It wasn't just wrongly displayed in the webUI. Top on the host also showed that the KVM process needed way more CPU ressouces than shown by top inside the VM.
Reading your OP again, you are right, a recent kernel update is more plausable then.
Are you running kernel v5.15 already on this host or default kernel?
The default 5.13.19-4-pve.
Accoring to to the trhead in the suricata forum the problem was that suricata switched from pthread to usleep and it looked like KVM can't handle usleep well and alot of overhead was created.
Knowing that this is the german forum, you could try again, the overhead should be lower again in opnsense 22.7.5.
See https://forum.opnsense.org/index.php?topic=30585.0.
There are also links for background and tests of the suricata change.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.