VoipfirewallID/PHP have high CPU

[fewpcs]

I am new to FreePBX and have been setting up a new system.
I am not positive where to find out why voipfirewalld is using so much CPU.
I’ve tried rebooting the system and the CPU is still high.

ps output:
root 1834 87.5 0.1 395480 1320 ? R 15:04 57:47 voipfirewalld (Monitor thread)

top output:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1834 root 20 0 395480 1320 412 R 93.8 0.1 56:36.27 php

Thanks.

[fewpcs]

I rolled back to 13.0.52 because I saw another thread where someone was having the same problem.
Seems to have fixed the high CPU from the firewall.

Not sure if anyone else has this problem.

Here is the previous thread:

Voipfirewalld using ~99% CPU

Hi, Since I can’t see any threads about this elsewhere, I’m assuming it’s me and so trying to debug the issue. I’m currently using FreePBX 14.0.3.2 and running version 13.0.55.1 of the System Firewall module. For the past two weeks, it looks like voipfirewalld has been almost 100% CPU which is then slowing down the web interface and (I assume) everything else. [05] # uptime 11:22:31 up 10 days, 1:13, 1 user, load average: 4.32, 4.64, 5.00 model name : Intel Xeon E3-12xx v2 (Ivy Bridge…

[tm1000 (Andrew Nagy)]

@fewpcs

I rolled back to 13.0.52 because I saw another thread where someone was having the same problem.

Except in that other thread they state that 13.0.56 fixed third issues

[fewpcs]

I did try installing 13.0.56 also, but I’m still seeing the high CPU.

I’m not really sure what to check next since 13.0.52 does not exhibit the problem.

[fewpcs]

Is there a certain log I can look through to find out why the CPU is so high?
I did update back to the latest, 13.0.57.1, to see if I can track down the problem.

The most recent lines in /tmp/firewall.log show this. Just looks like the FreePBX server and SIP provider:

1539104278: /sbin/iptables -w5 -W10000 -A fpbx-rtp -p udp -m udp --dport 10000:20000 -j ACCEPT
1539104278: /sbin/iptables -w5 -W10000 -A fpbx-rtp -p udp -m udp --dport 4000:4999 -j ACCEPT
1539104278: /sbin/ip6tables -w5 -W10000 -A fpbxsignalling -p udp -m udp --dport 5160 -j MARK --set-xmark 0x1/0xffffffff
1539104278: /sbin/ip6tables -w5 -W10000 -A fpbxsignalling -p udp -m udp --dport 5060 -j MARK --set-xmark 0x1/0xffffffff
1539104278: /sbin/iptables -w5 -W10000 -A fpbxsignalling -p udp -m udp --dport 5160 -j MARK --set-xmark 0x1/0xffffffff
1539104278: /sbin/iptables -w5 -W10000 -A fpbxsignalling -p udp -m udp --dport 5060 -j MARK --set-xmark 0x1/0xffffffff
1539104278: /sbin/iptables -w5 -W10000 -A fpbxsmarthosts -s 444.333.222.111/32 -m mark --mark 0x1/0x1 -j ACCEPT
1539104278: /sbin/iptables -w5 -W10000 -A fpbxregistrations -s 111.222.333.444/32 -j fpbxknownreg
1539104278: /sbin/iptables -w5 -W10000 -A fpbxregistrations -s 444.333.222.111/32 -j fpbxknownreg
1539104278: /sbin/ip6tables -w5 -W10000 -A fpbxhosts -s ::1/128 -j zone-trusted
1539104278: /sbin/iptables -w5 -W10000 -A fpbxhosts -s 111.222.333.444/32 -j zone-trusted
1539104278: /sbin/iptables -w5 -W10000 -A fpbxhosts -s 127.0.0.1/32 -j zone-trusted
1539104278: /sbin/ip6tables -w5 -W10000 -R fpbxlogdrop 1 -j DROP
1539104278: /sbin/iptables -w5 -W10000 -R fpbxlogdrop 1 -j DROP
1539104278: /sbin/ip6tables -w5 -W10000 -A fpbxinterfaces -i eth0 -j zone-external
1539104278: /sbin/iptables -w5 -W10000 -A fpbxinterfaces -i eth0 -j zone-external
1539104278: /sbin/iptables -w5 -W10000 -t nat -A masq-output -o eth0 -j MARK --set-xmark 0x2/0x2