[ previous ] [ next ] [ threads ]
 
 From:  <mike at myownsoho dot net>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall] Problems with CPU load on soekris
 Date:  Thu, 14 Jan 2010 21:40:35 +0000
Jessica,
One of my clients runs a net4801 with about 10-30 concurrent users with
traffic shaping, etc.  While m0n0 does a great job at passing packets, etc.
the gui was almost inaccessible under their normal load.
We ended up having to do hard restarts about every 10 days.  It was bad.

take care,
mike--

On Thu, 14 Jan 2010 12:32:49 -0800, Graham Freeman
<graham dot freeman at cernio dot com> wrote:
> Hi, Jessica,
> 
> With traffic shaping, ~10 firewall rules, and 10-30 users, I think
you're
> probably overloading the net4801.   You probably need to upgrade to an
ALIX
> or net5501.
> 
> good luck,
> 
> Graham
> 
> 
> On 14 Jan 10, at 12:30 , Jessica Aguilar wrote:
> 
>> 
>> Thanks for answering me.
>> 
>> Well users will be around 25 to 30 at the most and firewall rules are
>> like 10 only to be able to access devices remotately and monitor the
>> soekris and some devices behind the soekris.
>> 
>> Acually I though that it that user amount but it varies I've seen this
>> problem with less than 10 users autheticated.
>> 
>> 
>> I also have traffic shapping enable.
>> 
>> Thank you
>> 
>> 
>> -----Original Message-----
>> From: Graham Freeman [mailto:graham dot freeman at cernio dot com] 
>> Sent: Thursday, January 14, 2010 11:54 AM
>> To: m0n0wall at lists dot m0n0 dot ch
>> Subject: Re: [m0n0wall] Problems with CPU load on soekris
>> 
>> 
>> Hi, Jessica,
>> 
>> I'm guessing that you're overloading this device.   How many users are
>> you trying to support with your net4801?   And what kind of network
>> throughput does it usually handle?  Are the firewall rules simple (2-3
>> rules), moderately complex (~10 rules), or very complex (~20 rules)?
>> 
>> Please reply on-list.
>> 
>> Graham
>> 
>> 
>> 
>> On 14 Jan 10, at 10:55 , Jessica Aguilar wrote:
>> 
>>> 
>>> 
>>> Hello Support
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> I been having some problems with some of my soekris boxes. 
>>> 
>>> 
>>> 
>>> I have a soekris model net4801 . I am using captive portal  firmware
>>> 1.3.   I start noticing since I upgrade to 1.3 but not sure if that
>>> problem was happening before.  
>>> 
>>> 
>>> 
>>> Everytime  I get this message or ARP message error  Jan 14 10:41:27
>>> kernel: pid 319 (php), uid 0, was killed: out of swap space .  I start
>>> receiving  complains from my users.
>>> 
>>> 
>>> 
>>> 
>>> 
>>> CPU load goes to 100 % and memory goes up  
>>> 
>>> 
>>> 
>>> 
>>> 
>>> Any idea?  How can I fix it
>>> 
>>> 
>>> 
>>> I lower the dhcp to 30 min  did appear to help
>>> 
>>> 
>>> 
>>> Is the box to small ?
>>> 
>>> 
>>> 
>>> I have a 2 G flash card 
>>> 
>>> 
>>> 
>>> ****
>>> 
>>> And I keep getting this messages
>>> 
>>> 
>>> 
>>> Jan 14 10:41:03 last message repeated 3 times 
>>> 
>>> Jan 14 10:41:27 kernel: pid 319 (php), uid 0, was killed: out of swap
>>> space 
>>> 
>>> Jan 14 10:40:50 dnsmasq[130]: reading /var/db/dhcpd.leases 
>>> 
>>> Jan 14 10:40:34 kernel: ipfw2 (+ipv6) initialized, divert loadable,
>>> rule-based forwarding enabled, default to accept, logging disabled 
>>> 
>>> Jan 14 10:40:33 dhcpd: For info, please visit
>>> http://www.isc.org/sw/dhcp/ 
>>> 
>>> Jan 14 10:40:33 dhcpd: All rights reserved. 
>>> 
>>> Jan 14 10:40:33 dhcpd: Copyright 2004-2006 Internet Systems
>> Consortium. 
>>> 
>>> Jan 14 10:40:33 dhcpd: Internet Systems Consortium DHCP Server V3.0.5 
>>> 
>>> Jan 14 10:40:33 dnsmasq[130]: read /etc/hosts - 2 addresses 
>>> 
>>> Jan 14 10:40:33 dnsmasq[130]: using nameserver 208.67.222.222#53 
>>> 
>>> Jan 14 10:40:33 dnsmasq[130]: using nameserver 208.67.220.220#53 
>>> 
>>> Jan 14 10:40:33 dnsmasq[130]: reading /etc/resolv.conf 
>>> 
>>> Jan 14 10:40:33 dnsmasq[130]: failed to access /var/db/dhcpd.leases:
>> No
>>> such file or directory 
>>> 
>>> Jan 14 10:40:33 dnsmasq[130]: failed to access /var/db/dhcpd.leases:
>> No
>>> such file or directory
>>> 
>>> 
>>> 
>>> 
>>> 
>>> Thank You
>>> 
>>> 
>>> 
>>> Jessica
>>> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch