The extension reports High CPU Usage, what can I do?
ActiveGates can be configured with several levels of resource utilization limits, called performance profiles. By default, more restrictive limits are applied. Whenever you plan to scan over more than 1000 IP addresses, it is recommended that you configure your ActiveGate to use the High limits profile. With particularly large setups, the Dedicated profile allows the extension to leverage even more of the ActiveGate's resources.
To enable the High limits profile on an ActiveGate, navigate to Deployment Status. From there, find your ActiveGate, expand the row, and click on Settings. On the Extension Execution Controller tab, the dropdown allows you to select a different profile.
To enable the Dedicated profile, please follow the instructions here. Note: when following the instructions, please leave the restInterface
option enabled.
What performance is expected from this extension?
During its execution, the extension will limit resource utilization based on the ActiveGate performance profile:
- Default: 5% CPU and 500 MB memory
- High limits: 15% CPU and 700 MB memory
- Dedicated limits: 30% CPU and 1500 MB memory
To understand expected load and execution times, stress tests were conducted based on our recommended ActiveGate sizing (labelled S (c7i.large), M (c7i.xlarge), and L (c7i.2xlarge)):
High limits profile:
| Load (IPs) | Time (S) | Time (M) | Time (L) |
| ---------- | -------- | -------- | -------- |
| 10,000 | 45 sec | 42 sec | 41 sec |
| 30,000 | 5.3 min | 3.1 min | 2.2 min |
| 100,000 | 20.7 min | 11.1 min | 7.6 min |
| 200,000 | 42.6 min | 22.3 min | 15.2 min |
| 250,000 | 55 min | 27 min | 19 min |
Dedicated limits profile:
| Load (IPs) | Time (S) | Time (M) | Time (L) |
| ---------- | --------- | -------- | -------- |
| 250,000 | 28.5 min. | 19 min | 18.4 min |
My monitored devices still appear unmonitored. How do I fix this?
To reduce the load on the scanner, but also allow monitored data to take priority, the extension requires an API Token. Please ensure the token has 'Read entities' permission. Also, ensure that the API routing module (restInterface
) is enabled on the ActiveGate (even on a Dedicated profile).
Our specialized extensions are being updated to adopt the new network entity model. Currently, only devices monitored by the following extensions will be part of the topology: