This article describes how to increase dnsproxy worker in FortiProxy.
Scope
FortiProxy.
Solution
When editing configuration dnsproxy might consume high CPU resources because it will handle the config-change task and the DNS resolver task. Especially if there are a lot of FDQN address objects.
The dnsproxy worker can be increased by:
config system global set dnsproxy-worker-count <value> --> Enter an integer value from <1> to <255>, the default value is 1. end
When increasing the dnsproxy-worker-count from 1 to 2:
The worker-1 (busy) handles the config-change task.
The worker-2 (idle) handles the DNS-resolve task.
This will mitigate a high CPU issue by load-sharing tasks from 1 worker to other workers.
