Management Server sluggish

sib2017 — Mon, 25 Jan 2016 09:25:01 GMT

Palo alto management server
Problems :
taking very log time to commit
web console taking long time to refresh

below is sytem resource
PAL-1-4020(active-primary)> show system resources

top - 12:08:34 up 145 days, 20:02, 1 user, load average: 9.32, 8.61, 6.46
Tasks: 105 total, 3 running, 102 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.6%us, 2.3%sy, 2.9%ni, 89.6%id, 4.6%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 1034536k total, 951928k used, 82608k free, 12672k buffers
Swap: 2008084k total, 1283336k used, 724748k free, 92760k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9059 30 10 2728 1224 904 S 12 0.1 0:10.60 genindex.sh
2317 20 0 658m 199m 3176 S 4 19.7 1487:05 logrcvr
21924 30 10 2240 952 720 S 4 0.1 0:00.02 top
21945 30 10 28812 768 604 S 2 0.1 0:00.01 sort
1 20 0 1772 504 480 S 0 0.0 1:17.10 init
2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:34.20 migration/0
4 20 0 0 0 0 S 0 0.0 4:09.05 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:34.37 migration/1
6 20 0 0 0 0 S 0 0.0 4:08.61 ksoftirqd/1
7 20 0 0 0 0 R 0 0.0 11:17.36 events/0
8 20 0 0 0 0 S 0 0.0 14:13.50 events/1
9 20 0 0 0 0 S 0 0.0 0:00.01 khelper
14 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
131 20 0 0 0 0 S 0 0.0 0:11.18 sync_supers
133 20 0 0 0 0 S 0 0.0 0:21.79 bdi-default
134 20 0 0 0 0 S 0 0.0 2:01.63 kblockd/0
135 20 0 0 0 0 S 0 0.0 2:09.73 kblockd/1
137 20 0 0 0 0 S 0 0.0 0:00.00 kacpid
138 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_notify
139 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_hotplug
239 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
240 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
241 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
242 20 0 0 0 0 S 0 0.0 0:00.00 ksuspend_usbd
247 20 0 0 0 0 S 0 0.0 0:00.00 khubd
250 20 0 0 0 0 S 0 0.0 0:00.01 kseriod
282 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
283 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
308 20 0 0 0 0 S 0 0.0 119:08.74 kswapd0
309 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
310 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
311 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
483 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
485 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_1
516 20 0 0 0 0 S 0 0.0 0:00.00 kpsmoused

PAL-1-4020(active-primary)> show system resources | match mgmtsrvr
2296 20 0 1387m 256m 3680 S 0 25.4 123:37.64 mgmtsrvr
PAL-1-4020(active-primary)> show system resources | match mgmt
2296 20 0 1387m 253m 3632 S 0 25.1 123:37.69 mgmtsrvr

Palo alto management server
Problems :
taking very log time to commit
web console taking long time to refresh

below is sytem resource
PAL-1-4020(active-primary)> show system resources

Thank you

Re: Management Server sluggish

bmorris1 — Mon, 25 Jan 2016 15:17:37 GMT

Hi Sib,

The management side of the 2000 & 4000 series is notoriously slow (look at the wait time on your cpu!)... I advise taking a look at this article:

https://live.paloaltonetworks.com/t5/Management-Articles/Steps-to-Reduce-MP-CPU-on-PA-2000-Series-and-PA-4000-Series/ta-p/56675

Also it has been noted that an update to 7.0.x has improved the commit performance on these devices.

hope this helps,

Ben

Re: Management Server sluggish

Retired Member — Mon, 25 Jan 2016 21:32:23 GMT

There is no real fix or solution, the problem is these 40xx series have 1GB management plane memory.

See the swap usages there are extreme compared the the real installed memory. .

It is the same problem the PA500 faced, but for the PA500 is a memory upgrade kit available.

And "new" PA500 come with 2 GB standard.

The memory for the PA500 is standard "pc" memory.

As mentioned before for the PA500 is a upgrade kit, for the 40xx series there is not.

but i know some people that upgraded a 4020 lab FW to 2GB with normal "pc" memory.

And it just works fine, but warrenty void en no support.

topic Management Server sluggish in General Topics

Management Server sluggish

Re: Management Server sluggish

Re: Management Server sluggish