[RADIATOR] memory leaks

Jan Tomasek jan at tomasek.cz
Thu Dec 19 08:26:03 UTC 2019


Hi Heikki,

On 12/16/19 10:37 AM, Heikki Vatiainen wrote:
> You mentioned you did not monitor memory consumption before: Did you
> restart processes daily already then?

No, I configured periodic restarts at 4. 12., But I'm not sure if I will
notice Radiator crash because of Out of memory Kill. I'm running HA
cluster and it will re-start it immediately.

>> The automatic restart is scheduled at 6:59. That is the lowest value in
>> the graph (3.18GB), later every 2nd hour in 25minute memory consumption
>> jumps by ~1.5GB, detail:
>>      http://tomasek.cz/stuff/memusage_radiusd-day.png
>>
>> I do not think it is related to user activity as the graph seems to jump
>> by constant step every 2h. CPU load graphs:
>>      http://tomasek.cz/stuff/cpuload_radiusd.png
>> top user activity is at 12.
> 
> How do you refresh CRL files? Would this be something that happens every
> 2 hours?

Yes, CRL refresh is done by script getcrls
http://tools.cesnet-ca.cz/getcrl/ it's scheduled at 29 minute every
second hour - I didn't realize this when I was writing the previous email.

> How does it look? Anything periodic looking happening there?

http://www.tomasek.cz/stuff/memusage_radiusd-2019-12-19.png it is same
for VIRT/RES memory.

My system is configured to check CRLs:

 244b5494.0 -> DigiCert_High_Assurance_EV_Root_CA.pem
 4d12be1d.0 -> CESNET_CA_3.pem
 84c78b97.0 -> CESNET_CA_4.pem
 a580eeb3.0 -> eduroamCA.pem
 b1159c4c.0 -> DigiCert_Assured_ID_Root_CA.pem
 c158e258.0 -> eduPKI_CA_G_01.pem
 d919ffd0.0 -> TERENA_SSL_CA_3.pem
 dd5d4ea8.0 -> TERENA_SSL_High_Assurance_CA_3.pem
 e523eeaa.0 -> TERENA_eScience_SSL_CA_3.pem
 f4401b90.0 -> CESNET_CA_Root.pem

Only two have significant size:

-rw-r--r-- 1 root root 482162 Dec 19 08:29 d919ffd0.r0
-rw-r--r-- 1 root root  58276 Dec 19 08:29 dd5d4ea8.r0

They are http://crl3.digicert.com/TERENASSLCA3.crl and
http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl

Best regards
-- 
-----------------------
Jan Tomasek aka Semik
http://www.tomasek.cz/


More information about the radiator mailing list