Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

High CPU load VPNaaS and libreswan on CentOS 7

Hi,

when installing libreswan and neutron-vpnaas-agent, I get 100% cpu load on all cores. Problem exists in Liberty and Mitaka deployments via Packstack.

The process consuming the cpu-cycles is "certutil":

certutil -N -d sql:/etc/ipsec.d --empty-password

It spawns serveral times, sometimes the process dies when swap runs full. Running this command on root shell works flawlessly.

I don't get any more debug output, is this a known problem?

High CPU load VPNaaS and libreswan on CentOS 7

Hi,

when installing libreswan and neutron-vpnaas-agent, I get 100% cpu load on all cores. Problem exists in Liberty and Mitaka deployments via Packstack.

The process consuming the cpu-cycles is "certutil":

certutil -N -d sql:/etc/ipsec.d --empty-password

It spawns serveral times, sometimes the process dies when swap runs full. Running this command on root shell works flawlessly.

I don't get any more debug output, is this a known problem?