Community discussions

MikroTik App
 
ciko
just joined
Topic Author
Posts: 2
Joined: Thu Apr 09, 2020 3:57 pm

high "ssl" CPU usage on v7.21

Sat Apr 30, 2022 1:47 am

Hi All!

I am really happy with how v7 turned out for me. Migration was painless overall and apart from a generally slightly higher cpu usage I have no negative impact.
What i have been noticing however on my RB4011iGS+ on 7.21 (and also on previous 7 versions) is that i get a quite significant (30+%) CPU usage out of the process "SSL". Can anybody explain what it is and what I should have a look at in order to reduce this? The CPU usage seems not to be dependent on load or VPNs as i tried turning them off as well.

Thanks + best regards

Michael
[admin@MikroTik] /tool> profile duration=10s cpu=all
Columns: NAME, CPU, USAGE
NAME          CPU  USAGE
dns             0  0.5% 
networking      0  0%   
management      0  0%   
ssl             0  33.5%
cpu0               34%  
ethernet        1  1%   
dns             1  0%   
firewall        1  0%   
networking      1  0.5% 
management      1  0%   
ssl             1  0%   
bridging        1  0%   
unclassified    1  0.5% 
cpu1               2%   
ethernet        2  0%   
firewall        2  0%   
networking      2  0.5% 
winbox          2  0%   
management      2  0%   
routing         2  0%   
ssl             2  3.5% 
unclassified    2  0%   
cpu2               4%   
ethernet        3  0.5% 
networking      3  0%   
management      3  1.5% 
routing         3  0%   
ssl             3  0%   
cpu3               2%   
 
tangent
Forum Guru
Forum Guru
Posts: 1331
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: high "ssl" CPU usage on v7.21  [SOLVED]

Sat Apr 30, 2022 5:37 am

OpenVPN or SSTP would be my guess. Show your configuration.
 
ciko
just joined
Topic Author
Posts: 2
Joined: Thu Apr 09, 2020 3:57 pm

Re: high "ssl" CPU usage on v7.21

Wed May 18, 2022 10:53 pm

Hi!

SSTP was the right guess. Although nothing was actually using it, I had a HA-Proxy instance in front of it having check and check-ssl options enabled. That caused the entire load on the ssl process. After removing that the ssl process load is down to 0

Thanks again

best regards

Michael

Who is online

Users browsing this forum: No registered users and 19 guests