internet.  In site1 we have a
    100/100 Mbit/s connection to Internet and in site2 we have 4.6/4.6Mbit/s
    connection speed. We have succesfully set up the IPSEC tunnels between
    the sites and some other sites. The pfSense installations are pretty
    much in factory default settings. Site1 has three private subnets,
    each connected to an interface in the firewall. There is quite much (>10
    Mbit/s) traffic between them.

    In site1 we are experiencing problems with pfSense. The system hangs
    every now and then or restarts itself. Sometimes the system can be
    rebooted with the web GUI but often we need to cycle the power of the
    Soekris board. We hardly ever experience uptime of more than a week.
    The CPU usage on the initial Web GUI page is very often near 100% and
    MBUF Usage around 300/780. The state table is normally around 3000 /
    10000.

    In site2 pfSense is working great.

    We'd appreciate information on how to make the site1 pfSense more
    stable.  Are ther any known issues with this hardware?  Are there some
    buffers to increase or some other settings we should change to make
    the system running without problems?

    Regards,

    Kirmo Uusitalo



  • You're running a pfSense version that is now almost 2 years out of date.  Upgrade to at least 1.2.2-release before going any further with this.



  • Thanks!
    We upgraded last friday to 1.2.2 and the CPU load in Site1 seems to be lower now. No problems so far. I'll report…

    Kirmo Uusitalo



  • @kirmou:

    Thanks!
    We upgraded last friday to 1.2.2 and the CPU load in Site1 seems to be lower now. No problems so far. I'll report…

    Kirmo Uusitalo

    The problems still exist in site1. Hangs / reboots every now and then.

    We switched on "Use device polling" setting in Advanced settings.
    I'll report…

    Kirmo Uusitalo


Log in to reply