first

md/OMPUB-1194.md

@@ -0,0 +1,62 @@
+# 南京环境：TSGX设备Firewall占用内存高，频繁触发OOM
+
+| ID | Creation Date | Assignee | Status |
+|----|----------------|----------|--------|
+| OMPUB-1194 | 2024-03-24T22:03:29.000+0800 | 刘学利 | 已解决 |
+
+
+---
+
+* 时间
+ ** 2024-03-25
+ * 故障描述
+ ** 现象：Firewall启动后占用内存上升，直至触发OOM，可持续运行的时间从30分钟到1小时不等
+ ** 范围：全部已部署的TSGX设备（8台）
+ ** 原因：初步排查为dns业务命中后的日志缓存逻辑，具体原因待定位
+ * 临时解决方案
+ ** 关闭已部署的TSGX设备上的DNS decoder
+ *** tsg-os-cli关闭**liuxueli** commented on *2024-03-25T00:15:05.217+0800*:
+
+* 问题原因：dns命中策略后缓存transaction较多导致内存占用极高
+ * 12.3已hoxfix，运行一晚上观察内存使用情况。
+
+
+
+---
+
+**gitlab** commented on *2024-03-25T10:44:23.999+0800*:
+
+[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/firewall/-/commit/03b7f9b002825ace6ec781fd1727bf76c4b10fc9] of [TSG Appliance / firewall|https://git.mesalab.cn/tango/firewall] on branch [bugfix-memory-high-usage-OMPUB-1194|https://git.mesalab.cn/tango/firewall/-/tree/bugfix-memory-high-usage-OMPUB-1194]:{quote}OMPUB-1194: Only cache transactions until the end of the stream when the deny rule is hit{quote}
+
+
+
+---
+
+**gitlab** commented on *2024-03-25T15:15:31.804+0800*:
+
+[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/firewall/-/merge_requests/194] of [TSG Appliance / firewall|https://git.mesalab.cn/tango/firewall] on branch [bugfix-memory-high-usage-OMPUB-1194|https://git.mesalab.cn/tango/firewall/-/tree/bugfix-memory-high-usage-OMPUB-1194]:{quote}Resolve OMPUB-1194 "Bugfix memory high usage "{quote}
+
+
+
+---
+
+**gitlab** commented on *2024-03-25T15:16:20.742+0800*:
+
+[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/firewall/-/merge_requests/195] of [TSG Appliance / firewall|https://git.mesalab.cn/tango/firewall] on branch [bugfix-memory-high-usage-OMPUB-1194|https://git.mesalab.cn/tango/firewall/-/tree/bugfix-memory-high-usage-OMPUB-1194]:{quote}Resolve OMPUB-1194 "Bugfix memory high usage "{quote}
+
+
+
+---
+
+**gitlab** commented on *2024-03-25T15:34:07.949+0800*:
+
+[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/firewall/-/commit/c31108f7622b0f7dd7d520b9e5f738d82c494a47] of [TSG Appliance / firewall|https://git.mesalab.cn/tango/firewall]:{quote}OMPUB-1194: Only cache transactions until the end of the stream when the deny rule is hit{quote}
+
+
+
+---
+
+
+
+## Attachments
+