This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Extremely Slow Internet

Ok. I updated our Software firewall when it released last week. On Thursday I noticed that the Internet was having issues. I called Time Warner and it was not their equipment. I have spent most of the day working on this and what I have found is that the problem has to be related to v9.004-33.

I have replaced the Nics, switch, and cables. I finally did a reimage and did a backup restore. When I did that it works great. Then as soon as I apply v9.004-33 my ping on the firewall goes from 2ms to 200+ms. When I do a download test I get a download speed of .25meg and 1.1meg upload. If I leave the os at v9003-16 I get close to 20meg down and 5meg up.

Has anyone else seen similar issues?

Thanks!

This thread was automatically locked due to age.

Parents

0 pitonsxxl over 12 years ago

Same problem here with 9.004-33. Only Reboot helps.
With 9.004-16 it was running fine. User count 150

Model:ASG320
Firmware version: 9.004-33
Pattern version: 39104

Current system configuration
Firewall is active with 2 rules
Intrusion Prevention is inactive
Web Filtering is active, 202 714 requests served today
Network Visibility is active, 17 Application Control rules active
FTP Proxy is inactive
SMTP Proxy is active, 135 672 emails processed, 135 105 emails blocked
POP3 Proxy is inactive
Web Application Firewall is active, 10 110 requests served today
Antivirus is active for protocols HTTP/S, SMTP, WAF
AntiSpam is active for protocols SMTP
AntiSpyware is active
Email Encryption is inactive
Site2Site VPN is inactive
Remote Access is active with 1 online users
HA/Cluster is inactive
Endpoint Protection is active, Sophos LiveConnect is enabled, 1 endpoints, 0 threat alerts, 0 out-of-date alerts
Wireless Protection is active, 1 APs connected
- weekly.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 12 years ago in reply to pitonsxxl

Same problem here with 9.004-33. Only Reboot helps.
With 9.004-16 it was running fine. User count 150

Hi, your SWAP is high and your CPU usage is extremely high.

Can you post a processlist (available in WebAdmin under Support)?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 pitonsxxl over 12 years ago in reply to BarryG

Hi, your SWAP is high and your CPU usage is extremely high.

Can you post a processlist (available in WebAdmin under Support)?

Barry

Please see attachment
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 12 years ago in reply to pitonsxxl
Please see attachment

USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
810        860  1.9 29.3 2293328 593200 ?      Ssl  Nov22 138:28 /var/chroot-http/usr/bin/httpproxy -f -c /var/chroot-http -u httppr
root     14439  0.5 13.7 367532 278088 ?       Ssl  10:10   0:22 /usr/bin/cssd -d
nobody    6069  0.1  1.5 477764 31264 ?        Sl   Nov17  25:54  \_ /usr/apache/bin/httpd -k restart

I don't see what accounts for your high CPU graph, but the processes above are using a lot of memory, especially the http proxy (for Web Security).

You could see if restarting the proxy reduces the memory usage.

Take another process list capture when things seem really slow or the CPU graph is currently high.

I would also strongly recommend opening a support case with your reseller and/or premium support.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 pitonsxxl over 12 years ago in reply to BarryG
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
810        860  1.9 29.3 2293328 593200 ?      Ssl  Nov22 138:28 /var/chroot-http/usr/bin/httpproxy -f -c /var/chroot-http -u httppr
root     14439  0.5 13.7 367532 278088 ?       Ssl  10:10   0:22 /usr/bin/cssd -d
nobody    6069  0.1  1.5 477764 31264 ?        Sl   Nov17  25:54  \_ /usr/apache/bin/httpd -k restart

I don't see what accounts for your high CPU graph, but the processes above are using a lot of memory, especially the http proxy (for Web Security).

You could see if restarting the proxy reduces the memory usage.

Take another process list capture when things seem really slow or the CPU graph is currently high.

I would also strongly recommend opening a support case with your reseller and/or premium support.

Barry

restarting the proxy reduces the memory usage and CPU for a brief moment.

list capture cannot be done when CPU is high because Webadmin just freezes and doesn't respond at all.

Before opening support case i see that some of user have resolved problem with /etc/init.d/postgresql rebuild
http://www.astaro.org/gateway-products/hardware-installation-up2date-licensing/45221-9-0044-33-spikes-high-cpu-memory.html

EDIT 2016-07-12 BAlfson: IN newer versions, the command is /etc/init.d/postgresql92 rebuild
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 pitonsxxl over 12 years ago in reply to BarryG
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
810        860  1.9 29.3 2293328 593200 ?      Ssl  Nov22 138:28 /var/chroot-http/usr/bin/httpproxy -f -c /var/chroot-http -u httppr
root     14439  0.5 13.7 367532 278088 ?       Ssl  10:10   0:22 /usr/bin/cssd -d
nobody    6069  0.1  1.5 477764 31264 ?        Sl   Nov17  25:54  \_ /usr/apache/bin/httpd -k restart

I don't see what accounts for your high CPU graph, but the processes above are using a lot of memory, especially the http proxy (for Web Security).

You could see if restarting the proxy reduces the memory usage.

Take another process list capture when things seem really slow or the CPU graph is currently high.

I would also strongly recommend opening a support case with your reseller and/or premium support.

Barry

restarting the proxy reduces the memory usage and CPU for a brief moment.

list capture cannot be done when CPU is high because Webadmin just freezes and doesn't respond at all.

Before opening support case i see that some of user have resolved problem with /etc/init.d/postgresql rebuild
http://www.astaro.org/gateway-products/hardware-installation-up2date-licensing/45221-9-0044-33-spikes-high-cpu-memory.html

EDIT 2016-07-12 BAlfson: IN newer versions, the command is /etc/init.d/postgresql92 rebuild
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BarryG over 12 years ago in reply to pitonsxxl

list capture cannot be done when CPU is high because Webadmin just freezes and doesn't respond at all.

You can setup SSH access and run 'ps auxw' from the terminal to get the process list.

Before opening support case i see that some of user have resolved problem with /etc/init.d/postgresql rebuild

Might be worth a try. Let us know if it helps.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 wingman over 12 years ago in reply to pitonsxxl

Before opening support case i see that some of user have resolved problem with /etc/init.d/postgresql rebuild
https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/28674

Just to confirm in my case ( https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/28674) I haven't performed a database rebuild yet. This is one of the possible "next steps" for me to try as I am still reviewing the logs
Cancel
Vote Up 0 Vote Down

Cancel
0 pitonsxxl over 12 years ago in reply to BarryG

You can setup SSH access and run 'ps auxw' from the terminal to get the process list.

Barry

I managed to grap ps auxw from terminal when CPU usage was reported 99% in webadmin
- ps_auxw.txt
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel