High memory load on XG106

Hi,

this is expected on a 4gb of RAM box.

Ian

Hello

While V18 is in EAP and even Beta versions, there will have been little performance optimizations done, and there would potentially be sets of debugging code still in the firmware to assist in tracking and tracing issues.

I would expect that once a second Beta version is released to the group, more emphasis will be placed on performance optimizations before actual release.

I am seeing about a 20% increase in both Ram and CPU usage in V18 over the V17.5.6 I was previously running, and that is on an XG125.

Once there is official release firmware, I would expect that there will still be an increase in Ram and CPU usage, purely due to the additional features and processing done in the V18 firmware.

My 6gb system has gone from 40-50% to 75% memory usage. CPU is up slightly.

And yes, I expect the memory and CPU to decrease after EAP is finished and the debugging code removed.

Ian

On an XG115.

Somewhat weirdo ...  Particularly memory usage.

Paul Jr

XG115 with 8GB of memory, huh ? ;o) But it looks quite bumpy compared to my (stock) XG125 with 4Gigs of memory

I don't understand, why your XG has such memory usage bumps. I assume there are probably appliance specific memory usage optimizations in place, which might interfere with you obviously upgraded memory ?

I have literally everything in use on my home XG as:

2 Internet Uplinks

RED's

New DPI / SSLx in place

~7 local networks (Ethernet and VLAN's)

Mail Proxy

WAF publishing ~7 sites

IPS and ATP

Sandstorm

SyncSec

~60 devices as Notebooks, Computers, Servers, Network devices, IoT devices

WIFI (partly - only manages WIFI on RED15W - the APX are managed via Central)

However - Snort never was memory friendly, as we moved now additional functions as DPI web filter into snort, higher memory usage was expectable. However - a XG should treated like a server and not a client. While free memory on a client helps be responsive and fast opening apps, a server should keep as much as possible in memory and make use of available memory as much as possible. So there's nothing wrong, if a 4Gig Appliance eats makes use of 80-90% of available memory, as long as memory and swap usage stays more or less stable (and not so bumpy as in BIg_Buck's example).

@Big_Buck: Does your appliance possibly reload some services often, or do you have processes crashing/got some core dumps on the machine ? In my eyes the memory usage should be way more linear and stable as in your graph.

How did you Buck manage to achieve such low CPU usage? On my SG115rev2 (SFOS v18 EAP1 Refresh 1, swapped to 8GB RAM, max. 8-10 users online) all the time I have a CPU consumption of min. 20% in jumps to 85%.

Today I did log cleaning, so I attach a report of the last two hours.

Your appliance has a average idle time of 60%? That's perfectly well for a xg115...where's the issue? How is the weekly graph looking?

Respectfully disagree with your assessment. Sure his 2 hr average is not high but his max load is not sustainable at 85 percent cpu with load average at 13 at the beginning. His box is doing everything not to choke. Another user or two streaming from youtube will definitely drop traffic or worse make the box unresponsive.

Regards

There's nothing in that XG115.  Bought on EBAY, and dedicated to test v18.

A single MASK / Catch-all NAT rule.

4 wireless Networks.

4 Firewall rules.

That's it !!!

Having more than 5 gig of memory is not that useful, but 5 gig dimms does not exist. So, for $29, I got 8gig DIMM.  I presume that in such environment 4 gig is ok.  I also presume Sophos set things in such a way that it limts the memory ceiling on certain devices.

It would not be useful to pimp the SSD since in an XG115v3 storage is SATA/m2 that's around 400m/s performance.  I doubt an NVME would improve performance.

I pay those XG so cheap, it is not even worth the hassle to return them to Sophos if they break.  Garbage can.  Next one.  An XG115Wv2 was sold $49 last week on EBay.  It is tricky to find them.  Requires many hours lurking all year long.  But since I'm shopping for other things as well, it is not so bad.

Paul Jr

I hope this is the case.  Our Active / Passive Pair is pegging 90+ several times a day with a half dozen IT users.