[24.10.0-rc2] crowdsec-firewall-bouncer 0.0.31-r2 OOM killer

For Developers
1

Hi, I am trying to run crowdsec bouncer on the latest firmware. I tried 23.05.5 with mirouter4 and it left the router dead until I rebooted it and left it without access to the local crowdsec server API. With the new firmware version it generates OOM and kills the process (hooray!). Now from what I see, it have the 57MiB of 128MiB free, then the bouncer consumes it all. For lack of knowledge on this platform, I do not know if I am requiring too much to the router or there is a problem with the version itself, usually it is necessary some kind of swap memory for these loads (difficult without USB port) or something is wrong with my API server.

root@wrt1:/etc/config# free -m
              total        used        free      shared  buff/cache   available
Mem:         119276       50628       57016        1288       11632       37612
Swap:             0           0           0

OOM killer log

[ 2151.702255] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
[ 2151.913773] [   6613]     0  6613   137356    12896    94208        0             0 cs-firewall-bou
[ 2151.922853] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/,task=cs-firewall-bou,pid=6613,uid=0
[ 2151.936365] Out of memory: Killed process 6613 (cs-firewall-bou) total-vm:549424kB, anon-rss:51456kB, file-rss:128kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:0
2

What else is running on that system?
You do not have formally required 100MB free RAM.

zram-swap may or may not help.

REF: https://docs.crowdsec.net/u/getting_started/pre_requisites/

1 Like
3

You are right, I have not enought memory. Thanks a lot.

4

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.