Hi,
I'm also experiencing high CPU usage after enabling RPKI validation in FRR.
I'm running version 9.0.1 on Ubuntu 20.04.6 LTS.
Additionally, I'm having trouble stopping the RPKI validation using
`vtysh`.
Is there any known issue with this version, or recommended steps to
properly reset or disable RPKI?
Any suggestions would be appreciated.
Best regards,
Celsa Sánchez
El lun, 25 nov 2024 a las 5:43, Darshan Kowlaser via frog (<
frog(a)lists.frrouting.org>) escribió:
>
>
>
> ---------- Forwarded message ----------
> From: Darshan Kowlaser <darshan(a)darshankowlaser.com>
> To: frog(a)lists.frrouting.org
> Cc:
> Bcc:
> Date: Mon, 25 Nov 2024 10:22:11 +0200
> Subject: RPKI process efficiency
> Hello
>
> I'm experiencing high CPU usage on my RPKI process which is very odd. To
> elaborate, I have two vyos boxes that have similar configuration for the
> edge just handling BGP and OSPF to the core. On one of the routers I have
> excessively high CPU usage and when checking the processes RPKI sits very
> high compared to the other router.
>
> FRR Version:
> `*FRRouting 9.1.1 (za-ct-ter-dc-rt-edge-01) on Linux(6.6.43-amd64-vyos).*
>
>
> *Copyright 1996-2005 Kunihiro Ishiguro, et al.configured with:
> '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include'
> '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info'
> '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking'
> '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu'
> '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode'
> '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr'
> '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager'
> '--libdir=/usr/lib/x86_64-linux-gnu/frr'
> '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules'
> '--disable-dependency-tracking' '--enable-rpki' '--enable-scripting'
> '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html'
> '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq'
> '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256'
> '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty'
> '--enable-configfile-mask=0640' '--enable-logfile-mask=0640'
> 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'*
> `
>
> Here is my RPKI configuration on the router experiencing high process CPU
> usage :
>
> In Vtysh:
> `*rpki*
>
> * rpki cache cpt-rpki-validator-01.example.xyz
> <http://cpt-rpki-validator-01.example.xyz> 3323 preference 1 rpki cache
> cpt-rpki-validator-02.example.xyz
> <http://cpt-rpki-validator-02.example.xyz> 8282 preference 2*
> `
>
> In VyOS:
> `*set protocols rpki cache cpt-rpki-validator-01.example.xyz
> <http://cpt-rpki-validator-01.example.xyz> port '3323'*
>
>
>
> * set protocols rpki cache cpt-rpki-validator-01.example.xyz
> <http://cpt-rpki-validator-01.example.xyz> preference '1' set protocols
> rpki cache cpt-rpki-validator-02.example.xyz
> <http://cpt-rpki-validator-02.example.xyz> port '8282' set protocols rpki
> cache cpt-rpki-validator-02.example.xyz
> <http://cpt-rpki-validator-02.example.xyz> preference '2'*
> * set protocols rpki polling-period '3600*
> `
>
> The only thing different on the other box is that the server preference is
> inverted. RPKI servers are running routinator and stayRTR, the router with
> the issue preferences routinator. See below showing that it is the most
> intensive process on the CPU :
>
> [image: image.png]
>
> Would be greatly appreciated if anyone could advise.
>
>
>
> ---------- Forwarded message ----------
> From: Darshan Kowlaser via frog <frog(a)lists.frrouting.org>
> To: frog(a)lists.frrouting.org
> Cc:
> Bcc:
> Date: Mon, 25 Nov 2024 10:22:11 +0200
> Subject: [FROG] RPKI process efficiency
> _______________________________________________
> frog mailing list
> frog(a)lists.frrouting.org
> https://lists.frrouting.org/listinfo/frog
>
Hi, currently I'm using 9.3 and 10.2 versions with a custom patch including
the "disable-establish-hello" feature (
https://github.com/FRRouting/frr/pull/18417)
Is it reasonable/possible to backport the LDPD "disable-establish-hello"
feature to the older FRR version? If needed, I can provide the patch.
