Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 17 replies
  • Subscribers 1 subscriber
  • Views 7672 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CPU test IPsec, rare result

Marcelo Mujica
Hi (excuse my english):
I have accomplished a CPU test conecting 1 for 1 ipsec client and measured de CPU utilization, but since 4 client, CPU utilization decrease rarely. Again same test, again same rare result,

Any ideas

Saludos  


This thread was automatically locked due to age.
Parents
  • 0
    [ QUOTE ]
    Hi (excuse my english):
    I have accomplished a CPU test conecting 1 for 1 ipsec client and measured de CPU utilization when download a bulk fahion (600MB file), but since 4 client, CPU utilization decrease rarely. Again same test, again same rare result,

    Any ideas

    Saludos   

    [/ QUOTE ]  
  • 0 in reply to Marcelo Mujica
    4 percent?  is that the amount of hte increase or the total usage?  if it is the total usage i would not worry..if that is the percentage increase as long as your cpu does not hang around over 60 or so percent i would not worry about it either.. 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    CPU PIII 800, 256 RAM, HDD 20 IDE,2 3com 905tx. Network isolate, 2 catalyst 2950.
    no packet filter, only autopacketfilter option on, left services disabled (ssh, pptp,ike debugging, etc).
    running ipsec service moreover top.

    Thank  
  • 0 in reply to Marcelo Mujica
    what do things look like when ipsec is off?  does the cpu usage drop a whole bunch or does it hover in the 60-90% range?  i am assuming you are using it for firewalling?  how about e-amil filtering/forwarding/anti-virus..etc??

     

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    No service running, no firewalling neither smtp proxy, neither NAT,neither antivirus,etc.
    The network is isolate, to prevent virus,broadcast,etc.
    When IPSec no work (VPN enables but no work) the CPU usage is lower 2%
      
  • 0 in reply to Marcelo Mujica
    how about when vpn is completly shut down?
      

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    I don´t probe shutdown freeswan service , but service idle (no client connected)  
  • 0 in reply to Marcelo Mujica
    you are running freeswan on the Astaro box?  if nothing esle is running then either you ahve a hardware problem or something is chewing up your cpu cycles..go into webmin..under reporting click hardware..scroll down to the process list and copy and paste the list here..[:)] 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    You are not understand my question:
    My system does not have surcharge of CPU, destiny that CPU's utilization low to measure that connect but clients IPSec (this is rare or not?)

    PS: Freeswan is the implementation incorpored to ASTARO you were not tasting it?

    Regards  
  • 0 in reply to Marcelo Mujica
    ok back to the beginning..you have high cpu usage at all times or jsut with ipsec on?   

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    I am no problem..but astaro behaviour is rare in the ipsec vpn roadwarrior test (please see the 4th post)
    I try connecting 1 for 1 ipsec client. Since 1 to 4th client cpu is increase, spending  up to 90%......But since 6 to upper decrease to 80% strangely. This is normal??

    Thank  
  • 0 in reply to Marcelo Mujica
    aha..ok...i think i understand...the cpu decreases when you add more than 4 ipsec clients..that one i do not have an answer for..however linux is a different animal it may decrease to the the hernel or module readjusting hte load(this is jsut a wild guess here as i do not claim to understand Linux memory workings/caching in this instance) 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0 in reply to Marcelo Mujica
    aha..ok...i think i understand...the cpu decreases when you add more than 4 ipsec clients..that one i do not have an answer for..however linux is a different animal it may decrease to the the hernel or module readjusting hte load(this is jsut a wild guess here as i do not claim to understand Linux memory workings/caching in this instance) 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
Cookie Information Banner