Management Server sluggish

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Management Server sluggish

L4 Transporter

 

 

Hi

 

Palo alto management server
Problems :
taking very log time to commit
web console taking long time to refresh

below is sytem resource
PAL-1-4020(active-primary)> show system resources

top - 12:08:34 up 145 days, 20:02, 1 user, load average: 9.32, 8.61, 6.46
Tasks: 105 total, 3 running, 102 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.6%us, 2.3%sy, 2.9%ni, 89.6%id, 4.6%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 1034536k total, 951928k used, 82608k free, 12672k buffers
Swap: 2008084k total, 1283336k used, 724748k free, 92760k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9059 30 10 2728 1224 904 S 12 0.1 0:10.60 genindex.sh
2317 20 0 658m 199m 3176 S 4 19.7 1487:05 logrcvr
21924 30 10 2240 952 720 S 4 0.1 0:00.02 top
21945 30 10 28812 768 604 S 2 0.1 0:00.01 sort
1 20 0 1772 504 480 S 0 0.0 1:17.10 init
2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:34.20 migration/0
4 20 0 0 0 0 S 0 0.0 4:09.05 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:34.37 migration/1
6 20 0 0 0 0 S 0 0.0 4:08.61 ksoftirqd/1
7 20 0 0 0 0 R 0 0.0 11:17.36 events/0
8 20 0 0 0 0 S 0 0.0 14:13.50 events/1
9 20 0 0 0 0 S 0 0.0 0:00.01 khelper
14 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
131 20 0 0 0 0 S 0 0.0 0:11.18 sync_supers
133 20 0 0 0 0 S 0 0.0 0:21.79 bdi-default
134 20 0 0 0 0 S 0 0.0 2:01.63 kblockd/0
135 20 0 0 0 0 S 0 0.0 2:09.73 kblockd/1
137 20 0 0 0 0 S 0 0.0 0:00.00 kacpid
138 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_notify
139 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_hotplug
239 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
240 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
241 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
242 20 0 0 0 0 S 0 0.0 0:00.00 ksuspend_usbd
247 20 0 0 0 0 S 0 0.0 0:00.00 khubd
250 20 0 0 0 0 S 0 0.0 0:00.01 kseriod
282 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
283 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
308 20 0 0 0 0 S 0 0.0 119:08.74 kswapd0
309 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
310 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
311 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
483 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
485 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_1
516 20 0 0 0 0 S 0 0.0 0:00.00 kpsmoused


PAL-1-4020(active-primary)> show system resources | match mgmtsrvr
2296 20 0 1387m 256m 3680 S 0 25.4 123:37.64 mgmtsrvr
PAL-1-4020(active-primary)> show system resources | match mgmt
2296 20 0 1387m 253m 3632 S 0 25.1 123:37.69 mgmtsrvr

 

Palo alto management server
Problems :
taking very log time to commit
web console taking long time to refresh

below is sytem resource
PAL-1-4020(active-primary)> show system resources

top - 12:08:34 up 145 days, 20:02, 1 user, load average: 9.32, 8.61, 6.46
Tasks: 105 total, 3 running, 102 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.6%us, 2.3%sy, 2.9%ni, 89.6%id, 4.6%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 1034536k total, 951928k used, 82608k free, 12672k buffers
Swap: 2008084k total, 1283336k used, 724748k free, 92760k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9059 30 10 2728 1224 904 S 12 0.1 0:10.60 genindex.sh
2317 20 0 658m 199m 3176 S 4 19.7 1487:05 logrcvr
21924 30 10 2240 952 720 S 4 0.1 0:00.02 top
21945 30 10 28812 768 604 S 2 0.1 0:00.01 sort
1 20 0 1772 504 480 S 0 0.0 1:17.10 init
2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:34.20 migration/0
4 20 0 0 0 0 S 0 0.0 4:09.05 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:34.37 migration/1
6 20 0 0 0 0 S 0 0.0 4:08.61 ksoftirqd/1
7 20 0 0 0 0 R 0 0.0 11:17.36 events/0
8 20 0 0 0 0 S 0 0.0 14:13.50 events/1
9 20 0 0 0 0 S 0 0.0 0:00.01 khelper
14 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
131 20 0 0 0 0 S 0 0.0 0:11.18 sync_supers
133 20 0 0 0 0 S 0 0.0 0:21.79 bdi-default
134 20 0 0 0 0 S 0 0.0 2:01.63 kblockd/0
135 20 0 0 0 0 S 0 0.0 2:09.73 kblockd/1
137 20 0 0 0 0 S 0 0.0 0:00.00 kacpid
138 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_notify
139 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_hotplug
239 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
240 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
241 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
242 20 0 0 0 0 S 0 0.0 0:00.00 ksuspend_usbd
247 20 0 0 0 0 S 0 0.0 0:00.00 khubd
250 20 0 0 0 0 S 0 0.0 0:00.01 kseriod
282 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
283 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
308 20 0 0 0 0 S 0 0.0 119:08.74 kswapd0
309 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
310 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
311 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
483 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
485 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_1
516 20 0 0 0 0 S 0 0.0 0:00.00 kpsmoused


PAL-1-4020(active-primary)> show system resources | match mgmtsrvr
2296 20 0 1387m 256m 3680 S 0 25.4 123:37.64 mgmtsrvr
PAL-1-4020(active-primary)> show system resources | match mgmt
2296 20 0 1387m 253m 3632 S 0 25.1 123:37.69 mgmtsrvr

 

Thank you 

2 REPLIES 2

L4 Transporter

Hi Sib,

 

The management side of the 2000 & 4000 series is notoriously slow (look at the wait time on your cpu!)... I advise taking a look at this article:

 

https://live.paloaltonetworks.com/t5/Management-Articles/Steps-to-Reduce-MP-CPU-on-PA-2000-Series-an...

 

Also it has been noted that an update to 7.0.x has improved the commit performance on these devices.

 

hope this helps,

Ben

L3 Networker

There is no real fix or solution, the problem is these 40xx series have 1GB management plane memory.

See the swap usages there are extreme compared the the real installed memory. .

It is the same problem the PA500 faced, but for the PA500 is a memory upgrade kit available.

And "new" PA500 come with 2 GB standard.

 

The memory for the PA500 is standard  "pc" memory.

 As mentioned before for the PA500 is a upgrade kit, for the 40xx series there is not.

but i know some people that upgraded a 4020 lab FW to 2GB with normal "pc" memory.

And it just works fine, but warrenty void en no support.

  • 2002 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!