Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 2 subscribers
  • Views 3882 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Increase swap

apijnappels
We have to reboot our UTM320 HA-setup every now and then because the swap file usage slowly increases every day.
It seems that it is okay to only reboot the member that currently has the high swap usage (right now the master uses 46%, while the slave only uses 23%).

I stumbled upon this document from Sophos indicating how to increase the swap size to about 4GB.

Does this mean it is safe to do so without voiding support?


This thread was automatically locked due to age.
  • 0
    Hi, you should talk to support first.

    Increasingly high swap usage is often an indicator of other problems (such as memory leaks).

    Barry
  • 0
    Right now my swap sizes are 25% and 47.9%, so about 2% higher than my opening post in this thread, so that's about 2% increase in about 17 hours.
    My SUM will start turning yellow when swap is above 45%.
    I'm not sure if this is "Increasingly high swap usage", but with about 2-3% increase every day, this means that I must reboot at least once a month, not a real pain, but in my opinion these devices shouldn't need that many reboots.

    Is there a way to discover why the swap is growing? Memory usage is quite steady at 51% of 4 GB RAM (UTM 320 rev.5), so with a little under 2GB RAM left, why is it using swap at all (let alone that it also increases)?

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0
    Hi,

    These devices shouldn't need any reboots, except for up2dates.
    I've had uptimes of over 1 year on older Astaro versions.

    You can run 'top' and press SHIFT-M to sort by memory usage, or you can get the process list from the support section of webadmin.

    Recent versions of the UTM seem to have a problem with increasing memory/swap usage; there are a lot of threads about it in these forums, but there doesn't seem to be a fix for all users yet.

    There is one thread where a script was posted by Sophos staff, which helps identify what daemons are using the most memory, but I can't find it at the moment.
    Anyways, the methods above should give an idea.

    Barry
  • 0
    Just ran top and there is only one process (httpproxy) using 22.3% and all others are under 10% (cssd at 8.2%, postgres at 7% and at 3.3%), all others are under 3% MEM usage. Uptime is now 49 days, but I believe that I rebooted one of the nodes  just 3 weeks ago.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0
    Please add your info to https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/28867

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Please add your info to http://www.astaro.org/gateway-products/hardware-installation-up2date-licensing/47258-9-006-5-swap-usage-results.html

    Cheers - Bob


    Just added the info.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0
    Sorry, that was unclear.  I meant to follow the instructions in the first post of that thread and then post the results there.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Sorry for the delay, but just posted the results.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0
    It doesn't look like you're suffering from anything related to the other issues in that post (snort and/or httpproxy).  I don't think that you need to worry about your swap, and that it will not grow above 60%.  Forcing a failover to the Slave with a reboot is a good way to solve this problem temporarily.

    If you start seeing CPU spikes caused by 90+% swap usage, then please rerun swapusage.pl and add the results to that thread.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Thank you Bob.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Cookie Information Banner