out of memory

Started by siga75, May 31, 2020, 04:51:33 PM

Previous topic - Next topic
I just installed Veem for baking up my gaming laptop, which is in WAN in respect of OPNsense, to a NAS in a network with jumbo frame enabled.

The backup is like 300GB and suricata, which is configured to IPS the WAN, keep eating more and more memory.

My system has 16GB RAM and 8GB swap, it freeze for having finished the memory. I can't even login since he can't fork new processes, I had to brutally power it off

In normal operation I have 12GB of free mem.

I don't know if it's a new issue since I never did such big transfers in WAN, or if jumbo frames play something here.
https://www.signorini.ch
Protectli Pfsense Mi7500L6 Intel 7Th Gen Core I7 7500U 16Gb Ddr4 Ram
512Gb Msata Ssd
6 X Intel Gigabit Ethernet

Jumboframes on WAN should not play a role, since to my knowledge, WAN providers will not support them.

If you try to inspect that mass of data this maybe will bring such problems.
You're sure its correlated to the backup job?
Twitter: banym
Mastodon: banym@bsd.network
Blog: https://www.banym.de

Thanks for your reply

- jumboframe is not on WAN, only on another network where the NAS is connected
- WAN of OPNsense is not actually a real WAN, I have an OpenWRT router in between, and here is where my laptop is connected (can be wired or wifi). This router is connected to the ISP supplied modem/router
- Yes, I am sure, I tried 3 times and I see, with "top" command, the memory grow exactly when backup start
https://www.signorini.ch
Protectli Pfsense Mi7500L6 Intel 7Th Gen Core I7 7500U 16Gb Ddr4 Ram
512Gb Msata Ssd
6 X Intel Gigabit Ethernet

Looks like disabling promiscuous mode solve the issue, probably in that mode all the TCP connection data is kept in memory until the session is closed.

I don't need promiscuous mode in any case, and also backup is faster now
https://www.signorini.ch
Protectli Pfsense Mi7500L6 Intel 7Th Gen Core I7 7500U 16Gb Ddr4 Ram
512Gb Msata Ssd
6 X Intel Gigabit Ethernet