This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CPU test IPsec, rare result

Hi (excuse my english):
I have accomplished a CPU test conecting 1 for 1 ipsec client and measured de CPU utilization, but since 4 client, CPU utilization decrease rarely. Again same test, again same rare result,

Any ideas

Saludos

This thread was automatically locked due to age.

Parents

0 Marcelo Mujica over 21 years ago

[ QUOTE ]
Hi (excuse my english):
I have accomplished a CPU test conecting 1 for 1 ipsec client and measured de CPU utilization when download a bulk fahion (600MB file), but since 4 client, CPU utilization decrease rarely. Again same test, again same rare result,

Any ideas

Saludos

[/ QUOTE ]
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to Marcelo Mujica

4 percent? is that the amount of hte increase or the total usage? if it is the total usage i would not worry..if that is the percentage increase as long as your cpu does not hang around over 60 or so percent i would not worry about it either..

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcelo Mujica over 21 years ago in reply to William Warren

My doubt is:
If cpu overhead is directly proportional to ipsec client amount transfering bulk data, why my test delivered other result?...
1 IPsec client----->cpu=61%
2 IPsec client----->cpu=85%
3 IPsec client----->cpu=91%
4 IPsec client----->cpu=93%
5 IPsec client----->cpu=92%
6 IPsec client----->cpu=88%
7 IPsec client----->cpu=83%
8 IPsec client----->cpu=81%
the test was realized two times and similar results
I am wrong???
Thank!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Marcelo Mujica over 21 years ago in reply to William Warren

My doubt is:
If cpu overhead is directly proportional to ipsec client amount transfering bulk data, why my test delivered other result?...
1 IPsec client----->cpu=61%
2 IPsec client----->cpu=85%
3 IPsec client----->cpu=91%
4 IPsec client----->cpu=93%
5 IPsec client----->cpu=92%
6 IPsec client----->cpu=88%
7 IPsec client----->cpu=83%
8 IPsec client----->cpu=81%
the test was realized two times and similar results
I am wrong???
Thank!
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 William Warren over 21 years ago in reply to Marcelo Mujica

it is not neccessairly going to be linear since there are other things going in the background...what class of machine is this(cpu/ram..etc)?

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcelo Mujica over 21 years ago in reply to William Warren

CPU PIII 800, 256 RAM, HDD 20 IDE,2 3com 905tx. Network isolate, 2 catalyst 2950.
no packet filter, only autopacketfilter option on, left services disabled (ssh, pptp,ike debugging, etc).
running ipsec service moreover top.

Thank
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to Marcelo Mujica

what do things look like when ipsec is off? does the cpu usage drop a whole bunch or does it hover in the 60-90% range? i am assuming you are using it for firewalling? how about e-amil filtering/forwarding/anti-virus..etc??

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcelo Mujica over 21 years ago in reply to William Warren

No service running, no firewalling neither smtp proxy, neither NAT,neither antivirus,etc.
The network is isolate, to prevent virus,broadcast,etc.
When IPSec no work (VPN enables but no work) the CPU usage is lower 2%
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to Marcelo Mujica

how about when vpn is completly shut down?

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcelo Mujica over 21 years ago in reply to William Warren

I don´t probe shutdown freeswan service , but service idle (no client connected)
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to Marcelo Mujica

you are running freeswan on the Astaro box? if nothing esle is running then either you ahve a hardware problem or something is chewing up your cpu cycles..go into webmin..under reporting click hardware..scroll down to the process list and copy and paste the list here..[:)]

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcelo Mujica over 21 years ago in reply to William Warren

You are not understand my question:
My system does not have surcharge of CPU, destiny that CPU's utilization low to measure that connect but clients IPSec (this is rare or not?)

PS: Freeswan is the implementation incorpored to ASTARO you were not tasting it?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to Marcelo Mujica

ok back to the beginning..you have high cpu usage at all times or jsut with ipsec on?

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcelo Mujica over 21 years ago in reply to William Warren

I am no problem..but astaro behaviour is rare in the ipsec vpn roadwarrior test (please see the 4th post)
I try connecting 1 for 1 ipsec client. Since 1 to 4th client cpu is increase, spending up to 90%......But since 6 to upper decrease to 80% strangely. This is normal??

Thank
Cancel
Vote Up 0 Vote Down

Cancel