Description | This article describes how to identify the root cause of an hasync high CPU utilization. |
Scope | FortiGate v6.x and v7.x. |
Solution |
Let's assume a network administrator identifies that his device has high CPU usage on one of its CPU cores.
By issuing the command 'diagnose sys top 1 20 6' it has been identified that hasync is consuming the majority of the CPU cycles:
diagnose sys top 1 20 6 Run Time: 2 days, 13 hours and 23 minutes
While the issue is happening, it is recommended to issue the command 'diag sys ha hasync-stats most-recent' a couple of times.
The output of the particular command was omitted for easier reading.
diag sys ha hasync-stats most-recent
hasync-obj=1(fdb):
diag sys ha hasync-stats most-recent
hasync-obj=1(fdb):
The output indicates the modules and the submodules, respectively, which mainly occupy the hasync CPU time.
By that time, the majority of the CPU cycle consumers were:
By examining the submodules it is possible to observe the 'fdb_handler' total call times are exponentially increasing between the two iterations of the commands so to calculate the amount of times which the particular submodule is being called, it is necessary to perform the below calculation:
(2284104509 - 2283433136) / 5 = 134,274.
Thus, from the above result, the conclusion is that hasync tries to sync 134k/s of forwarding database information to the secondary unit which can result from abnormal L2 traffic or a loop in the L2 infrastructure. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.