High CPU load detected, hawk ruby puma

This document (000019808) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise High Availability Extension 12 SP3 (LTSS) - 12 SP4 (LTSS) - 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP3 - 12 SP4 - 12 SP5
 

Situation

An update was released for the "HA Web Konsole" (hawk2) package that introduced a bug in puma that causes puma/ruby to use excessive CPU.

With the Nov 19 2020 release of hawk2 version:
hawk2-2.2.1+git.1604928548.070a8e0c-3.15.1.x86_64
the option to disable TLS1.0 and TLS1.1 has been added.

However, this results in system messages log entries similar to the following:
crmd[1752]:   notice: High CPU load detected: 4.070000

Also, the "ruby.rub2.1" process runs at 99% CPU.
From top output:
22188 haclust+  20   0  754160 175248   9240 S 99.33 8.618   9872:44 ruby.ruby2.1
The "99.33" entry is %CPU time.


from ps output:
haclust+ 22182  0.0  1.7  95200 36276 ?        Ssl  Dec01   0:13 puma 3.11.4 (ssl://0.0.0.0:7630?cert=/etc/hawk/hawk.pem&key=/etc/hawk/hawk.key&verify_mode=none&no_tlsv1=true&no

haclust+ 22188 97.6  8.6 754160 175508 ?       Sl   Dec01 9883:51 puma: cluster worker 0: 22182 [hawk]
The "97.6" is %CPU time.
 

Resolution

An update has been released for hawk2 that resolves this issue.
Update to this version or higher: 
hawk2-2.3.0+git.1607523195.05cd3222-3.18.1.x86_64

 

Cause

Older version of the hawk2 package were shipped with older versions of puma which did not have the ability to disable TLS versions 1.0 and 1.1.
An update to hawk2, version "hawk2-2.2.1+git.1604928548.070a8e0c-3.15.1.x86_64", provided that ability, but also introduce a regression that causes excessive CPU usage by the ruby/puma binaries.

Additional Information

See the related TID for steps to disable TLS1.0 and TLS1.1:
https://www.suse.com/support/kb/doc/?id=000019803

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000019808
  • Creation Date: 15-Dec-2020
  • Modified Date:15-Dec-2020
    • SUSE Linux Enterprise High Availability Extension
    • SUSE Linux Enterprise Server
    • SUSE Linux Enterprise Server for SAP Applications

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback@suse.com

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.


SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center