SRX

I've got a brand new SRX650 running JunOS 9.5r2.7. The only interface that is even plugged in is for management traffic, and really isn't doing all that much.

The web interface is showing 93% CPU utilization!

Thinking that this may have been an interface bug, I went to the CLI, and  found that flowd_octeon_hm is using 1026% CPU. Needless to say, I'm a little leery of putting this system into production...

Is this something that I should be worried about?

Thanks!

This is a known issue. The CPU reporting is not accurate on the SRX branch product line. We have a knowledgebase article in the works for this. But basically some key differences between SRX branch products and other JUNOS products is that the SRX product uses multi-core processors which make using something like "top" difficult. So top is basically cumulative and the reason why it can look like it exceeds 100%. Also the SRX branch system runs CPU in more or less continuous cycle in a tight loop without interrupts. So it may appear that the CPU is always busy even though really it is not processing traffic.

We are aware of the concerns that this could cause and are working on better solutions to more accurately reflect real CPU utilization

-Richard

That's kind of what I thought was going on. Nice to have it confirmed, though.

Thanks!

I am having the same issue  ( albeit not an actual issue )

I was not able to find a kb article on it.

Do you know how this is coming along or being addressed.

-sean

Hello,

I'm facing the same issue, 1056.74% flowd_octeon_hm. Also i have 2 SRX650 in cluster.

I have to say that the web is pretty slow.

What i have noticed is that after you log in and log OUT from the web, the user cpu remains at 35-40% when you type :

   "show chassis routing-engine" .

But if you Gracefully start the chassis control : restart gracefully chassis-control   , then we have user cpu util around 5 % and the cli is even faster. After 1 min it returns to 35% of course.

I'm running 10.0R1.8 .

Hope to have the fix on the next rel and to have faster web responces, compared to the ssg family.

Hello!

Could you, please, give link to that KB?

I would be very appreciate.

Just hoping for maybe a better way to do find my utilization percentage on an SRX650.

Check KB14743

Try using top -H. This shows the processes running on each individual thread.

Hi,

I'm experiencing this problem on SRX650 Junos release 10.0R1.8. In addition i'm also experiencing many difficulties using the the WEB UI and getting many timeouts and Access Error: 503 "Service Unavailable" errors. This is practically making the WEB UI on the SRX unusable. Has this knowledgebase article been published as yet?

Thanks.

The Web UI in 10.0r1 is just about unusable. 10.0r3 and then 10.0r4 were the SRX stability releases, I'd definitely consider doing that point upgrade in your case.

10.2r2 improves stability further and adds Web UI features. It also appears to have caused the Web UI to more or less randomly move security policy order, which makes it unusable again for day-to-day policy work.

WIP on the UI, clearly.

Is there this  problem on SRX running junos 12.1x44? because of cpu usage of my firewall sometimes is very high.