HighCPU Usage

[cardins2u]

I just installed OPNSense and migrated nearly 100% of my firewall settings over. So far everything is working fast and smooth.

i have one issues through: high cpu usage.

when viewing top/: bsnmpd is using 70%~ CPU. Anyone else having this problem?

Dual Core CPU 2.4 ghz
4GB ram
250 SSD

is there tweaks we need to tweaks to make it run snoother?

[bartjsmit]

How high is high? E.g. top showing around 1.0 load average still leaves one core free. Things that traditionally take a toll on OPNsense CPU load are Suricata (IPS), VPN, Squid (proxy) and Netflow. Are you using any of those?

Bart...

[cardins2u]

only netflow local.

hmmm 70% is kinda insanely high. I'll do more digging then.



   
PID
USERNAME
PRI
NICE
SIZE
RES
STATE
C
TIME
WCPU
COMMAND
   73370   root   100   0   94128K   44156K   CPU0   0   3:56   91.80%   /usr/sbin/bsnmpd -c /var/etc/snmpd.conf -p /var/run/snmpd.pid
   11   root   155   ki31   0K   32K   RUN   0   2:31   61.67%   [idle{idle: cpu0}]
   14   root   -8   -   0K   48K   -   0   0:17   6.59%   [geom{g_event}]
   23059   root   20   0   97900K   25088K   select   0   0:14   2.59%   /usr/local/bin/python2.7 /usr/local/opnsense/scripts/netflow/flowd_aggregate.py
   12   root   -60   -   0K   736K   WAIT   1   0:04   1.07%   [intr{swi4: clock (0)}]
   31174   squid   20   0   223M   110M   kqread   0   0:03   1.07%   (squid-1) -f /usr/local/etc/squid/squid.conf (squid)
   216   root   20   0   9536K   5044K   select   0   0:01   0.10%   /sbin/devd
   0   root   -92   -   0K   240K   -   1   0:01   0.10%   [kernel{em0 taskq}]
   14253   root   20   0   110M   25848K   accept   1   0:01   0.10%   /usr/local/bin/php-cgi
   13932   root   20   0   108M   22828K   accept   0   0:00   0.10%   /usr/local/bin/php-cgi

[franco]

bsnmpd / hostres is buggy on FreeBSD 11.0, causing high CPU:

https://forum.opnsense.org/index.php?topic=4297


Cheers,
Franco

[cardins2u]

@Franco

damn you're right. removed snmpd and everything is under 2%-20% tops.

so much better. things are smooth again. Even with SQUID SSL intercept ..everything under 20% with 100 devices on the network.

thank you!

so far I like this. Probably going to start buying some opnsense hardware soon.....

[franco]

Thank you, glad to hear.

Priorities keep us from looking for clues in FreeBSD commits at the moment, it's out of scope for now. Any help in pinning down the change responsible between FreeBSD 10.3 and 11.0 is appreciated.


Cheers,
Franco

[cardins2u]

snmp is pretty important for a network infrastructure. I hope this plugin is fix soon. =)

[cardins2u]

as a fix. I put in a CD-rom and the cpu load is down to Zero again.

[franco]

As far as I know disabling the hostres setting under SNMP and restarting the service/server should fix this?

We know this is important. Triaging is not fun for us, and we have to resolve issues in the kernel and boot images before we can circle back to a single service misbehaving.


Cheers,
Franco