High CPU usage on one CPU core when the number of Remote Access users is high

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk165853
Technical Level
Product	IPSec VPN, Endpoint Security VPN, Security Gateway, VSX
Version	R80.20, R80.30, R80.40
OS	Gaia
Date Created	18-Mar-2020
Last Modified	03-Aug-2020

Symptoms

High CPU usage on one CPU core when high number of end users are connected to the network through Remote Access/VPN.
One CPU that is an SND is being utilized while other CPUs are not.
A significant amount of the traffic is processed through medium path.
cphwd_q_init_ke is causing high CPU when SecureXL is enabled in an environment with a lot of VPN traffic.

Cause

Each VPN connection is handled by specific CPU, the SND allocates the connection to the relevant CPU based on the tunnel.
The new behavior is to enable the option to allocate the connection to relevant CPU based on the connection itself without the need of the tunnel.

Solution

Note: To view this solution you need to Sign In .