01-25-2016 01:25 AM
Hi
Palo alto management server
Problems :
taking very log time to commit
web console taking long time to refresh
below is sytem resource
PAL-1-4020(active-primary)> show system resources
top - 12:08:34 up 145 days, 20:02, 1 user, load average: 9.32, 8.61, 6.46
Tasks: 105 total, 3 running, 102 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.6%us, 2.3%sy, 2.9%ni, 89.6%id, 4.6%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 1034536k total, 951928k used, 82608k free, 12672k buffers
Swap: 2008084k total, 1283336k used, 724748k free, 92760k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9059 30 10 2728 1224 904 S 12 0.1 0:10.60 genindex.sh
2317 20 0 658m 199m 3176 S 4 19.7 1487:05 logrcvr
21924 30 10 2240 952 720 S 4 0.1 0:00.02 top
21945 30 10 28812 768 604 S 2 0.1 0:00.01 sort
1 20 0 1772 504 480 S 0 0.0 1:17.10 init
2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:34.20 migration/0
4 20 0 0 0 0 S 0 0.0 4:09.05 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:34.37 migration/1
6 20 0 0 0 0 S 0 0.0 4:08.61 ksoftirqd/1
7 20 0 0 0 0 R 0 0.0 11:17.36 events/0
8 20 0 0 0 0 S 0 0.0 14:13.50 events/1
9 20 0 0 0 0 S 0 0.0 0:00.01 khelper
14 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
131 20 0 0 0 0 S 0 0.0 0:11.18 sync_supers
133 20 0 0 0 0 S 0 0.0 0:21.79 bdi-default
134 20 0 0 0 0 S 0 0.0 2:01.63 kblockd/0
135 20 0 0 0 0 S 0 0.0 2:09.73 kblockd/1
137 20 0 0 0 0 S 0 0.0 0:00.00 kacpid
138 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_notify
139 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_hotplug
239 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
240 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
241 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
242 20 0 0 0 0 S 0 0.0 0:00.00 ksuspend_usbd
247 20 0 0 0 0 S 0 0.0 0:00.00 khubd
250 20 0 0 0 0 S 0 0.0 0:00.01 kseriod
282 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
283 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
308 20 0 0 0 0 S 0 0.0 119:08.74 kswapd0
309 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
310 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
311 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
483 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
485 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_1
516 20 0 0 0 0 S 0 0.0 0:00.00 kpsmoused
PAL-1-4020(active-primary)> show system resources | match mgmtsrvr
2296 20 0 1387m 256m 3680 S 0 25.4 123:37.64 mgmtsrvr
PAL-1-4020(active-primary)> show system resources | match mgmt
2296 20 0 1387m 253m 3632 S 0 25.1 123:37.69 mgmtsrvr
Palo alto management server
Problems :
taking very log time to commit
web console taking long time to refresh
below is sytem resource
PAL-1-4020(active-primary)> show system resources
top - 12:08:34 up 145 days, 20:02, 1 user, load average: 9.32, 8.61, 6.46
Tasks: 105 total, 3 running, 102 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.6%us, 2.3%sy, 2.9%ni, 89.6%id, 4.6%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 1034536k total, 951928k used, 82608k free, 12672k buffers
Swap: 2008084k total, 1283336k used, 724748k free, 92760k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9059 30 10 2728 1224 904 S 12 0.1 0:10.60 genindex.sh
2317 20 0 658m 199m 3176 S 4 19.7 1487:05 logrcvr
21924 30 10 2240 952 720 S 4 0.1 0:00.02 top
21945 30 10 28812 768 604 S 2 0.1 0:00.01 sort
1 20 0 1772 504 480 S 0 0.0 1:17.10 init
2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:34.20 migration/0
4 20 0 0 0 0 S 0 0.0 4:09.05 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:34.37 migration/1
6 20 0 0 0 0 S 0 0.0 4:08.61 ksoftirqd/1
7 20 0 0 0 0 R 0 0.0 11:17.36 events/0
8 20 0 0 0 0 S 0 0.0 14:13.50 events/1
9 20 0 0 0 0 S 0 0.0 0:00.01 khelper
14 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
131 20 0 0 0 0 S 0 0.0 0:11.18 sync_supers
133 20 0 0 0 0 S 0 0.0 0:21.79 bdi-default
134 20 0 0 0 0 S 0 0.0 2:01.63 kblockd/0
135 20 0 0 0 0 S 0 0.0 2:09.73 kblockd/1
137 20 0 0 0 0 S 0 0.0 0:00.00 kacpid
138 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_notify
139 20 0 0 0 0 S 0 0.0 0:00.00 kacpi_hotplug
239 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
240 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
241 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
242 20 0 0 0 0 S 0 0.0 0:00.00 ksuspend_usbd
247 20 0 0 0 0 S 0 0.0 0:00.00 khubd
250 20 0 0 0 0 S 0 0.0 0:00.01 kseriod
282 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
283 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
308 20 0 0 0 0 S 0 0.0 119:08.74 kswapd0
309 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
310 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
311 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod
483 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
485 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_1
516 20 0 0 0 0 S 0 0.0 0:00.00 kpsmoused
PAL-1-4020(active-primary)> show system resources | match mgmtsrvr
2296 20 0 1387m 256m 3680 S 0 25.4 123:37.64 mgmtsrvr
PAL-1-4020(active-primary)> show system resources | match mgmt
2296 20 0 1387m 253m 3632 S 0 25.1 123:37.69 mgmtsrvr
Thank you
01-25-2016 07:17 AM
Hi Sib,
The management side of the 2000 & 4000 series is notoriously slow (look at the wait time on your cpu!)... I advise taking a look at this article:
Also it has been noted that an update to 7.0.x has improved the commit performance on these devices.
hope this helps,
Ben
01-25-2016 01:28 PM - edited 01-25-2016 01:32 PM
There is no real fix or solution, the problem is these 40xx series have 1GB management plane memory.
See the swap usages there are extreme compared the the real installed memory. .
It is the same problem the PA500 faced, but for the PA500 is a memory upgrade kit available.
And "new" PA500 come with 2 GB standard.
The memory for the PA500 is standard "pc" memory.
As mentioned before for the PA500 is a upgrade kit, for the 40xx series there is not.
but i know some people that upgraded a 4020 lab FW to 2GB with normal "pc" memory.
And it just works fine, but warrenty void en no support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
