OPNsense Forum
Archive => 17.1 Legacy Series => Topic started by: cardins2u on February 20, 2017, 11:34:35 pm
-
I just installed OPNSense and migrated nearly 100% of my firewall settings over. So far everything is working fast and smooth.
i have one issues through: high cpu usage.
when viewing top/: bsnmpd is using 70%~ CPU. Anyone else having this problem?
Dual Core CPU 2.4 ghz
4GB ram
250 SSD
is there tweaks we need to tweaks to make it run snoother?
-
How high is high? E.g. top showing around 1.0 load average still leaves one core free. Things that traditionally take a toll on OPNsense CPU load are Suricata (IPS), VPN, Squid (proxy) and Netflow. Are you using any of those?
Bart...
-
only netflow local.
hmmm 70% is kinda insanely high. I'll do more digging then.
PID
USERNAME
PRI
NICE
SIZE
RES
STATE
C
TIME
WCPU
COMMAND
73370 root 100 0 94128K 44156K CPU0 0 3:56 91.80% /usr/sbin/bsnmpd -c /var/etc/snmpd.conf -p /var/run/snmpd.pid
11 root 155 ki31 0K 32K RUN 0 2:31 61.67% [idle{idle: cpu0}]
14 root -8 - 0K 48K - 0 0:17 6.59% [geom{g_event}]
23059 root 20 0 97900K 25088K select 0 0:14 2.59% /usr/local/bin/python2.7 /usr/local/opnsense/scripts/netflow/flowd_aggregate.py
12 root -60 - 0K 736K WAIT 1 0:04 1.07% [intr{swi4: clock (0)}]
31174 squid 20 0 223M 110M kqread 0 0:03 1.07% (squid-1) -f /usr/local/etc/squid/squid.conf (squid)
216 root 20 0 9536K 5044K select 0 0:01 0.10% /sbin/devd
0 root -92 - 0K 240K - 1 0:01 0.10% [kernel{em0 taskq}]
14253 root 20 0 110M 25848K accept 1 0:01 0.10% /usr/local/bin/php-cgi
13932 root 20 0 108M 22828K accept 0 0:00 0.10% /usr/local/bin/php-cgi
-
bsnmpd / hostres is buggy on FreeBSD 11.0, causing high CPU:
https://forum.opnsense.org/index.php?topic=4297
Cheers,
Franco
-
@Franco
damn you're right. removed snmpd and everything is under 2%-20% tops.
so much better. things are smooth again. Even with SQUID SSL intercept ..everything under 20% with 100 devices on the network.
thank you!
so far I like this. Probably going to start buying some opnsense hardware soon.....
-
Thank you, glad to hear. :)
Priorities keep us from looking for clues in FreeBSD commits at the moment, it's out of scope for now. Any help in pinning down the change responsible between FreeBSD 10.3 and 11.0 is appreciated.
Cheers,
Franco
-
snmp is pretty important for a network infrastructure. I hope this plugin is fix soon. =)
-
as a fix. I put in a CD-rom and the cpu load is down to Zero again.
-
As far as I know disabling the hostres setting under SNMP and restarting the service/server should fix this?
We know this is important. Triaging is not fun for us, and we have to resolve issues in the kernel and boot images before we can circle back to a single service misbehaving.
Cheers,
Franco