Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    TNSR - clixon_cli hangs when opening

    Scheduled Pinned Locked Moved TNSR
    4 Posts 2 Posters 975 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      paulwollner66
      last edited by

      When opening clixon_cli when logged in via ssh, the cli will hang for several minutes before the cli prompt appears. If I log onto the console via KVM, then it is instant with zero delay. My configuration is extremely simple as I am just testing. A single interface with one BGP session holding a full ipv4 table.

      System is in a virtualised KVM instance, 14GB RAM and 8 cores.

      If I have a full table, starting clixon_cli via ssh takes a long time. Doing it on the KVM console is quick.
      If I drop the table, starting clixon_cli via ssh is quick as well as via the KVM console.

      I would appreciate any pointers.

      Output of when starting clixon_cli:

      Netgate TNSR Version: 23.06-3+tnsr-v23.06-3+jammy

      This system is not configured for package updates.
      For information see 'show documentation'

      ------HANG for minutes---------

      wf-tnsr-0 tnsr#

      My configuration is below. IP have been obfuscated.

      gwf-tnsr-0 tnsr# show running-configuration
      configuration history enable

      nacm disable
      nacm read-default deny
      nacm write-default deny
      nacm exec-default deny
      nacm group admin
      member root
      member tnsr
      exit
      nacm rule-list admin-rules
      group admin
      rule permit-all
      module *
      access-operations *
      action permit
      exit
      exit
      nacm enable

      sysctl vm nr_hugepages 1024
      sysctl vm max_map_count 3096
      sysctl kernel shmmax 2147483648

      host interface ens18
      enable
      exit

      host route table default
      interface ens18
      route 0.0.0.0/0
      via 102.X.X.Z
      exit
      exit
      exit

      dataplane ethernet default-mtu 1500
      dataplane dpdk dev 0000:00:13.0 network
      dataplane dpdk uio-driver vfio-pci
      dataplane api-segment api-size 16M
      dataplane api-segment global-size 64M
      dataplane api-segment api-pvt-heap-size 128K
      dataplane api-segment global-pvt-heap-size 128K
      dataplane buffers buffers-per-numa 32768
      dataplane statseg heap-size 96M

      nat global-options nat44 max-translations-per-thread 128000
      nat global-options nat44 enabled false

      route table ipv4-VRF:0
      id 0
      exit

      interface subif GigabitEthernet0/13/0 303
      exact-match
      outer-dot1q 303
      exit

      interface GigabitEthernet0/13/0
      enable
      mtu 9192
      exit
      interface GigabitEthernet0/13/0.303
      enable
      ip address 102.X.X.Z/28
      exit

      nat ipfix logging domain 1
      nat ipfix logging src-port 4739
      nat nat64 map parameters
      security-check enable
      exit

      interface GigabitEthernet0/13/0
      exit
      interface GigabitEthernet0/13/0.303
      exit

      route table ipv4-VRF:0
      id 0
      route 0.0.0.0/0
      next-hop 0 via 102.X.X.Z
      exit
      exit

      route dynamic manager
      exit

      route dynamic bgp
      enable
      server vrf default
      as-number ZZZZZZ
      neighbor 102.X.X.X
      remote-as 328608
      enable
      update-source 102.X.X,Y
      exit
      address-family ipv4 unicast
      neighbor 102.X.X.X
      activate
      send-community standard
      send-community large
      send-community extended
      exit
      exit
      exit
      exit

      route dynamic ospf6
      exit

      route dynamic ospf
      exit

      route dynamic rip
      exit

      dhcp4 server
      lease persist true
      lease lfc-interval 3600
      interface socket raw
      exit

      unbound server
      do-ip4
      do-tcp
      do-udp
      harden glue
      hide identity
      port outgoing range 4096
      exit

      snmp host disable

      ssh dataplane enable

      fractal_boyF 1 Reply Last reply Reply Quote 0
      • fractal_boyF
        fractal_boy @paulwollner66
        last edited by

        @paulwollner66 try to configure workers, something like this:

        dataplane cpu main-core 1
        dataplane cpu workers 4
        
        P 1 Reply Last reply Reply Quote 0
        • P
          paulwollner66 @fractal_boy
          last edited by

          @fractal_boy said in TNSR - clixon_cli hangs when opening:

          dataplane cpu main-core 1
          dataplane cpu workers 4

          Thank you. This worked. Just so I understand, can you comment on what this setting does?

          P 1 Reply Last reply Reply Quote 0
          • P
            paulwollner66 @paulwollner66
            last edited by

            @paulwollner66

            The documentation explained it rather well.

            https://docs.netgate.com/tnsr/en/latest/advanced/dataplane-cpu.html

            1 Reply Last reply Reply Quote 1
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.