SG2100 100% CPU usage post upgrade to 24.11

mtarbox

Cross posted on the pfsense reddit.
Upgraded from 24.3 to 24.11 on a SG2100 this morning.
Noted high, like pegged,100% usage post update. Rebooted, same. Let it sit for 5+ hours waiting for it to settle out, same.
Ideas? Logfiles you might need?
Minimal packages, ipsec and pfBlockerNG are the primary and ipsec currently has nothing connected.
firewall 24_11.JPG

SteveITS

@mtarbox Possibly helpful, https://forum.netgate.com/topic/194267/high-cpu-on-2100-after-upgrade-to-rc-from-beta/. Have not upgraded any yet myself.

mtarbox

@SteveITS Kea was enabled from before with no DNS registration/Early DNS registration.
I enabled them, and will sit on it for a bit.
I have a whopping 21 leases.

marcosm

The tldr is:
There was an issue with dashboard widgets not refreshing at the intended intervals. That's been fixed, but it also means more requests / higher resource usage while the dashboard is opened. This is likely what's happening in your case. You may ignore it (monitor usage over SSH instead) or bump up the widget intervals.

For reference and troubleshooting tips, see:
https://forum.netgate.com/topic/190824/cpu-load-on-1100/

mtarbox

@marcosm and @SteveITS thank you for the responses and links.
@jimp thank you for moving my post to the appropriate spot.
I nuked the dashboard. I disabled update check in the system widget, and CPU usage dropped significantly. Definitely feel more comfortable.

Of note, this unit is almost 4 years old, and was due to be replaced in next years budget. I kept my boss in the loop, and when Sharon@netgate sent out the email yesterday with the sale price, I was told to buy a new 4200. Just waiting on a response from sales.

I'll decom this one, and keep it as a spare. Maybe fire it up to update as needed.

bumperjeep

I'm having the same issue, any tips?

I'm running this at home, so I have pretty minimal packages.
wireguard
vnstatd
syslogd
nut
kea-dhcp4
avahi

Any tips?

stephenw10

See this post: https://forum.netgate.com/post/1191398

mtarbox

@bumperjeep Like I wrote, I nuked my dashboard, and removed every widget, disabled update check in the system widget, and then added widgets as see what happened with each one. So far, so good on my end.
I went from 99% to 30-50%, which was where I was normally. YMMV.