When Services Are Running on openEuler 22.03, the CPU Usage of firewalld-related soft lockup or ksoftirqd Is too High

Symptom

When both Docker 18.09 and firewalld 1.0.2 are used on openEuler 22.03, the CPU usage of firewalld-related soft lockup or ksoftirqd is too high.

The command output is similar to the following:

Figure 1 Query result 1
Figure 2 Query result 2

Possible Causes

Docker 18.09 writes rules based on iptables, while firewalld 1.0.2 writes rules based on nftables, and the two are not compatible.

Solution

Open the /etc/firewalld/firewalld.conf file and change the FirewallBackend field to iptables.