Messages

Ok, thanks for your replies Mimugmail and Franco.

Cheers,
G.

Hi guys,

For information, OpenSSL published a vulnerability paper yesterday:

https://www.openssl.org/news/secadv/20200421.txt

It's impacting our Opnsense20.1.4 which is using OpenSSL 1.1.1f .

Regards,
G.

Hi Guys,

43 view, no replies, ok...

Thanks, it works

G.

12 aliases, 2 aliases of aliases, 1 GeoIp alias, and 40 rules for 3 interfaces...

G.

Hi,
I'm in the same situation. What was the root cause and the solution for you?
Thanks.
G.

Agreed !

Thanks to Franco and Opnsense's team (Opnsense is my second opensource's donation of this year) !

G.

Hi,
The Web brower can't be the cause regarding Cpu's load.
I tried another Web brower (chrome), and same issue, more than 15s for the page's load and cpu increase as before.

G.

Hi,

For infos, I tried to change the front's listen address of Ha Proxy from 0.0.0.0:port to Fqdn:port, apply, reboot... No changes, the Web Ui still hanging...

G.

As an update, even the ssh connection hangs and take more than 30s...

Here is an example of php-cgi processes hanging...

Code Select Expand


last pid: 87712;  load averages:  1.29,  0.54,  0.34                                             up 9+00:22:44  19:15:01
52 processes:  4 running, 48 sleeping
CPU: 57.7% user,  0.0% nice, 11.0% system,  0.2% interrupt, 31.2% idle
Mem: 46M Active, 1660M Inact, 713M Wired, 413M Buf, 5433M Free
Swap: 8192M Total, 8192M Free

  PID USERNAME       THR PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
62467 root             1  95    0    98M 90848K CPU0    0   5:35 102.63% php-cgi
57577 root             1  95    0 83804K 74840K CPU3    3   1:42  99.84% php-cgi
33949 root             1  52    0 36752K 32428K piperd  2   0:00  22.92% python3.7
10737 root             1  21    0  1033M  2408K wait    3   0:00   0.31% flock
98488 root             1  20    0  1033M  2928K piperd  2   0:00   0.11% cron
13850 root             3  20    0 24356K 11356K kqread  0   1:39   0.04% syslog-ng
85038 root             1  20    0  1034M  3640K CPU2    2   0:00   0.04% top
98241 root             1  20    0  1033M  2888K nanslp  1   0:05   0.03% cron
81608 root             1  20    0  1033M  2928K bpf     2   1:12   0.02% filterlog
78097 root             1  20    0  1033M  2940K select  2   0:40   0.01% syslogd
  407 root             1  20    0 30900K 27560K select  2 302:46   0.01% python3.7
92159 root             5  52    0  6908K  2348K uwait   3   1:02   0.01% dpinger
45669 root             1  20    0  1039M  6776K select  3   0:33   0.01% ntpd
53758 root             1  20    0  1038M  7704K select  1   0:00   0.00% sshd
42916 root             1  20    0 15096K  9820K kqread  2   0:20   0.00% lighttpd
49523 dhcpd            1  20    0 16584K 12184K select  2   0:14   0.00% dhcpd
46587 www              1  20    0 19040K 14108K kqread  2   0:27   0.00% haproxy
52650 root             1  20    0 10356K  5892K kqread  0   0:15   0.00% lighttpd
35681 root             1  22    0 90012K 81960K accept  2   5:23   0.00% php-cgi
98634 root             1  23    0 85852K 77596K accept  3   5:08   0.00% php-cgi
96612 root             1  21    0 73564K 64344K accept  0   2:27   0.00% php-cgi
29030 root             1  22    0 77660K 68300K accept  2   1:53   0.00% php-cgi


I made a test, the php-cgi hang also when I try a new ssh connection...

Any suggestion guys ?

G.

Hi,

I have the same issue. Login page takes 20s to load, some pages after login take less than a second and some other 10s.

I tried a fresh install on a vm, first config works fine (less than a second per page), importing the prod's backup, reboot, and them think, more than 10s on some pages...

Top command shows that php process hang at 105% of a core, but not one every pages.

My config: Opnsense 19.7.4 one a Qotom i5, 8gb ram and ssd.
Services/plugins : dhcpv4, network time, HA proxy, IPS (activated and even desativated).
Webgui: 8443
Ha front: 443

I planned to reinstall and re config, but if the issue could be resolved in another way... I will be happy with helping debugging.

G.

Donate 50€ for this amazing project.

Thanks to all team's members

Goldorak92

Hi guys.

I have a question about Network Time service.
On my OpnSense Appliance, I have only IPV4 enable.
The Network Time service is enable on one interface (LAN).
When I check netstat, I can see that the ntp service is listening both udp4 and udp6.

Code Select Expand


# netstat -a | grep ntp
udp4       0      0 localhost.ntp          *.*                   
udp6       0      0 localhost.ntp          *.*                   
udp6       0      0 fe90::4352:3aaf:.ntp   *.*                   
udp4       0      0 MyBigFirewall.ntp   *.*                   
udp4       0      0 *.ntp                  *.*                   
udp6       0      0 *.ntp                  *.*


Is there a way to configure ntp only for ipv4 ?

Goldorak92