conntrackd High CPU


#1

Hi Guys,

I have two Vyos routers as VM’s and there VRRP between the two routers, recently i noticed a high cpu load on the active router the conntrackd is taking all cpu resource, i’m not sure how to check and see what is causing the issue, has anyone faced the same issue before?

any help would be much appreciated


#2

Hi Guys,

I’m still facing the same issue, couldn’t really find any resource regarding this issue, i’m using the two routes to static route few subnets to the public and I don’t really use the firewall apart from the below configs:

show firewall

all-ping enable
broadcast-ping disable
config-trap disable
group {
network-group BLACKLISTED {
}
network-group DMZ-NETWORK {
}
network-group LAN-NETWORK {
}
network-group MGT-NETWORK {
}
network-group WAN-NETWORK {
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
receive-redirects disable
send-redirects disable
source-validation disable
state-policy {
established {
action accept
}
invalid {
action drop
}
related {
action accept
}
}
syn-cookies enable
twa-hazards-protection disable

can someone please help with a little information.


#3

Hello,
maybe you can join us on phabricator.vyos.net,
we just need much more info to help you with this issue
Thanks