none
WSUS servers generating a lot of traffic and hitting network line RRS feed

  • Question

  •  Hello, guys

    We have two WSUS servers with Software Update Point, which are generating a lot of traffic.

    TCP    10.132.0.28:8530       10.24.5.137:60926      ESTABLISHED
      TCP    10.132.1.28:8530       10.24.12.76:57092      ESTABLISHED
      TCP    10.132.0.28:8530       10.24.146.35:54271     ESTABLISHED
      TCP    10.132.0.28:8530       10.32.131.12:54671     ESTABLISHED
      TCP    10.132.0.28:8530       10.32.132.240:56278    ESTABLISHED
      TCP    10.132.0.28:8530       10.32.134.59:52543     ESTABLISHED
      TCP    10.132.0.28:8530       10.32.194.74:58692     ESTABLISHED
      TCP    10.132.0.28:8530       10.32.196.108:53820    ESTABLISHED

    For example we have 2Mbps network line to branch office and during synchronization clients hitting ~90% every working day and users are complaining about slow network.

    Is it posible to reschedule updates after business hours?

    Tuesday, July 5, 2016 7:10 AM

Answers

  • WSUS integrated into ConfigMgr does not deliver updates to clients, it delivers the update catalog and EULAs. There is no explicit way to schedule this traffic but it can be throttled with BITS.

    You are most likely running into a known issue caused by an "unclean" WSUS database or a full sync of the update catalog by clients:

    - https://blogs.technet.microsoft.com/configurationmgr/2016/01/26/the-complete-guide-to-microsoft-wsus-and-configuration-manager-sup-maintenance/

    - http://blog.coretech.dk/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/

    Also, since you have two SUPs, are they using a shared database? If not, every time a client switches between SUPs it will trigger a full catalog synchronization instead of the usual delta if using the same WSUS database.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by TechSpark0 Thursday, July 7, 2016 11:11 AM
    Tuesday, July 5, 2016 12:57 PM

All replies

  • Hello Sir,

    This is will give you the answer:

    https://technet.microsoft.com/en-us/library/cc708536(WS.10).aspx

    Thank you!

    if it was good for you, please mark it as answered.

    Tuesday, July 5, 2016 7:27 AM
  • Hello Sir,

    This is will give you the answer:

    https://technet.microsoft.com/en-us/library/cc708536(WS.10).aspx

    Thank you!

    if it was good for you, please mark it as answered.

    Actually its just for WSUS server, our environment have some secondary sites of SCCM platform, and WSUS servers with SUP role. its it possible to schedule it without GPO?

    Tuesday, July 5, 2016 7:34 AM
  • Dear Sir,

    Have you checked currently synchronization schedule? It's on SUP component properties page.

    Best regards

    Frank


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Tuesday, July 5, 2016 9:13 AM
    Moderator
  • Dear Sir,

    Have you checked currently synchronization schedule? It's on SUP component properties page.

    Best regards

    Frank


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    We dont using CAS, but i see it is costum schedule for Software Update Point: Occurs every 1 days effective 2015.03.01 22:00

    Tuesday, July 5, 2016 9:18 AM
  • Dear Sir,

    It looks that synchronization happens at 10 PM which should be already out of business hours.

    How did you determine that the problem is caused by SUP synchronization with WSUS server? Could it be that some other reason which caused the slow network?

    Best regards

    Frank


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Tuesday, July 5, 2016 9:36 AM
    Moderator
  • Dear Sir,

    It looks that synchronization happens at 10 PM which should be already out of business hours.

    How did you determine that the problem is caused by SUP synchronization with WSUS server? Could it be that some other reason which caused the slow network?

    Best regards

    Frank


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Hi, because we monitoring network traffic, and can see that are some connections established to WSUS servers from client side.

     TCP 8530, this is a WSUS servers.

    TCP    10.132.0.28:8530     x 100

    Tuesday, July 5, 2016 10:06 AM
  • The client software update scan schedule is part of the client settings. By default it is set to every 7 days.

    Once the client sync the first time there shouldn't be too much traffic as it uses delta syncs after talk.

    So how much traffic are you seeing for each client?


    Garth Jones

    Blog: http://www.enhansoft.com/blog Old Blog: http://smsug.ca/blogs/garth_jones/default.aspx

    Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleased

    Tuesday, July 5, 2016 10:37 AM
    Moderator
  • WSUS integrated into ConfigMgr does not deliver updates to clients, it delivers the update catalog and EULAs. There is no explicit way to schedule this traffic but it can be throttled with BITS.

    You are most likely running into a known issue caused by an "unclean" WSUS database or a full sync of the update catalog by clients:

    - https://blogs.technet.microsoft.com/configurationmgr/2016/01/26/the-complete-guide-to-microsoft-wsus-and-configuration-manager-sup-maintenance/

    - http://blog.coretech.dk/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/

    Also, since you have two SUPs, are they using a shared database? If not, every time a client switches between SUPs it will trigger a full catalog synchronization instead of the usual delta if using the same WSUS database.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by TechSpark0 Thursday, July 7, 2016 11:11 AM
    Tuesday, July 5, 2016 12:57 PM
  • UK & USA Build Your Home Business Special!
    Everything you need to build a huge business from home and then stay at home when it grows - https://bit.ly/2Wh3gIH
    Thursday, March 21, 2019 5:06 PM