topic Re: Drops on interface with high CPU in General Topics

Drops on interface with high CPU

Muazzam — Tue, 05 Nov 2019 18:26:57 GMT

Hardware: 25400

20 cores with 6/14 split.

OS: GAIA R77.30 T216

Uptime: Over 18 months

Bandwidth (typical): 500 Mbps

Concurrent connections: About 18K

Packets/Sec: Under 500K

RX ring-size on interface: 512

One 10g (non-bonded) interface has started dropping packets recently. This is tied to CPU core 1, that is running between 75 to 95%. Interface is showing RX drops constantly.

No other errors noticed. zdebug does not show any drops. SecureXL is accelerating 98% packets.

Question: This firewall should not be dropping packets, I do not see any reason. As a first step, I would like to reboot the firewall. Any one in support of this? Anyone suggests increasing buffer size on interface?

Re: Drops on interface with high CPU

Muazzam — Tue, 05 Nov 2019 18:28:49 GMT

Forgot to mention that the attached Cisco switch is showing no errors at all, all clean.

Re: Drops on interface with high CPU

Timothy_Hall — Wed, 06 Nov 2019 09:11:01 GMT

You almost certainly need to enable Multi Queue on the interface, seems like you have enough SND/IRQ cores.

Re: Drops on interface with high CPU

Kaspars_Zibarts — Wed, 06 Nov 2019 16:58:48 GMT

Definitely, 1 core will struggle with 10Gbps interface from our experience

Re: Drops on interface with high CPU

FedericoMeiners — Wed, 06 Nov 2019 20:25:07 GMT

As stated before, you should enable MultiQ on that interface. If you are still seeing errors on the interfaces you may need to liberate the cores assigned to MultiQ.

Regards,

Re: Drops on interface with high CPU

Muazzam — Thu, 07 Nov 2019 19:01:23 GMT

Correction: Hardware is 23500

Question: In the existing 6/14 split, would you recommend adding more SND cores before enabling MQ?

Any changes to SIM affinity, leaving it automatic ok?

Re: Drops on interface with high CPU

Kaspars_Zibarts — Fri, 08 Nov 2019 07:23:09 GMT

You would have to look at the load on all CPUs and then make a call - if you need more SXL or FWK cores. Or leave it as is