Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - 1veryNaughtyCat

#1
20.7 Legacy Series / High CPU
August 16, 2020, 04:12:05 AM

Hello
I am running 20.7.1 and I have noticed that the system load at idle is @50% and not logged in via web GUI.

This is not a fresh install.  However I did not notice high CPU load at idle previously.  If someone can point me in the right direction for fault finding that would be great  :)

I have turned off all services that are not needed and the load screen shot is via ssh with no one using the web gui.

OPNsense 20.7.1-amd64
FreeBSD 12.1-RELEASE-p8-HBSD
OpenSSL 1.1.1g 21 Apr 2020



root@OPNsense:~ # top
last pid: 87714;  load averages:  1.64,  1.64,  1.60                                                                                                                                                                                                            up 0+03:26:51  13:59:11
53 processes:  3 running, 50 sleeping
CPU:  4.2% user,  0.0% nice, 46.8% system,  0.0% interrupt, 49.0% idle
Mem: 293M Active, 951M Inact, 409M Wired, 197M Buf, 436M Free
Swap:

  PID USERNAME    THR PRI NICE   SIZE    RES STATE    C   TIME    WCPU COMMAND
67114 root          1  52    0    96M    80M wait     0   0:04  25.33% php
57320 root          1  52    0    96M    80M wait     3   0:18  24.32% php
45579 nobody        1 -22  r30    11M  2568K nanslp   0   0:23   0.26% LCDd
76399 root          1  20    0    11M  2376K nanslp   0   0:06   0.13% lcdproc
20012 root          1  20    0  1044M  4188K CPU0     0   0:01   0.04% top


Regards
1verynaughtycat
#2
Hello Team,
Firstly thank for a great product!  :)

I use Zonomi as my DNS provider.  I notice that the AcmeClient has the ability to use the Zonomi API to validate LetsEncrypt certs requests.

However the LetEncrypt client on current version of OPNSense (18.1.8 )  and the os-acme-client (1.14) does not expose the Zonomi API option for DNS-01 validation. 

I am wanting to use the in build Acme Client as I am using HA Proxy for my frontend of my web servers and it would be great to automate the process.


I hope someone can help me :)

Thank you for your time

Cheers
Reuben.