OpenVPN client using 100% of the processor [SOLVED]

serialdie

Hi,

We had problems with high cpu. enabling device polling reduced the cpu from 80% to 40%. you may want to read this post. https://forum.pfsense.org/index.php?topic=77963.msg462019#msg462019

Nadir Latif

That's not recommended.
My issue has stabilized after I worked with my traffic shapers.

killerb81

bump.

:(

I upgraded to 2.3.1 -p5 and the issue is back.
I even reinstalled completely after I saw the issue come back… it was working fine for a long time and then... bam - back.

Does anyone have any deffinitive solutions for this? Would be greatly appreciated.

Thing is, I don't lose my connections - they're still connected and working fine. The CPU spikes and the temperature starts rising.
I have to restart the OpenVPN Client services to get it to calm down.

killerb81

@serialdie

What exactly did you do to your traffic shaping to resolve the issue?
I too have traffic shaping configured.

killerb81

So, it's interesting.. but I shut off my traffic shaping and the issue seems to have stopped.

Does anyone know why this might be?

killerb81

*** SOLVED *** (I think)

So after having my traffic shaper turned off for a day, the problem has not been seen.
I'm not sure WHY this is, after all, it was the OpenVPN process that was using all the CPU.

I did a little digging into my traffic shaper before turning it off and noticed that it wasn't setup how I originally configured it.
I had previously set it up using HFSC ques, but just before turning it off I noticed it was using CBQ based ques and some of the other settings had been changed.

I could be wrong, but I think during an update of pfSense these settings somehow got changed… because that's when I noticed the VPN processes ramping up, right after an update.
In the next few days I'm going to setup my traffic shaper again from scratch and see what happens... I'll post back here after I do some testing.

Thanks to all!

alecp

I was just monitoring my firewall after a power outage and found this issue.
I removed the simple traffic-shaper I recently put in place for VoIP and the CPU usage fell to sensible numbers.
I tried putting the shaper back (CBQ) with the wizard but the openvpn usage went back to 100%, so it is not fixed

2.3.1-RELEASE-p5 (amd64)