topic Re: High CPU by vpnd process (Over 200%) always in General Topics

High CPU by vpnd process (Over 200%) always

Prabulingam_N1 — Fri, 28 Sep 2018 10:51:54 GMT

Dear All,

In R80.10 FW - No IPSecMobile blade used.

Only FW, IA, APPL,URL, IPS, AV/AB

But CPU constantly n range of 200% by vpnd process.

Customer uses Captive portals (2000+ users were using.

Installed Jumbo Take 112, but still CPU no reduced. Per vpnd files availabel no concrete clue on this.

Anyone had come across on this, can suggest.

Regards,

N.Prabulingam

Re: High CPU by vpnd process (Over 200%) always

Laxi_D — Fri, 28 Sep 2018 11:05:22 GMT

same issue here.

opened TAC case but no solution yet

Re: High CPU by vpnd process (Over 200%) always

Lucas_Otten — Fri, 28 Sep 2018 11:49:37 GMT

We had similar.

If I recall Identity Awareness was to blame.
We spun off the IA process to a pair of VM IA gateways and seemed to get rid of that specific symptom anyway.

Re: High CPU by vpnd process (Over 200%) always

JozkoMrkvicka — Fri, 28 Sep 2018 12:08:24 GMT

Did you check "Super Seven" commands as was presented by Timothy Hall‌ ?

Security Gateway Performance Optimization Excerpt

Re: High CPU by vpnd process (Over 200%) always

Prabulingam_N1 — Fri, 28 Sep 2018 14:17:00 GMT

Thanks Lucas, but I cannot do the same for this customer as they only have 1 FW.

Looking for any info if Latest T_142 can solve this?

Regards,

N.Prabulingam

Re: High CPU by vpnd process (Over 200%) always

Lucas_Otten — Fri, 28 Sep 2018 15:20:27 GMT

OK. Just wanted to point out that the CP licensing was included as part of the IA licensing.
So the only cost to use were the soft costs of creating VMs.

Re: High CPU by vpnd process (Over 200%) always

Timothy_Hall — Fri, 28 Sep 2018 17:06:00 GMT

It is possible that VPND is crashing over and over, please see my troubleshooting recommendations in this similar thread:

R80.10 - VPND process utilizes a large amount of CPU

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: High CPU by vpnd process (Over 200%) always

Prabulingam_N1 — Sat, 29 Sep 2018 08:57:51 GMT

Dear Tim/Jozko,

Found this sk113161 and seems quite different to accept.

btw- vpnd process isn't crashing and no core files for vpnd.

Regards,

N.Prabulingam

Re: High CPU by vpnd process (Over 200%) always

Timothy_Hall — Sat, 29 Sep 2018 13:19:51 GMT

Anything interesting being logged to $FWDIR/log/vpnd.elg file?

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: High CPU by vpnd process (Over 200%) always

_Val_ — Sat, 29 Sep 2018 18:13:00 GMT

Please open a support request for this issue

Re: High CPU by vpnd process (Over 200%) always

Prabulingam_N1 — Wed, 17 Oct 2018 10:52:08 GMT

Yes Valeri - I had open Service request and awaiting their response.

Regards, N.Prabulingam