GitHub user fnavidan added a comment to the discussion: High Latency Between Two VMs In a L2 Private Guest Network
We found out that the KVM host is experiencing extremely high CPU utilization so that no cpu time was left for real-time network packet processing. Further investigation revealed that we has a security incident on the host where xmrig, a crypto miner was installed on the host. Further investigation, showed no sign of successful SSH login from untrusted IPs, So that we suspect that the attacker might have been able to execute remote commands using libvirt remote management port 16514, 8250 or 9090. We have blocked ports 16514, 5900–6100, 8250, 9090, 49152–49216 in public zone and added to trusted zone. Also, because we only have one NIC on the host, all traffic types are going through cloudbr0 bridge. We needed to manually edit Network Manager config and change zone to trusted. At this time, all services are working fine and all critical ports are filtered from public Internet. Also, significant reduction of CPU utilization on KVM host, actually fixed the network latency between VMs. GitHub link: https://github.com/apache/cloudstack/discussions/14380#discussioncomment-18925612 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
