Hi, I'm also experiencing high CPU usage after enabling RPKI validation in FRR. I'm running version 9.0.1 on Ubuntu 20.04.6 LTS. Additionally, I'm having trouble stopping the RPKI validation using `vtysh`. Is there any known issue with this version, or recommended steps to properly reset or disable RPKI? Any suggestions would be appreciated. Best regards, Celsa Sánchez El lun, 25 nov 2024 a las 5:43, Darshan Kowlaser via frog (< frog@lists.frrouting.org>) escribió:
---------- Forwarded message ---------- From: Darshan Kowlaser <darshan@darshankowlaser.com> To: frog@lists.frrouting.org Cc: Bcc: Date: Mon, 25 Nov 2024 10:22:11 +0200 Subject: RPKI process efficiency Hello
I'm experiencing high CPU usage on my RPKI process which is very odd. To elaborate, I have two vyos boxes that have similar configuration for the edge just handling BGP and OSPF to the core. On one of the routers I have excessively high CPU usage and when checking the processes RPKI sits very high compared to the other router.
FRR Version: `*FRRouting 9.1.1 (za-ct-ter-dc-rt-edge-01) on Linux(6.6.43-amd64-vyos).*
*Copyright 1996-2005 Kunihiro Ishiguro, et al.configured with: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' '--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--enable-scripting' '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'* `
Here is my RPKI configuration on the router experiencing high process CPU usage :
In Vtysh: `*rpki*
* rpki cache cpt-rpki-validator-01.example.xyz <http://cpt-rpki-validator-01.example.xyz> 3323 preference 1 rpki cache cpt-rpki-validator-02.example.xyz <http://cpt-rpki-validator-02.example.xyz> 8282 preference 2* `
In VyOS: `*set protocols rpki cache cpt-rpki-validator-01.example.xyz <http://cpt-rpki-validator-01.example.xyz> port '3323'*
* set protocols rpki cache cpt-rpki-validator-01.example.xyz <http://cpt-rpki-validator-01.example.xyz> preference '1' set protocols rpki cache cpt-rpki-validator-02.example.xyz <http://cpt-rpki-validator-02.example.xyz> port '8282' set protocols rpki cache cpt-rpki-validator-02.example.xyz <http://cpt-rpki-validator-02.example.xyz> preference '2'* * set protocols rpki polling-period '3600* `
The only thing different on the other box is that the server preference is inverted. RPKI servers are running routinator and stayRTR, the router with the issue preferences routinator. See below showing that it is the most intensive process on the CPU :
[image: image.png]
Would be greatly appreciated if anyone could advise.
---------- Forwarded message ---------- From: Darshan Kowlaser via frog <frog@lists.frrouting.org> To: frog@lists.frrouting.org Cc: Bcc: Date: Mon, 25 Nov 2024 10:22:11 +0200 Subject: [FROG] RPKI process efficiency _______________________________________________ frog mailing list frog@lists.frrouting.org https://lists.frrouting.org/listinfo/frog
