SRX

Expand all | Collapse all

srx-240h2 HA cluster maxproc limit by uid 0

  • 1.  srx-240h2 HA cluster maxproc limit by uid 0

    Posted 07-10-2015 01:57

    Hello everybody!

    I have HA cluster srx-240h2 with 12.1X44-D20.3 Junos.

    Now I have issue with log messages: "maxproc limit exceeded by uid 0, please see tuning(7) and login.conf(5)" after that I lose ssh control and traffic not goes throught the device. 

    It seems this matter KB21548 , but is says that this issue has been resolved in 10.4R6,11.1R4, 11.2R1 ,11.4R1 and onwards releases.

    Could anybody help me?



  • 2.  RE: srx-240h2 HA cluster maxproc limit by uid 0

     
    Posted 07-10-2015 02:10

    Hello ,

     

    This issue is addressed in 12.1X44-D45 version . The sshd key issue is also resolved in this version .



  • 3.  RE: srx-240h2 HA cluster maxproc limit by uid 0

     
    Posted 07-10-2015 02:17

    Hello ,

     

    As per some of the PR , its states that the issue is seen in 12.1X44-D20 also and its not seen in latest and recommended release 12.1X44-D45 . 

     

     

     



  • 4.  RE: srx-240h2 HA cluster maxproc limit by uid 0

    Posted 06-19-2019 09:29

    It persists in even the much later versions >=D

     

    @1234567> show version
    node0:
    --------------------------------------------------------------------------
    Hostname: 1234567
    Model: srx240h2
    JUNOS Software Release [12.3X48-D75.4]

    node1:
    --------------------------------------------------------------------------
    Hostname: 7654321
    Model: srx240h2
    JUNOS Software Release [12.3X48-D75.4]

    {primary:node0}
    @1234567> show log messages | last 10
    Jun 19 16:23:42 1234567 /kernel: maxproc limit exceeded by uid 65534, please see tuning(7) and login.conf(5).
    Jun 19 16:23:42 1234567 /kernel: Process with Most Children- 0:swapper - Children - 64
    Jun 19 16:23:42 1234567 /kernel: maxproc limit exceeded by uid 65534, please see tuning(7) and login.conf(5).
    Jun 19 16:23:43 1234567 httpd[94378]: httpd error: : httpd: Error: start: can't fork a new process to run /html/index.php, errno 35
    Jun 19 16:24:05 1234567 inetd[1601]: accept (for ssh): Software caused connection abort
    Jun 19 16:24:30 1234567 /kernel: nearing maxproc limit by uid 0, please see tuning(7) and login.conf(5).
    Jun 19 16:24:30 1234567 /kernel: Process with Most Children- 0:swapper - Children - 64
    Jun 19 16:24:36 1234567 /kernel: nearing maxproc limit by uid 0, please see tuning(7) and login.conf(5).
    Jun 19 16:24:36 1234567 /kernel: Process with Most Children- 0:swapper - Children - 64

    {primary:node0}
    @1234567> show system processes extensive | match swapper
    0 root 1 -8 0 0K 0K WAIT 0 0:00 0.00% swapper
    0 root 1 -8 0 0K 0K WAIT 0 0:00 0.00% swapper



  • 5.  RE: srx-240h2 HA cluster maxproc limit by uid 0

    Posted 06-19-2019 11:30

    Hi Purplezorz,

     

    By default, on the SRX240H2 maximum processes is set to 276.

     

    jtac-SRX240H2% sysctl -a | grep kern.max
    kern.maxvnodes: 64996
    kern.maxproc: 276 <<<<
    kern.maxfiles: 2500
    kern.maxfilesperproc: 2500
    kern.maxprocperuid: 248
    kern.maxdsiz: 671088640
    kern.maxusers: 16

     

    So when this is exceeded you start to see the error messages in the logs indication the process that has probably causing it.

     

    In this case, it seems to be the swapper process based on the logs messages seen. Ways to resolve this would probably be either gracefully restarting the SRXs one at a time or killing this process which should restart automatically.

     

    In either ways, if these SRXs are in production please plan to do so in a MW to avoid any downtime.

     

    If the issue persists, then please open a JTAC case for further investigation.

     

    Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!

     

    Regards,

    HS