100% CPU usage "java -Djava.net" (reddit duplicate)

[TheMrPancake]

I have NX running on Ubuntu Server 20.04; just for one machine in my home. After running for a short while the CPU spikes to 100% and stays until I either stop the nxservice (systemctl stop nxfilter) or go into the policy and uncheck "enable filter". Running NxFilter v4.5.1.5. Any help would be appreciated.

[support200]

What kind of system do you use? CPU and RAM? Can you show me your log file? It's /nxfilter/nxfilter.log.

I am not so sure about 'Enable Filter' causing such kind of problem. Not so much difference when it comes to CPU usage.

You seem like running it for sometime as it's version is quite older than the latest one. You didn't have this kind of problem so far?

[TheMrPancake]

It is running in VirtualBox. 1x 3ghz cpu and 1 gb Ram. I have been running it for a couple months; the CPU is usually around 1%; like I said, it is only for a single computer. After reboot/restart/enable, the system sits around 1% cpu for a while and then spikes back up to 100% under the "java -Djava.net" process. I have attached the most recent log.

[support200]

There's not much traffic. Look into /nxfilter/db. There might be some temporary files when you get cpu 100% problem. When you have certain amount of traffic data, it might try reindexing its traffic db.

[marcelofares]

I have this problem on a Windows workstation. When I disable the NXPROXY service, the CPU load drops down....
Unfortunately Windows Power Shell is consuming a lot of CPU load because of NXPROXY
So far no solution.

[support200]

You were talking about NxFilter on Ubuntu. You run your VMWare on your Windows workstation and you run NxProxy there? NxProxy tries to change your DNS settings every 15 seconds. And it uses Powershell script there. Did you lock your DNS settings somehow? Then unlock it for NxProxy to change it. Or you can change your DNS server settings to point 127.0.0.1 by yourself.

However, running Powershell command every 15 seconds causing 100% CPU load? I am not so sure about that. Look into its log file and find this kind of log,

HandyMan.hijackDns, Updating DNS settings on Windows.

If you get this log everytime you get 100% CPU load, that's the one.

[marcelofares]

You were talking about NxFilter on Ubuntu. You run your VMWare on your Windows workstation and you run NxProxy there? NxProxy tries to change your DNS settings every 15 seconds. And it uses Powershell script there. Did you lock your DNS settings somehow? Then unlock it for NxProxy to change it. Or you can change your DNS server settings to point 127,.0.0.1 by yourself.

However, running Powershell command every 15 seconds causing 100% CPU load? I am not so sure about that. Look into its log file and find this kind of log,

HandyMan.hijackDns, Updating DNS settings on Windows.

If you get this log everytime you get 100% CPU load, that's the one.

I am running NXPROXY on windows on a physical computer. The only lock I have on this workstation is the GPOS so users don't tamper with the workstation's settings. They cannot access control panel, cmd, network settings, task manager ....
I didn't really understand your solution because my English is weak. Could you explain better what to do to solve this problem?

[support200]

NxProxy itself is a DNS server. It does DNS filtering by making it a local DNS server. It listens on 127.0.0.1/53. So it needs to change DNS settings and you blocked it. You don't need to use it inside your local network as there's NxFilter already. You only use it for the laptops of your mobile workers.

[marcelofares]

NxProxy itself is a DNS server. It does DNS filtering by making it a local DNS server. It listens on 127.0.0.1/53. So it needs to change DNS settings and you blocked it. You don't need to use it inside your local network as there's NxFilter already. You only use it for the laptops of your mobile workers.

I'm using NXFILTER in the cloud, and I use NXPROXY, so that Workstations reach NXFILTER in the cloud with their policies. I am not using NXPROXY with NXFILTER Server locally.
And do you know exactly which GPO (policy) does not have to be blocked to avoid this type of problem, if the GPOS are causing this high cpu load?

[support200]

Why do you have to run NxFilter on cloud? It's supposed to be in your local network and with that approach, you can use its potential 100%. If you have to use NxProxy, allow it to change your DNS settings or change your DNS settings to point 127.0.01 by yourself.

[marcelofares]

Why do you have to run NxFilter on cloud? It's supposed to be in your local network and with that approach, you can use its potential 100%. If you have to use NxProxy, allow it to change your DNS settings or change your DNS settings to point 127.0.01 by yourself.

See my group policies. Honestly, I don't know which one is blocking like you said..
I honestly think that these policies below are not the cause of CPU LOAD with powershell, so much so that, when I am in the windows administrator user, the powershell load remains high, and it only decreases when I stop the NXPROXY service running .

[support200]

NxProxy tries to change your DNS settings and it's blocked and that's why you get high CPU. What's your DNS server IP on the system you run NxProxy then?

Did you look into the log file of NxProxy? It's C:\Program Files (x86)\nxproxy\log\ directory.

[marcelofares]

NxProxy tries to change your DNS settings and it's blocked and that's why you get high CPU. What's your DNS server IP on the system you run NxProxy then?

Did you look into the log file of NxProxy? It's C:\Program Files (x86)\nxproxy\log\ directory.

My server IP is public because NXFILTER is in the cloud.
The page restriction policies that I created within NXFILTER are being applied normally to workstations.

I think you couldn't understand my English. I said that even though I was logging in as Administrator on Windows on the same workstation where group policies are not applied (GPOS), the windows poweshell process is still high. The process just slows down if I DISABLE THE NXPROXY SERVICE by accessing services.msc. This explanation I gave you shows that no GPO (windows group policy) is not influencing this problem of powershell process with high load because of NXPROXY service.

Do you still want the logs?

[support200]

I asked you that what is your DNS server while your NxProxy running and what do you see in the log file already. Upload your log file and see if your DNS settings changed while NxProxy running.

[support200]

Did you run NxProxy on CMD with your login account? If you talk about NxProxy as Windows service, it's not your login account. It runs under another account.