R77.20.85 performance issue on centrally managed SMB

[HristoGrigorov]

Guys,

That build is causing significant traffic delays and CPU load is higher than that of R77.20.81. 

Any of you experiencing similar problem ?

[KAPIL_RANA]

yes, i have same issue  on SMB  local manage 1470 . After updating  on 77.20.85  build 751 .

After 12 hour my device  seeing like zombies .  Load and cpu processing none ....

[HristoGrigorov]

Zombie processes are mostly harmless and you can safely ignore them. But if they bother you too much you may open SR for RnD to fix it. There was a similar problem in the past but with the sfwd process.

[Naftali_Oziel]

fully agree that for the most part zombies are harmless and these ones are on httpd with zero usage on memory/cpu so that's good.  That said, a well optimized code should clear them after a set period of time and not accumulate.  I have synology products that zombies are seen but the system clears them.    I have lived through the firmware that had zombies due to sfwd process.    

Curious to know if you have zombies and to which process if it's the httpd which has been known to be problematic.

Will open an SR.  If my synology device that cost me 500 dollars and the OS can clean them, expect nothing less from code optimization from CP.

[Zachi_Schnieder]

Hi All,

R77.20.85 build 990172751 is now Publicly available.

Please use the following SK to download it:

R77.20.85 for Small and Medium Business Appliances 

Thanks,

[G_W_Albrecht]

R77.20.85 build 990172751 is now Publicly available, but that firmware does not include the fix(es) for sk147092 and sk147112 ?

[Tom_Hinoue]

There is an R77.20.85 Build 990172752 for covering those 2 SK's, which means the fix is not included in B751

[Naftali_Oziel]

do you have a link to this firmware?

[Tom_Hinoue]

Nope, this is an hotfix so afaik it is not publicly available... you will need to ask TAC for them to provide it to you.

[Naftali_Oziel]

Thanks, I'll wait for r77.20.86 EA should have the fix.    Zachi Schnieder‌ can you confirm this, for the two sk147092 and sk147112?

[KAPIL_RANA]

 SMB  local manage 1470 . After updating  on 77.20.85  build 751 .

After 12 hour my device  seeing like zombies .  Load and cpu processing none ....

[Naftali_Oziel]

Suggest you open an SR and also if you do the ps aux which process does it show you that is defunct is it the httpd? This is the time to report as they are working on r77.20.86

[LuisSP]

Since I have R77.20.85 B751  my appliance 1470 has had performance drops after a few hours, and I can not manage it because the device does not respond.

The SNMP logs show me that it is still operating and filtering packets, but the performance is so poor that I had to restart it.

Before... I had stable 77.20.80 and enabled the blades of FW, AppC, UrlF, UsrAw, IPS, AV, AB, TE, VPN-RA and SSL Inspection. Tried 77.20.81 but brought me some inconveniences and I returned to 77.20.80.

The 77.20.85 Build 751 I have been observing for 3 days, with the blocking problems. At this moment, deactivate the SSL Insp and leave it in HTTPS Cat, it behaves stable.

[Naftali_Oziel]

Great analysis, did you open an SR to report?

[LuisSP]

That's right...TAC is still analizing my case.

[HristoGrigorov]

There is a memory consumption issue with build 751 and HTTPS-I enabled. Tell TAC to contact RnD directly, they already have a fix for that.

[Naftali_Oziel]

what build is that fixed on?

[HristoGrigorov]

Build 755 and later.

[Naftali_Oziel]

Thanks do you know if this build also fixes the static nat/server objects issues? 

[Naftali_Oziel]

are you running with build 755 in your environment?

[HristoGrigorov]

Yes, I am. It seems to work fine so far.

[Martin_Krolikow]

We have also experienced that the build 755 is stable so far.

[HristoGrigorov]

I cannot say that but it is possible. 

[Mark_Mitchell]

How has people got on with this? Did the CPU issue get resolved?

We are recommending R77.20.81 at the minute as we have had stable results with this software. 

I notice that there are 2 builds currently available for download .751 and .731.

Regards

Mark

[Naftali_Oziel]

Running on build 755 and stable.   If you are going to upgrade, open a TAC and request this build it has the CPU and other fixes for static nat

[Mark_Mitchell]

Thank you Naftali. I think I'll stay put with .81 for the time being until the stable version is officially released. 

Regards

Mark

[Naftali_Oziel]

Hi Mark, GA is build 751 and stable,  build 755 had minor tweaks.  Don't believe there will be another GA for r77.20.85 as r77.20.86 is now available as EA.  

[Mark_Mitchell]

Hi Naftali,  thank you for the additional info. Appreciate it.

Regards

Mark

[LuisSP]

I have 4 days running  r77.20.85 Build 755 and appliance is stable. Just noticed there are a difference between memory reported by webui and top command. WebUI tools report constantly about  700Mb memory usage, while top report 1.5Gb aprox; although I consider that such differences come from previous fimwares.

Leaving aside that, the firmware performs well.

top - 10:27:58 up 3 days, 15:43, 1 user, load average: 1.35, 1.62, 1.78
Tasks: 122 total, 3 running, 118 sleeping, 0 stopped, 1 zombie
Cpu(s): 3.6%us, 3.8%sy, 0.0%ni, 91.7%id, 0.0%wa, 0.0%hi, 0.8%si, 0.0%st
Mem: 2068516k total, 1582132k used, 486384k free, 7496k buffers
Swap: 0k total, 0k used, 0k free, 631624k cached

[HristoGrigorov]

Don't know what WebUI shows (probably resident memory) and I do not use it for monitoring anyway. 'top' and 'free' are what I trust most for mem usage. Also 'fw ctl pstat' is useful. 

Edit:

This is what WebUI uses to show memory:

cpstat os -f all | grep "Active Virtual Memory (Bytes):" | awk '{print $5}'

[HristoGrigorov]

Effective 05 March 2019: Build 990172755 for R77.20.85 image has been released for 700/900/1400 Appliances.