Not relevant to PPPOE connection - admin if can - please remove

[NoErrorFound]

Hi All,
My apologies if that question has already been asked.
I was unable to find anything related on the forum, so I'll try my luck.

Issue:
Latest OPNSenese with 1 Gbps fiber connection topping on 100% CPU load (1 core, of course) when downloading big files (from Internet).
It is not very common, but could happen here and there.
After some digging in logs it is seems that OPNsense use ppp based config with PPPoE connection type.

I was looking for a possible solution and found some info about implementation of the ppp that requires high clock CPU, in order to push 1 Gbps and above.
Then I discovered a post on a FreeBSD forum with an exact definition of the problem and possible solution:
https://forums.freebsd.org/threads/isp-switch-from-cable-dhcp-to-fiber-pppoe.85546/

Generally speaking - the proposal is to switch from ppp to mpd5.
According to the thread on FreeBSD - solution was implemented and results are much better than with ppp.

I have no idea how much work it is and what gaps exist in terms of compatibility, security etc.
So the question is - if it's been considered to switch to mpd5 in case of PPPoE connection type usage?

[schnipp]

Opnsense uses mpd5 for years. So, don't worry about CPU load

[Taunt9930]

My mistake - can be deleted.

[NoErrorFound]

Opnsense uses mpd5 for years. So, don't worry about CPU load

Thanks for confirmation! 

No idea how i missed it on first digg into the Git...
Now I clearly see MPD5 usage on etc/inc/interfaces 

 @copy('/usr/local/opnsense/scripts/interfaces/mpd.script', '/var/etc/mpd.script');

[Ricardo]

The question is, did you open this topic just to clarify a theoretical question? Or you actually have the problem of 100% CPU load while using pppoe and download large files?

[NoErrorFound]

The question is, did you open this topic just to clarify a theoretical question? Or you actually have the problem of 100% CPU load while using pppoe and download large files?

Not theoretical at all.
I fully described the issue and thus why I was digging Git - to understand what being used, ppp or mpd.
Attaching screenshot took while runing speedtest and pc on local network pulling around 900 Mbps from Internet.
As you can see - it is indeed 100% usage on one core.

[Patrick M. Hausen]

That's not your PPPoE process. Mpd5 is not written in Python.

[NoErrorFound]

That's not your PPPoE process. Mpd5 is not written in Python.

I've changed the original message to make sure there is no confusion about the current issue.
Will open new topic.

Please recommend if I should open new one under "22.7 Production Series" or another one ?

[Patrick M. Hausen]

Try `ps awwux | grep python` to see what that python process is actually doing.

[NoErrorFound]

Try `ps awwux | grep python` to see what that python process is actually doing.

Thanks a lot for the help!

Figured out it was Maltrail that used python.
After Maltrail removal and reboot - no more high CPU usage observed.

[Patrick M. Hausen]

What exactly is the problem with high CPU usage? If the hardware in question can push 900 Mbit/s over a 1 G link and uses most of the available CPU cycles for malware detection, I'd argue it is simply doing its job. Why would you need free CPU capacity? You don't have a faster uplink, right?

[NoErrorFound]

What exactly is the problem with high CPU usage? If the hardware in question can push 900 Mbit/s over a 1 G link and uses most of the available CPU cycles for malware detection, I'd argue it is simply doing its job. Why would you need free CPU capacity? You don't have a faster uplink, right?

You right - I do not have faster uplink.
The target was to maintain "router like" all-in-one system with as much advanced features as possible  (blocklists / dnsbl, etc) while keeping low power / low noise profile (low as much as possible within current hardware limits).

I'm OK with the fact that I will not be able to use all the features, due to low power / low noise profile limitations set by myself.

[normanu]

I had fiber 500/500 which could be handled by OPNSense with no issue.
Now I switched providers and have to do PPPoe over vlan and my connection speed dropped to ~330/500
When doing a speedtest I see 1 core on 100% load with RX and TX is distributed over the cores.

Seems there is still a issue even when using mpd5 ?