Bug #9812
closedHigh cpu load (php-fpm) on every VTI reload
0%
Description
Every event that reload the VTI interface(s) causes high cpu load with the process php-fpm.
The system also log the following entries (one sample):
rc.gateway_alarm 46070 >>> Gateway alarm: PO2_VTIV4 (Addr:172.16.41.6 Alarm:0 RTT:86.876ms RTTsd:47.849ms Loss:16%)
check_reload_status updating dyndns PO2_VTIV4
check_reload_status Restarting ipsec tunnels
check_reload_status Restarting OpenVPN tunnels/interfaces
check_reload_status Reloading filter
php-fpm /rc.filter_configure_sync: 8714MONITOR: PO1_VTIV4 is available now, adding to routing group IPSec_PO 172.16.41.2|172.16.41.1|PO1_VTIV4|46.064ms|37.465ms|18%|loss
php-fpm /rc.filter_configure_sync: 8714MONITOR: PO2_VTIV4 is available now, adding to routing group IPSec_PO 172.16.41.6|172.16.41.5|PO2_VTIV4|86.692ms|47.629ms|15%|loss
php-fpm /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use PO2_VTIV4.
rc.gateway_alarm 90785 >>> Gateway alarm: PO1_VTIV4 (Addr:172.16.41.2 Alarm:0 RTT:45.684ms RTTsd:37.140ms Loss:16%)
check_reload_status updating dyndns PO1_VTIV4
check_reload_status Restarting ipsec tunnels
check_reload_status Restarting OpenVPN tunnels/interfaces
check_reload_status Reloading filter
php-fpm /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use PO1_VTIV4.
php-fpm /rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
check_reload_status Reloading filter
php-fpm /rc.newipsecdns: The command '/sbin/ifconfig 'ipsec27000' create reqid '27000'' returned exit code '1', the output was 'ifconfig: create: bad value'
php-fpm /rc.newipsecdns: The command '/sbin/ifconfig 'ipsec28000' create reqid '28000'' returned exit code '1', the output was 'ifconfig: create: bad value'
php-fpm /rc.newipsecdns: The command '/sbin/ifconfig 'ipsec9000' create reqid '9000'' returned exit code '1', the output was 'ifconfig: create: bad value'
php-fpm /rc.newipsecdns: The command '/sbin/ifconfig 'ipsec11000' create reqid '11000'' returned exit code '1', the output was 'ifconfig: create: bad value'
Updated by Daniel Klinghofer almost 6 years ago
The CPU load remains high for some minutes.
Updated by Jim Pingle almost 6 years ago
- Category set to IPsec
- Status changed from New to Not a Bug
There is not enough information here to classify this as a bug. Please start a post on the forum to discuss the issue, gather information, and diagnose the problem.