run "top -SH" to find the top cpu consuming tasks
On Thu, Oct 5, 2017 at 8:44 AM, Christoph Haas <em...@christoph-haas.de> wrote: > Am Mittwoch, den 04.10.2017, 15:05 -0400 schrieb ED Fochler: > > I have a similar situation and I solved it with limiters. I'm also a > fan of limiters to ensure fair sharing of uplink bandwidth by internal > users. I haven't tried changing system tunables though, so that solution > may be better. > > So far the situation was better this morning. But the web interface > became unresponsive and the OpenVPN daemon died. So I'm still scared. > > > > Nothing is sent through the limiter until you create a rule that catches > the traffic and routes it through the limiter, so you're not going to > accidentally slow everything down just by creating a rule. > > I will try that. > > > > The behavior you're speaking of sounds like your machine is getting maxed > out by interrupts or some internal bandwidth. Setting up a limiter sounds > like a better solution than pushing the hardware to the point of unrefined > behavior. > > Yes, I suspect something like that, too. The system load is going up > heavily (Load >=5) sometimes. However the web interface claims that the > load is around 30%. RAM and state tables look fine, too. > > On Linux-based systems I regularly use iptables rules and often go near > wire speed. But the system load rarely goes up noticably. So I wonder > what part is really causing that load. > > I ran "top" this morning and saw that the "filterlog" process was at > the top of the list. My firewall rules though do not do any logging at > the moment. Could that still be a problem? > > Thanks for your suggestions so far. I'll try them all. > > …Christoph > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > -- Ivo R. Tonev +55 61 98409-2642 i...@tonev.com.br _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
