Openvpn tap uses 99% cpu time
Emile Coetzee
freebsd-stable at clarotech.co.za
Tue Mar 20 12:16:12 UTC 2007
Emile Coetzee wrote:
> Okay I finally have a ktrace of the offending process. You can view it
here:
> http://www.clarotech.co.za/dump/openvpn2.txt
>
>>Thanks for this. If this is the correct trace, of the correct process,
then it looks like OpenVPN is hanging immediately on opening the tap
device.<<
>>One thing that does jump out at me is the use of the persist-tun
keyword. Can you try removing the use of this keyword? It is something
I've never had to use with OpenVPN.<<
I did try it without the persist settings and it seemed to work but then I
put it back again and that worked too (i.e. no 100% CPU usage). However
after restarting the box and repeating the tests, both produced the 100% CPU
usage issue.
What I suspect happened is that somehow the tap device was already present
and thus openvpn did not need to create one. I then tried to use the
cloned_interfaces="tap0" to see if that would create a tap device for me at
boot time. But the server hung similarly to when openvpn uses 100% CPU time
more or less where I would expect it to initialize the NICs. Unfortunately I
did not think to check if the tap device was present before testing it
without the persist setting. So it's a bit of mystery.
I have lost the box I was testing on (off to a client) and will only be able
to setup a new one to do testing on next week. So I will feed back with any
new findings.
Cheers
Emile
More information about the freebsd-stable
mailing list