Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 41 subscribers
  • Views 16230 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why is my system load high?

0xDECAFBAD 
I'm running the Sophos XG Home Edition.  These are the stats with pretty much no traffic running through the box.  The hardware it is running on is an 8-core Intel Atom processor with 8gb of RAM.  I noticed recently in the dashboard that the performance icon wasn't green like it was initially.  I'm having trouble figuring out why it thinks there's a performance issue and why my load seems high (of course these numbers could have been this way when I was running UTM 9.x but there wasn't a performance indicator so I didn't bother to look).  I think the home edition is limited to 4 cores and 6 GB of RAM.  Even with the load average being elevated more than I think it should, and with my understanding of Linux load averages, a load of 2 on a 4-core system shouldn't be a big deal and cause for a performance alarm on the dashboard should it?


SFVH_SO01_SFOS 15.01.0# uptime                                                                      
 09:58:48 up  1:20,  load average: 2.06, 2.05, 1.96 


SFVH_SO01_SFOS 15.01.0# vmstat 1                                                                    
procs -----------memory---------- ---swap-- -----io---- -system-- ----cpu----                       
 r  b   swpd   free   buff  cache   si   so    bi    bo   in   cs us sy id wa                       
 2  0      0 5832756  68584 590160    0    0    14     6  271  131  2  0 98  0                      
 1  0      0 5832820  68584 590204    0    0     0    19 2346 1494 13  0 87  0                      
 0  0      0 5832052  68584 590224    0    0   128    27 2468 1767 15  1 83  0                      
 0  0      0 5831884  68584 590244    0    0     0     0 2066  927  0  0 100  0                     
 0  0      0 5831884  68584 590248    0    0     0     0 2069 1008  0  0 100  0                     
 0  0      0 5831884  68592 590240    0    0     0   141 2095 1202  0  0 100  0                     
 0  0      0 5831884  68592 590248    0    0     0     0 2084 1003  0  0 100  0                     
 0  0      0 5831884  68592 590248    0    0     0     0 2095 1005  0  0 100  0                     
 0  0      0 5831884  68592 590248    0    0     0     1 2095  933  0  0 100  0                     
 0  0      0 5831884  68592 590248    0    0     0     0 2058 1108  0  0 100  0                     
 2  0      0 5831336  68600 590212    0    0   128    28 2270 1382  4  0 95  0                      
 0  0      0 5831916  68600 590248    0    0     0    19 2192 1211  0  0 99  0                      
 1  0      0 5831796  68600 590256    0    0     0     0 2199 1173  3  0 97  0                      
 0  0      0 5831628  68600 590260    0    0   128    11 2314 1237  1  0 98  0                      
 0  0      0 5831284  68600 590260    0    0     0     0 2094 1057  0  0 100  0                     
 0  0      0 5831284  68608 590260    0    0     0    52 2094  969  0  0 99  0                      
 0  0      0 5831284  68608 590260    0    0     0     0 2216 1207  0  0 100  0                     
 1  0      0 5831292  68608 590260    0    0     0    11 2145 1039  1  0 98  0                      
 0  0      0 5831160  68608 590260    0    0     0     0 2092  911  0  0 100  0                     
 0  0      0 5831160  68608 590260    0    0     0     0 2092  919  0  0 100  0                     
 0  0      0 5831160  68616 590260    0    0     0    20 2125  882  0  0 100  0  

top - 10:06:07 up  1:27,  0 users,  load average: 1.69, 1.92, 1.95                                  
Tasks: 359 total,   1 running, 358 sleeping,   0 stopped,   0 zombie                                
Cpu(s):  2.3%us,  0.2%sy,  0.0%ni, 97.3%id,  0.1%wa,  0.0%hi,  0.0%si,  0.0%st                      
Mem:   8158816k total,  2283676k used,  5875140k free,    69576k buffers                            
Swap:  1563328k total,        0k used,  1563328k free,   592456k cached                             
                                                                                 
  PID  PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                         
 1132  20   0 16216  12m 2608 S  8.2  0.2   2:02.47 WAF                                             
 2061  20   0  191m  30m 1228 S  1.3  0.4   2:48.72 jamvm                                           
 2113  20   0  135m  46m 3872 S  0.7  0.6   0:04.46 awarrenhttp                                     
13828  20   0  2952 1260  856 R  0.7  0.0   0:00.30 top                                             
 3126  20   0  241m  10m 3028 S  0.3  0.1   0:08.38 httpd                                           
 3280  20   0  449m 300m 2116 S  0.3  3.8   0:02.19 snort_inline                                    
    1  20   0 12796  792  648 S  0.0  0.0   0:01.21 init                                            
    2  20   0     0    0    0 S  0.0  0.0   0:00.00 kthreadd                                        
    3  20   0     0    0    0 S  0.0  0.0   0:00.21 ksoftirqd/0                                     
    5   0 -20     0    0    0 S  0.0  0.0   0:00.00 kworker/0:0H                                    
    7  20   0     0    0    0 S  0.0  0.0   0:01.21 rcu_sched                                       
    8  20   0     0    0    0 S  0.0  0.0   0:00.00 rcu_bh                                          
    9  RT   0     0    0    0 S  0.0  0.0   0:00.00 migration/0                                     
   10  RT   0     0    0    0 S  0.0  0.0   0:00.54 migration/1                                     
   11  20   0     0    0    0 S  0.0  0.0   0:00.01 ksoftirqd/1                                     
   12  20   0     0    0    0 S  0.0  0.0   0:00.15 kworker/1:0                                     
   13   0 -20     0    0    0 S  0.0  0.0   0:00.00 kworker/1:0H                                    
                                                                            
 
top - 10:07:10 up  1:28,  0 users,  load average: 1.73, 1.90, 1.94                                  
Tasks: 360 total,   1 running, 359 sleeping,   0 stopped,   0 zombie                                
Cpu(s):  2.3%us,  0.1%sy,  0.0%ni, 97.5%id,  0.1%wa,  0.0%hi,  0.0%si,  0.0%st                      
Mem:   8158816k total,  2285436k used,  5873380k free,    69684k buffers                            
Swap:  1563328k total,        0k used,  1563328k free,   592736k cached                             
1H Unknown command                                                                                  
  PID  PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                         
 1085  20   0 27724  24m 2964 S 11.5  0.3   0:19.71 worker                                          
 1081  20   0 16308  13m 2728 S  4.0  0.2   0:48.75 worker                                          
 2061  20   0  191m  30m 1228 S  2.6  0.4   2:50.25 jamvm                                           
14010  20   0  2952 1256  856 R  0.7  0.0   0:00.22 top                                             
 2515  20   0 48800  14m 9560 S  0.3  0.2   0:02.51 postgres                                        
 3126  20   0  241m  10m 3028 S  0.3  0.1   0:08.52 httpd                                           
    1  20   0 12796  792  648 S  0.0  0.0   0:01.21 init                                            
    2  20   0     0    0    0 S  0.0  0.0   0:00.00 kthreadd                                        
    3  20   0     0    0    0 S  0.0  0.0   0:00.22 ksoftirqd/0                                     
    5   0 -20     0    0    0 S  0.0  0.0   0:00.00 kworker/0:0H                                    
    7  20   0     0    0    0 S  0.0  0.0   0:01.23 rcu_sched                                       
    8  20   0     0    0    0 S  0.0  0.0   0:00.00 rcu_bh                                          
    9  RT   0     0    0    0 S  0.0  0.0   0:00.00 migration/0                                     
   10  RT   0     0    0    0 S  0.0  0.0   0:00.54 migration/1                                     
   11  20   0     0    0    0 S  0.0  0.0   0:00.01 ksoftirqd/1                                     
   12  20   0     0    0    0 S  0.0  0.0   0:00.15 kworker/1:0                                     
   13   0 -20     0    0    0 S  0.0  0.0   0:00.00 kworker/1:0H             
 


This thread was automatically locked due to age.
  • 0

    I had the same problem when testing during the beta. I was testing it in a vm so blamed some of the problem on the vm drivers due to beta. From my limited testing, I narrowed it down to the way disk subsystem is utilized. Just like you, I could see no obvious problems running top etc but certain things eg. On your system, top is using almost 1% of a 8 core cpu???? seem to indicate problems.

    I didn't experience any problems with performance either but like you the yellow performance icon bugged me too. I also had some elevated system load numbers but they never exceeded 1.8x in a vm with 2cores and 4gb memory. On the same system the load values never exceed 0.2x running UTM9. I would say just ignore the icon for the time being if you don't notice any performance issues otherwise.

    Currently I am waiting on the next release of SFOS expected earlier next year before I test it again. Hopefully they will have some of this stuff fixed by then. The current version just gave me fits of rage[:D]

    If you notice blogs.sophos.com/.../ , the performance icon is yellow in the page where sophos touted XG as being the greatest ever with unrealistic performace increases while running older versions of IPS https://www.astaro.org/beta-versions/project-copernicus-public-beta/58731-answered-ips-engine-version.html . And a 250% increase in av performance??? 50% extra througput via firewall??? Those are some bold numbers for sure...

    Couple of screenshots from the page blogs.sophos.com/.../

  • 0 in reply to Billybob
    Maybe I am mixing snort and the nextgen IPS engine as the same product, but the current version is older than that on UTM9.35x

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0
    Running the standard LAN to WAN, HTTP filtering, and traffic shaping with 1 rule, my ping to google was 1,200ms when I had a single client downloading a file. Never have I seen latency so bad. Never had these issues with UTM 9 with almost the exact same configuration on the same hardware. Not to mention I was pulling my hair out trying to get the WAF to run on my web site and I was never able to get the SMTPS scanning working with my e-mail, so I had no spam filtering. I'm going to go back to UTM 9 until Sophos gets their act together and actually releases an XG version that is production worthy....
Unfiltered HTML