High CPU USAGE IN 2.7.0-RELEASE

[slu]

@Gokulapandi

pretty sure this is the upgrade problem and I recommend the update over ssh!
https://forum.netgate.com/post/1140955

Maybe ntopng is the CPU load issue, try to disable/remove it.

[Gokulapandi]

@slu

Ntopng service has already stopped. I will install the 2.7.2. over ssh
how do we find the CPU usage issue and network connectivity issues ?

[slu]

@Gokulapandi said in High CPU USAGE IN 2.7.0-RELEASE:

how do we find the CPU usage issue and network connectivity issues ?

No idea, sorry. This must depend on your setup.

[Gokulapandi]

@slu

Thanks.

Before upgrading the version. It was working fine, there was no CPU usage and network connectivity issue s mentioned earlier.

[Gertjan]

@Gokulapandi

There is something else, did you mention somewhere you use a VM ?
If so :
The pfSense from last decade, 2.4.5, used an very ancient FreeBSD kernel.
The recent 2.7.2 uses what, freeBSD 14 or even 15 ?
The hypervisor model or VM settings should be 'updated' (upgraded ?) also.
if not, bad, or even horrible network virtualization has been seen before.

[Gokulapandi]

@Gertjan

Thanks for your response.

Firewall current kernel version is FreeBSD 14.0-CURRENT amd64. We are running pf sense in physical machine.

our issue is below - FYI.
only If a few users using connecting in the firewall, it's working fine. When connecting more users in firewall, only we can able to use the internet, cant access another network (ipsec network/ openvpn network). After rebooting the firewall, everything is working fine

[stephenw10]

Does it happen immediately or after the firewall has been running for a while? Does the interrupt load increase slowly?

What NICs do you have in that box? I can see re0 there.

[Gertjan]

@Gokulapandi said in High CPU USAGE IN 2.7.0-RELEASE:

We are running pf sense in physical machine

Ok, good to know.

I didn't understand why this installed :

[stephenw10]

@Gokulapandi said in High CPU USAGE IN 2.7.0-RELEASE:

When connecting more users in firewall,

How many users? Are you using the Captive Portal?

[Gokulapandi]

@stephenw10

We are not using captive portal. Around 50 devices are connecting in LAN.

Interrupt load increases as number devices connection increase in LAN.

"LAN in" Traffic has reaching till 300 M as cpu interrupt load increases.Then we need to reboot firewall.

[stephenw10]

@stephenw10 said in High CPU USAGE IN 2.7.0-RELEASE:

What NICs do you have in that box? I can see re0 there.

Is it all Realtek NICs?

[Gokulapandi]

@stephenw10

We are using three NIC.

We are using two WANs and one LAN.

WAN1 is Intel adapters
LAN is Intel adapters
WAN 2 is Realtek adapter

[stephenw10]

Are you load-balancing traffic between those WANs?

[Gokulapandi]

@stephenw10

No, We are not doing a load balancer as secondary WAN has less bandwidth.

FYI - We have updated now the version to 2.7.2

[stephenw10]

What does vmstat -i show is creating the interrupt load?

[Gokulapandi]

@stephenw10

This is taken before issue.

[stephenw10]

Ok nothing too huge there. What does it show when the issue happens?

[Gokulapandi]

@stephenw10

Our Network has IPsec VPN, and OpenVPN. I can access the firewall via web GUI and SSH, IPsec network, and Open VPN Client.

Once issue has arrived, I can't able to firewall via SSH, web GUI, IPsec Network, and OpenVPN client but all existing devices can connect to the internet continuously without any issue..

[stephenw10]

Can you connect to the console to check that? You captured the top output above.

[Gokulapandi]

@stephenw10

I couldn't access the console, it froze just like SSH. After rebooting, I was able to access the console.