Connection Error - Timeout / Schlechte Performance

remiind

New Member
Feb 22, 2024
1
1
3
Hallo,

ich habe Proxmox auf einer Mini-Firewall Appliance laufen.

Hier kurz die basic Infos:
CPU(s) 4 x Intel(R) N100 (1 Socket)
Kernel Version Linux 6.5.11-8-pve (2024-01-30T12:27Z)
Boot Mode EFI
Manager Version pve-manager/8.1.4/ec5affc9e41f1d79
Underlay ist ein Debian 12.

Am Anfang lief die Kiste reibungslos und performant. Eine VM ist am laufen, welche 1,6 GB RAM im durchschnitt nutzt und ca. 1,5 % CPU

Nach ein paar Tagen, sind jedoch Anfragen auf das Webinterface von Proxmox / das Webinterface auf die VM extrem langsam geworden.
Teilweise lädt das Webinterface für mehrere Minuten gar nicht und läuft in einen 'Connection Error - Timeout'.

Ich habe pveproxy pvestatd pvedaemon schon neu installiert, danach lief es wieder für wenige Stunden performant - anschließend wieder nicht.

Folgende Logs spammen die ganze Zeit das Logfile voll - alle 1-3 Minuten.

Code:
Feb 22 11:12:50 homeserver systemd[1]: cups.service: start operation timed out. Terminating.
Feb 22 11:12:50 homeserver systemd[1]: cups.service: Failed with result 'timeout'.
Feb 22 11:12:50 homeserver systemd[1]: Failed to start cups.service - CUPS Scheduler.
Feb 22 11:12:51 homeserver systemd[1]: cups.service: Scheduled restart job, restart counter is at 1817.
Feb 22 11:12:51 homeserver systemd[1]: Stopped cups.service - CUPS Scheduler.
Feb 22 11:12:51 homeserver systemd[1]: cups.path: Deactivated successfully.
Feb 22 11:12:51 homeserver systemd[1]: Stopped cups.path - CUPS Scheduler.
Feb 22 11:12:51 homeserver systemd[1]: Stopping cups.path - CUPS Scheduler...
Feb 22 11:12:51 homeserver systemd[1]: Started cups.path - CUPS Scheduler.
Feb 22 11:12:51 homeserver systemd[1]: cups.socket: Deactivated successfully.
Feb 22 11:12:51 homeserver systemd[1]: Closed cups.socket - CUPS Scheduler.
Feb 22 11:12:51 homeserver systemd[1]: Stopping cups.socket - CUPS Scheduler...
Feb 22 11:12:51 homeserver systemd[1]: Listening on cups.socket - CUPS Scheduler.
Feb 22 11:12:51 homeserver systemd[1]: Starting cups.service - CUPS Scheduler...
Feb 22 11:12:51 homeserver audit[354047]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354047]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354047]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354047]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354047]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.163:11065): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.163:11066): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.163:11067): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.163:11068): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.163:11069): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354047]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="dgram" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.167:11070): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354047 comm="cupsd" family="unix" sock_type="dgram" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.167:11071): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354048 comm="dbus" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.167:11072): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354048 comm="dbus" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver kernel: audit: type=1400 audit(1708596771.171:11073): apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354048 comm="dbus" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354048]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354048 comm="dbus" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354048]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354048 comm="dbus" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none
Feb 22 11:12:51 homeserver audit[354048]: AVC apparmor="DENIED" operation="create" class="net" info="failed type and protocol match" error=-13 profile="/usr/sbin/cupsd" pid=354048 comm="dbus" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none


Auf der Debian Shell sehe ich alle paar Minuten folgende Meldung:

Code:
Broadcast message from root@homeserver (Thu 2024-02-22 10:45:54 CET):

The system will suspend now!


Hier noch mein [I]/etc/network/interfaces[/I]

Code:
source /etc/network/interfaces.d/*


auto lo
iface lo inet loopback


iface enp1s0 inet manual


iface enp2s0 inet manual


iface enp3s0 inet manual


iface enp4s0 inet manual


auto vmbr0
iface vmbr0 inet static
        address 192.168.178.251/24
        gateway 192.168.178.1
        bridge-ports enp1s0
        bridge-stp off
        bridge-fd 0

Lustigerweise läuft die VM performant nach der anfänglichen langen Ladezeit.


Hat irgendwer eine Idee?


Edit: Ping / XRDP zum Debian läuft während dieser Aussetzer und Timeouts auf dem Webinterface übrigens ohne Probleme durch.
Ipferf Messung zum Debian kommt auch auf dauerhafte 800Mbit.


Viele Grüße

Daniel
 
Last edited:
  • Like
Reactions: sgtbob