SRX

Hello everybody!

I have HA cluster srx-240h2 with 12.1X44-D20.3 Junos.

Now I have issue with log messages: "maxproc limit exceeded by uid 0, please see tuning(7) and login.conf(5)" after that I lose ssh control and traffic not goes throught the device. 

It seems this matter KB21548 , but is says that this issue has been resolved in 10.4R6,11.1R4, 11.2R1 ,11.4R1 and onwards releases.

Could anybody help me?

Hello ,

This issue is addressed in 12.1X44-D45 version . The sshd key issue is also resolved in this version .

Hello ,

As per some of the PR , its states that the issue is seen in 12.1X44-D20 also and its not seen in latest and recommended release 12.1X44-D45 . 

It persists in even the much later versions >=D

@1234567> show version
node0:
--------------------------------------------------------------------------
Hostname: 1234567
Model: srx240h2
JUNOS Software Release [12.3X48-D75.4]

node1:
--------------------------------------------------------------------------
Hostname: 7654321
Model: srx240h2
JUNOS Software Release [12.3X48-D75.4]

{primary:node0}
@1234567> show log messages | last 10
Jun 19 16:23:42 1234567 /kernel: maxproc limit exceeded by uid 65534, please see tuning(7) and login.conf(5).
Jun 19 16:23:42 1234567 /kernel: Process with Most Children- 0:swapper - Children - 64
Jun 19 16:23:42 1234567 /kernel: maxproc limit exceeded by uid 65534, please see tuning(7) and login.conf(5).
Jun 19 16:23:43 1234567 httpd[94378]: httpd error: : httpd: Error: start: can't fork a new process to run /html/index.php, errno 35
Jun 19 16:24:05 1234567 inetd[1601]: accept (for ssh): Software caused connection abort
Jun 19 16:24:30 1234567 /kernel: nearing maxproc limit by uid 0, please see tuning(7) and login.conf(5).
Jun 19 16:24:30 1234567 /kernel: Process with Most Children- 0:swapper - Children - 64
Jun 19 16:24:36 1234567 /kernel: nearing maxproc limit by uid 0, please see tuning(7) and login.conf(5).
Jun 19 16:24:36 1234567 /kernel: Process with Most Children- 0:swapper - Children - 64

{primary:node0}
@1234567> show system processes extensive | match swapper
0 root 1 -8 0 0K 0K WAIT 0 0:00 0.00% swapper
0 root 1 -8 0 0K 0K WAIT 0 0:00 0.00% swapper

Hi Purplezorz,

By default, on the SRX240H2 maximum processes is set to 276.

jtac-SRX240H2% sysctl -a | grep kern.max
kern.maxvnodes: 64996
kern.maxproc: 276 <<<<
kern.maxfiles: 2500
kern.maxfilesperproc: 2500
kern.maxprocperuid: 248
kern.maxdsiz: 671088640
kern.maxusers: 16

So when this is exceeded you start to see the error messages in the logs indication the process that has probably causing it.

In this case, it seems to be the swapper process based on the logs messages seen. Ways to resolve this would probably be either gracefully restarting the SRXs one at a time or killing this process which should restart automatically.

In either ways, if these SRXs are in production please plan to do so in a MW to avoid any downtime.

If the issue persists, then please open a JTAC case for further investigation.

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!

Regards,

HS