Messages

1

22.7 Legacy Series / Re: Not relevant to PPPOE connection - admin if can - please remove

« on: December 13, 2022, 11:49:14 am »

What exactly is the problem with high CPU usage? If the hardware in question can push 900 Mbit/s over a 1 G link and uses most of the available CPU cycles for malware detection, I'd argue it is simply doing its job. Why would you need free CPU capacity? You don't have a faster uplink, right?

You right - I do not have faster uplink.
The target was to maintain "router like" all-in-one system with as much advanced features as possible  (blocklists / dnsbl, etc) while keeping low power / low noise profile (low as much as possible within current hardware limits).

I'm OK with the fact that I will not be able to use all the features, due to low power / low noise profile limitations set by myself.

2

22.7 Legacy Series / Re: Not relevant to PPPOE connection - admin if can - please remove

« on: December 13, 2022, 10:55:55 am »

Try `ps awwux | grep python` to see what that python process is actually doing.

Thanks a lot for the help!

Figured out it was Maltrail that used python.
After Maltrail removal and reboot - no more high CPU usage observed.

3

22.7 Legacy Series / Re: Question - PPPoE based on mpd5 instead of ppp

« on: December 13, 2022, 10:14:22 am »

That's not your PPPoE process. Mpd5 is not written in Python.

I've changed the original message to make sure there is no confusion about the current issue.
Will open new topic.

Please recommend if I should open new one under "22.7 Production Series" or another one ?

4

22.7 Legacy Series / Re: Question - PPPoE based on mpd5 instead of ppp

« on: December 13, 2022, 09:37:23 am »

The question is, did you open this topic just to clarify a theoretical question? Or you actually have the problem of 100% CPU load while using pppoe and download large files?

Not theoretical at all.
I fully described the issue and thus why I was digging Git - to understand what being used, ppp or mpd.
Attaching screenshot took while runing speedtest and pc on local network pulling around 900 Mbps from Internet.
As you can see - it is indeed 100% usage on one core.

5

22.7 Legacy Series / Re: Question - PPPoE based on mpd5 instead of ppp

« on: December 12, 2022, 12:07:00 am »

Opnsense uses mpd5 for years. So, don't worry about CPU load

Thanks for confirmation! 

No idea how i missed it on first digg into the Git...
Now I clearly see MPD5 usage on etc/inc/interfaces 

 @copy('/usr/local/opnsense/scripts/interfaces/mpd.script', '/var/etc/mpd.script');

6

22.7 Legacy Series / Not relevant to PPPOE connection - admin if can - please remove

« on: November 04, 2022, 07:39:37 pm »

Hi All,
My apologies if that question has already been asked.
I was unable to find anything related on the forum, so I'll try my luck.

Issue:
Latest OPNSenese with 1 Gbps fiber connection topping on 100% CPU load (1 core, of course) when downloading big files (from Internet).
It is not very common, but could happen here and there.
After some digging in logs it is seems that OPNsense use ppp based config with PPPoE connection type.

I was looking for a possible solution and found some info about implementation of the ppp that requires high clock CPU, in order to push 1 Gbps and above.
Then I discovered a post on a FreeBSD forum with an exact definition of the problem and possible solution:
https://forums.freebsd.org/threads/isp-switch-from-cable-dhcp-to-fiber-pppoe.85546/

Generally speaking - the proposal is to switch from ppp to mpd5.
According to the thread on FreeBSD - solution was implemented and results are much better than with ppp.

I have no idea how much work it is and what gaps exist in terms of compatibility, security etc.
So the question is - if it's been considered to switch to mpd5 in case of PPPoE connection type usage?