Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
20.1 Legacy Series
»
About the usage of memory when creating 100 ipsec tunnels of vit mode
« previous
next »
Print
Pages: [
1
]
Author
Topic: About the usage of memory when creating 100 ipsec tunnels of vit mode (Read 1863 times)
Zero_Kong
Newbie
Posts: 4
Karma: 0
About the usage of memory when creating 100 ipsec tunnels of vit mode
«
on:
August 01, 2020, 08:45:45 pm »
I had tested 100 ipsec tunnels(vti mode) at several opnsenses of 20.1, and i had created 100 gateways for these 100 vti tunnels, so 100 dpinger processes had been created automatically too.
If i connect all SAs of these 100 tunnels at the same time, the memory(4G) will be cost in sevesal seconds. And i found that there were 100 processes of /usr/local/etc/rc.filter_configure running at the same time, which were caused by /usr/local/etc/rc.syshook.d/monitor/10-dpinger.
My questions are that:
1. Why it will cost so much memory at this situation?
2. If i remove the /usr/local/etc/rc.filter_configure from /usr/local/etc/rc.filter_configure, will it cause any problem?
Logged
Patrick M. Hausen
Hero Member
Posts: 6812
Karma: 572
Re: About the usage of memory when creating 100 ipsec tunnels of vit mode
«
Reply #1 on:
August 03, 2020, 09:18:59 am »
You could disable gateway monitoring for those gateways and use an external monitoring solution (Icinga, Nagios, Monit, ...)
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
20.1 Legacy Series
»
About the usage of memory when creating 100 ipsec tunnels of vit mode