22.1 beta - 100% CPU - How to resolve?

[franco]

Interesting... how big is your config.xml ? Did you manage IDS rules by setting them individually in the past which is now rather done by policies since the number of rule edits could really bog down the system?


Cheers,
Franco

[mjalafoo]

That's exactly what happened  ;D .. Though it was hard to modify and delete the ruleset through the GUI.

The config files was around 6MB and went down to around 500KB after cleaning.

But is this a bug? or a feature? can one ask the system to clear all the IDS ruleset with one command?

[franco]

It's a limitation and a reason why policies were introduced in 21.1. We even added a warning box for it:

https://github.com/opnsense/core/blob/766dc45283f284c0a58345db7a05a431e77cc2ec/src/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php#L767-L777


Cheers,
Franco