High CPU load detected, hawk ruby puma

This document (000019808) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise High Availability Extension 12 SP3 (LTSS) - 12 SP4 (LTSS) - 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP3 - 12 SP4 - 12 SP5

Situation

An update was released for the "HA Web Konsole" (hawk2) package that introduced a bug in puma that causes puma/ruby to use excessive CPU.

With the Nov 19 2020 release of hawk2 version:

hawk2-2.2.1+git.1604928548.070a8e0c-3.15.1.x86_64

the option to disable TLS1.0 and TLS1.1 has been added.

However, this results in system messages log entries similar to the following:

crmd[1752]:   notice: High CPU load detected: 4.070000

Also, the "ruby.rub2.1" process runs at 99% CPU.
From top output:

22188 haclust+  20   0  754160 175248   9240 S 99.33 8.618   9872:44 ruby.ruby2.1

The "99.33" entry is %CPU time.

from ps output:

haclust+ 22182  0.0  1.7  95200 36276 ?        Ssl  Dec01   0:13 puma 3.11.4 (ssl://0.0.0.0:7630?cert=/etc/hawk/hawk.pem&key=/etc/hawk/hawk.key&verify_mode=none&no_tlsv1=true&no

haclust+ 22188 97.6  8.6 754160 175508 ?       Sl   Dec01 9883:51 puma: cluster worker 0: 22182 [hawk]

The "97.6" is %CPU time.

Resolution

An update has been released for hawk2 that resolves this issue.
Update to this version or higher:

hawk2-2.3.0+git.1607523195.05cd3222-3.18.1.x86_64

Cause

Older version of the hawk2 package were shipped with older versions of puma which did not have the ability to disable TLS versions 1.0 and 1.1.
An update to hawk2, version "hawk2-2.2.1+git.1604928548.070a8e0c-3.15.1.x86_64", provided that ability, but also introduce a regression that causes excessive CPU usage by the ruby/puma binaries.

Additional Information

See the related TID for steps to disable TLS1.0 and TLS1.1:
https://www.suse.com/support/kb/doc/?id=000019803

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:000019808
Creation Date: 08-Dec-2020
Modified Date:15-Dec-2020
- SUSE Linux Enterprise High Availability Extension
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server for SAP Applications

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com