High memory Checkpoint 5000

MarcuzShinz — Wed, 14 Sep 2022 03:58:31 GMT

We are experiencing high memory on the checkpoint gateway. Is there any way to help me determine where the problem is coming from?

top - 10:35:12 up 92 days, 12:08, 2 users, load average: 1.52, 1.58, 1.77

Tasks: 439 total, 5 running, 434 sleeping, 0 stopped, 0 zombie

%Cpu(s): 14.7 us, 17.6 sy, 0.0 ni, 65.5 id, 0.1 wa, 0.4 hi, 1.7 si, 0.0 st

KiB Mem : 16103716 total, 466504 free, 14039728 used, 1597484 buff/cache

KiB Swap: 18314096 total, 15685232 free, 2628864 used. 847784 avail Mem

[Expert@CP01-DC:0]# fw ctl pstat

System Capacity Summary:

Memory used: 31% (3714 MB out of 11794 MB) - below watermark

Concurrent Connections: 43237 (Unlimited)

Aggressive Aging is enabled, not active

Hash kernel memory (hmem) statistics:

Total memory allocated: 9389711360 bytes in 2292410 (4096 bytes) blocks using 28 pools

Initial memory allocated: 1233125376 bytes (Hash memory extended by 8156585984 bytes)

Memory allocation limit: 9893314560 bytes using 512 pools

Total memory bytes used: 0 unused: 9389711360 (100.00%) peak: 8645027692

Total memory blocks used: 0 unused: 2292410 (100%) peak: 2199743

Allocations: 3389915620 alloc, 0 failed alloc, 3374631666 free

System kernel memory (smem) statistics:

Total memory bytes used: 10780832852 peak: 11308780672

Total memory bytes wasted: 24842233

Blocking memory bytes used: 20210988 peak: 39485544

Non-Blocking memory bytes used: 10760621864 peak: 11269295128

Allocations: 3227253133 alloc, 77714 failed alloc, 3227239371 free, 0 failed free

vmalloc bytes used: 10747628824 expensive: no

Kernel memory (kmem) statistics:

Total memory bytes used: 2655206284 peak: 9773745088

Allocations: 2322130575 alloc, 77714 failed alloc

2306836296 free, 0 failed free

External Allocations:

Packets: 5873472, SXL: 42694129, Reorder: 0

Zeco: 0, SHMEM: 2176, Resctrl: 0

ADPDRV: 0, PPK_CI: 21687296, PPK_CORR: 0

Cookies:

3272683183 total, 2242411118 alloc, 2242411113 free,

4245197740 dup, 4224582676 get, 3200551896 put,

3844423159 len, 1392529571 cached len, 0 chain alloc,

0 chain free

Connections:

2680984847 total, 2242345821 TCP, 424945556 UDP, 13688072 ICMP,

5398 other, 40506 anticipated, 13729907 recovered, 43237 concurrent,

299055 peak concurrent

Fragments:

68566949 fragments, 28733128 packets, 913 expired, 0 short,

0 large, 0 duplicates, 0 failures

NAT:

924820233/0 forw, 866554258/0 bckw, 30997886350 tcpudp,

194232499 icmp, 3678309943-1467276686 alloc

Sync: Run "cphaprob syncstat" for cluster sync statistics.

Re: High memory Checkpoint 5000

_Val_ — Fri, 16 Sep 2022 06:58:12 GMT

you can ignore what OS tells you about memory use. What's important is this:

Memory used: 31% (3714 MB out of 11794 MB) - below watermark.

It says, you are fine

Re: High memory Checkpoint 5000

Chris_Atkinson — Sat, 17 Sep 2022 12:45:28 GMT

For information 5000 series gateways can have up to 32GB RAM installed.

My preference is to avoid situations where the gateway must rely on swap.

Re: High memory Checkpoint 5000

the_rock — Sat, 17 Sep 2022 13:05:56 GMT

You can run ps -auxw and see what process consumes most memory. Also, execute cpview, thats super helpful for anything you need to check on the appliance.

topic High memory Checkpoint 5000 in Firewall and Security Management

High memory Checkpoint 5000

Re: High memory Checkpoint 5000

Re: High memory Checkpoint 5000

Re: High memory Checkpoint 5000