Checking RadSec client certificate attributes with 'check_client_connections'
Hi, While checking RadSec client certificate attributes with 'check_client_connections', the radiusd main process usage increases up to 100%. I did some tests : same behaviour with just an 'ok' or a less trivial unlang check in the 'New-TLS-Connection' subsection. In debug mode, got no relevant logs, just thousands of lines containing 'Waking up in x.y seconds.' at the same timestamp as the CPU usage get high. How to fix this issue ? Regards, Arnaud
On Aug 19, 2021, at 11:36 AM, Arnaud LAURIOU <arnaud.lauriou@renater.fr> wrote:
While checking RadSec client certificate attributes with 'check_client_connections', the radiusd main process usage increases up to 100%.
I did some tests : same behaviour with just an 'ok' or a less trivial unlang check in the 'New-TLS-Connection' subsection.
In debug mode, got no relevant logs, just thousands of lines containing 'Waking up in x.y seconds.' at the same timestamp as the CPU usage get high.
Which version are you using? I don't see that here. Alan DeKok.
On 8/19/21 10:56 PM, Alan DeKok wrote:
On Aug 19, 2021, at 11:36 AM, Arnaud LAURIOU <arnaud.lauriou@renater.fr> wrote:
While checking RadSec client certificate attributes with 'check_client_connections', the radiusd main process usage increases up to 100%.
I did some tests : same behaviour with just an 'ok' or a less trivial unlang check in the 'New-TLS-Connection' subsection.
In debug mode, got no relevant logs, just thousands of lines containing 'Waking up in x.y seconds.' at the same timestamp as the CPU usage get high. Which version are you using? I don't see that here. 3.0.23
I've pushed patches to the v3.0.x branch on GitHub. Please verify that they fix the issue. Alan DeKok.
On 8/20/21 2:52 PM, Alan DeKok wrote:
I've pushed patches to the v3.0.x branch on GitHub. Please verify that they fix the issue. No more CPU high usage but instead have in the radiusd log file : Fri Aug 20 16:37:19 2021 : Info: Ignoring new connection due to socket max_connections
In debug mode : ... new connection request on TCP socket Ignoring new connection due to socket max_connections Waking up in 0.6 seconds. ... new connection request on TCP socket Ignoring new connection due to socket max_connections Waking up in 0.6 seconds. Usually we do not reach socket max_connections. Arnaud
On Aug 20, 2021, at 11:24 AM, Arnaud LAURIOU <arnaud.lauriou@renater.fr> wrote:
On 8/20/21 2:52 PM, Alan DeKok wrote:
I've pushed patches to the v3.0.x branch on GitHub. Please verify that they fix the issue. No more CPU high usage but instead have in the radiusd log file : Fri Aug 20 16:37:19 2021 : Info: Ignoring new connection due to socket max_connections
If you have more information, that would help. Getting tiny bug reports makes it difficult to track down and fix any issues. Alan DeKok.
On 8/20/21 7:30 PM, Alan DeKok wrote:
On Aug 20, 2021, at 11:24 AM, Arnaud LAURIOU <arnaud.lauriou@renater.fr> wrote:
On 8/20/21 2:52 PM, Alan DeKok wrote:
I've pushed patches to the v3.0.x branch on GitHub. Please verify that they fix the issue. No more CPU high usage but instead have in the radiusd log file : Fri Aug 20 16:37:19 2021 : Info: Ignoring new connection due to socket max_connections
If you have more information, that would help. Getting tiny bug reports makes it difficult to track down and fix any issues. I will be offline for a few days, sending out the detailed logs in early september.
participants (2)
-
Alan DeKok -
Arnaud LAURIOU