Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [2.2.3] High CPU usage when going to the IPSec status page - Lot of SAD

    Scheduled Pinned Locked Moved IPsec
    1 Posts 1 Posters 821 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nikolaii
      last edited by

      Hello,

      I have the following issue: plenty of SA (7997 SAD for 34 SPD), probably because of some re-keying issue (the other end of the tunnels are pfsense but in 2.2 or 2.2.1 release).

      So when I try to go to the IPSec status page, it take a looong time before the page appears. And the CPU is burning:

      
      last pid:  7952;  load averages:  1.03,  0.73,  0.53  up 11+04:28:04    16:07:12
      197 processes: 4 running, 173 sleeping, 20 waiting
      
      Mem: 407M Active, 210M Inact, 1295M Wired, 27M Cache, 217M Buf, 21M Free
      Swap: 4096M Total, 1771M Used, 2325M Free, 43% Inuse
      
      PID USERNAME PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
      84646 root     103    0   267M 65700K CPU1    1   1:19 100.00% php-fpm: pool lighty (php-fpm)
         11 root     155 ki31     0K    32K RUN     1 261.4H  55.96% [idle{idle: cpu1}]
         11 root     155 ki31     0K    32K RUN     0 263.4H  36.96% [idle{idle: cpu0}]
      85226 root      20    0  1749M   353M uwait   0   9:14   0.98% [charon{charon}]
          0 root     -16    0     0K   192K swapin  0 1075.4   0.00% [kernel{swapper}]
         14 root      -8    -     0K    48K -       0  22:38   0.00% [geom{g_down}]
       3346 proxy     20    0   442M 63456K kqread  1  20:28   0.00% (squid-1) -f /usr/pbi/squid-amd64/local/et
         12 root     -92    -     0K   320K WAIT    0  20:20   0.00% [intr{irq256: vmx0}]
      67652 root      20    0 14656K  1980K biowr   0  18:41   0.00% /usr/sbin/syslogd -s -c -c -l /var/dhcpd/v
         12 root     -60    -     0K   320K WAIT    0  14:45   0.00% [intr{swi4: clock}]
          4 root     -16    -     0K    32K -       1  14:40   0.00% [cam{doneq0}]
         12 root     -88    -     0K   320K WAIT    0  12:59   0.00% [intr{irq17: mpt0}]
         21 root      16    -     0K    16K syncer  0  12:18   0.00% [syncer]
      50744 root      20    0   107M  3576K select  1   9:45   0.00% /usr/local/bin/vmtoolsd -c /usr/pbi/open-v
      85226 root      20    0  1749M   353M uwait   0   9:41   0.00% [charon{charon}]
      85226 root      20    0  1749M   353M uwait   0   9:20   0.00% [charon{charon}]
      85226 root      20    0  1749M   353M uwait   1   9:17   0.00% [charon{charon}]
      85226 root      20    0  1749M   353M uwait   0   9:17   0.00% [charon{charon}]
      
      

      Anything I can do in order to avoid this situation?

      Thank you.

      Nicolas

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.