mirror of
https://github.com/cbeuw/Cloak.git
synced 2026-04-26 13:05:56 +03:00
[GH-ISSUE #34] How to reduce cpu load. #26
Labels
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/Cloak#26
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @alexkatanda on GitHub (Jun 23, 2019).
Original GitHub issue: https://github.com/cbeuw/Cloak/issues/34
Hello,
I installed ck-server with shadowsocks-libev3.2.5 on ubuntu18.10.
ck-server's cpu load is very high than ss-server.
ck-server's cpu usage is about 58%. ss-server's cpu usage is about 18%.
Why is ck-server's cpu load very high?
How to reduce ck-server's cpu load?
@malikshi commented on GitHub (Jun 24, 2019):
@alexkatanda
hi @cbeuw this one cloak issue cpu load so vking high sir, i just found out and tested it, if users has high upload traffic it will load more cpu,
@cbeuw commented on GitHub (Jun 24, 2019):
Please provide some environment information, like the CPU architecture and the version of cloak you are using.
How many sessions are established when this happens? Is there any trigger or does it happen randomly or from the very beginning?
@malikshi commented on GitHub (Jun 24, 2019):
even when i am try to speedtest, see cpu load,
here my spec,
CPU model : Virtual CPU 523cbcdd6ca4
Number of cores : 1
CPU frequency : 2399.996 MHz
Total size of Disk : 25.0 GB (5.7 GB Used)
Total amount of Mem : 985 MB (336 MB Used)
Total amount of Swap : 2047 MB (0 MB Used)
System uptime : 0 days, 1 hour 50 min
Load average : 0.07, 0.08, 0.03
OS : Ubuntu 18.04.2 LTS
Arch : x86_64 (64 Bit)
Kernel : 4.18.0-24-generic
i didn't share this server to anyone
@HirbodBehnam commented on GitHub (Jun 26, 2019):
Hello
Things are better in my server:
As you can see, ck-server and ss-server are using about 33% of CPU with 120Mbit/s. (Those numbers in htop are out of 200%)
Here is my CPU info on my server
processor : 0
vendor_id : AuthenticAMD
cpu family : 23
model : 1
model name : AMD Ryzen 7 PRO 1700X Eight-Core Processor
stepping : 1
microcode : 0x8001137
cpu MHz : 3399.999
cache size : 512 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 2
apicid : 0
initial apicid : 0
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm cons tant_tsc rep_good nopl tsc_reliable nonstop_tsc cpuid extd_apicid pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx hypervisor lahf_lm extap ic abm sse4a misalignsse 3dnowprefetch osvw cpb ssbd vmmcall arat
bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 spe c_store_bypass
bogomips : 6799.99
TLB size : 2560 4K pages
clflush size : 64
cache_alignment : 64
address sizes : 40 bits physical, 48 bits virtual
power management:
processor : 1
vendor_id : AuthenticAMD
cpu family : 23
model : 1
model name : AMD Ryzen 7 PRO 1700X Eight-Core Processor
stepping : 1
microcode : 0x8001137
cpu MHz : 3399.999
cache size : 512 KB
physical id : 0
siblings : 2
core id : 1
cpu cores : 2
apicid : 1
initial apicid : 1
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm cons tant_tsc rep_good nopl tsc_reliable nonstop_tsc cpuid extd_apicid pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx hypervisor lahf_lm extap ic abm sse4a misalignsse 3dnowprefetch osvw cpb ssbd vmmcall arat
bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 spe c_store_bypass
bogomips : 6799.99
TLB size : 2560 4K pages
clflush size : 64
cache_alignment : 64
address sizes : 40 bits physical, 48 bits virtual
power management:
One thing that I don't know if it's important or not, is that my server's CPU has
aesflag. You can test that with this command:If it prints anything you server's CPU does support AES-NI.
Also the encryption algorithm for shadowsocks is
aes-128-gcm@malikshi commented on GitHub (Jun 27, 2019):
Are you running in pc? It's fuckin good server.
Can you try use ss-server -v -u -c path to ss server config.
@HirbodBehnam commented on GitHub (Jun 27, 2019):
No both are servers. Client is from Eonix, KVM Virtualization, 1 Core @ 2100 MHz, 512 MB Ram and no AES-NI support.
And what's the matter with UDP relay and verbose mode? Speed tests are usually TCP.
BTW this is my own computer. 20% CPU utilization with 42 Mbit/s
@malikshi commented on GitHub (Jun 27, 2019):
just try those in server and any change or not for cpu load and ram,
usually ram and cpu will loaded more when most users has good traffic
@HirbodBehnam commented on GitHub (Jun 27, 2019):
Yes enabling verbose mode will use more CPU because it writes every connection detail to terminal or the service log. You can remove the
-vflag.Also I tried with UDP Relay:
About 20 Mbit/s and 10% CPU usage. Same as before.
@HirbodBehnam commented on GitHub (Jun 27, 2019):
But as you can see the CPU usage is for ss-server rather than ck-server. So you can either change the encryption to
rc4-md5orchacha20orsalsa20.Also I'm not sure if this helps or not but I also have installed
havegedpackage.@cbeuw commented on GitHub (Jun 27, 2019):
rc4-md5 is not secure so it's not recommend. Chacha20 performs than AES worse on machines with AES-NI support. Regardless I don't think the CPU usage is due to crypto.
Is it possible to run ck-server on standalone mode and see the CPU usage of ss-server and ck-server separately?
@HirbodBehnam commented on GitHub (Jun 27, 2019):
Yeah you are right
rc4-md5is a weak algorithm. @malikshi You can see here for some speed comparison. However this is for 2 years ago and I'm not sure if it is still valid or not!Download speed is about 20Mbit/s.
And a noobish question from @cbeuw; Why running in standalone is required to manage ck-server's CPU utilization? While running with
--pluginoption,ck-serverrunes as child ofss-server. And in htop it shoes the utilization like this:Any problem with this? (sorry for noobish english too)
@malikshi commented on GitHub (Jun 29, 2019):
and my config using cacha by default in my own script(edited from gist and HirbodBehnam repo)
method":"chacha20-ietf-poly1305.yea i just wanna using udp relay if plugin cloak supported dns over udp(relay). voice/video call need udp right,
and i think still tcp fast open was main problems? i know its made it fast but doesnt feel right when implemented in cloak,
@alexkatanda commented on GitHub (Jul 28, 2019):
Hi, @cbeuw
here my server spec,
CPU model : Intel(R) Xeon(R) CPU E3-1240 v5 @ 3.50GHz
Number of cores : 8
Total amount of Mem : 32GB
OS : Ubuntu 18.04.2 LTS
Arch : x86_64 (64 Bit)
Kernel : 4.15.0-55-generic
Currently I am using this server with my colleagues.
Shadowsocks are using chacha20 cipher.
I also think that CPU usage is for ss-server rather than ck-serve. However in many session environment, the cpu usage of ck-server is high than ss-server.
Currently there are about 100~200 simultaneous session.