[ISSUE] un-useably slow 4.01

[nutpantz]

Describe the bug
4.0.1 is so slow it not useable. Every act takes so long i get the close or wait dialog
Firewall Logs
To slow to get a log.

Smartphone (please complete the following information):

• Device: black view 9800pro
• Android OS: Android 9

Additional context
App starts with a blank screen. I can count to ten before the ui starts. Any action feels like it is frozen and either takes so long i get the wait or close dialog, or i give up.

[nutpantz]

After clearing data uninstalling re installing the app 4.0.1 is just slower then usual but usable

App works fine on pixel 6 A13

[akronym0]

I noticed that too - though I wouldn't call it "unusable" in my case.

[PureIncompetence]

I can confirm that bug/behaviour on iOdeOS 7 (Android 16) with either version v4.0.0 or v4.0.1.

Interestingly the only view that slow is the app list (independent of the number of apps which are shown - also when filtered to show only core apps). The three dot menu in the top left corner as well as the settings screens work (and scroll) flawlessly.

When running htop simultaniously via adb shell I see that com.ukanth.ufirewall uses 100% of one cpu core while trying to scroll through the app list:

This is the way the scrolling through the app list looks after the update to v4.X.X (before it was smooth 99% of the time):
https://github.com/user-attachments/assets/4c807fe8-b527-4da1-b64a-dda0bd68f470

The following are the rules from Menu -> Show Rules -> (menu) Export to storage:
IPv4rules.log

The following is the dmesg output while starting AFWall+ 3.6.0, upgrading to 4.0.1 via fdroid, starting it again (and enabling the firewall again, because it was disabled after the upgrade!), filtered with `grep -E 'AFWall|10923'`:

12-25 21:22:34.369 10923 10923 V Configuration: Updating configuration, locales updated from [] to [de]
12-25 21:55:31.911 10923 10923 V Configuration: Updating configuration, locales updated from [] to [de]
12-25 21:57:10.369  3590  3667 I ActivityManager: Killing 10923:dev.ukanth.ufirewall/u0a203 (adj 200): stop dev.ukanth.ufirewall due to installPackageLI
12-25 21:57:10.538  4318  4350 D AlphabeticIndexCompat: computeSectionName: cs: AFWall+ sectionName: A
12-25 21:57:10.569  3590  9429 V ActivityManager: Got obituary of 10923:dev.ukanth.ufirewall
12-25 21:57:10.570  3590  3661 W ActivityManager: setHasOverlayUi called on unknown pid: 10923
12-25 21:57:10.584  3337  3337 I Zygote  : Process 10923 exited due to signal 9 (Killed)
12-25 21:57:10.585  3590  3669 I libprocessgroup: Removed cgroup /sys/fs/cgroup/apps/uid_10203/pid_10923
12-25 21:57:10.589  3590  3669 I ActivityManager: Process PhantomProcessRecord {19cf81e 10980:10923:su/u0a203} died
12-25 21:57:10.589  3590  3669 I ActivityManager: Process PhantomProcessRecord {8a2f8ff 10946:10923:su/u0a203} died
12-25 21:57:10.589  3590  3669 I ActivityManager: Process PhantomProcessRecord {97be6cc 11019:10923:su/u0a203} died
12-25 21:57:21.401 27274 27274 I AFWall  : Selected Profile: AFWallPrefs
12-25 21:57:21.463 27274 27274 D AFWall  : assertBinaries() called - Entry point
12-25 21:57:21.463 27274 27274 D AFWall  : assertBinaries() - currentVer=20251223, storedVer=20230828, wasAlreadyInstalled=false
12-25 21:57:21.463 27274 27274 D AFWall  : Installing binaries for arm64-v8a (currentVer=20251223, storedVer=20230828, wasAlreadyInstalled=false)...
12-25 21:57:21.463 27274 27274 D AFWall  : Installing binary: busybox to /data/user/0/dev.ukanth.ufirewall/app_bin/busybox
12-25 21:57:21.463 27274 27274 D AFWall  : Removing existing binary: busybox
12-25 21:57:21.485 27274 27274 D AFWall  : Successfully installed binary: busybox (size: 2295680 bytes, executable: true)
12-25 21:57:21.485 27274 27274 D AFWall  : Installing binary: iptables to /data/user/0/dev.ukanth.ufirewall/app_bin/iptables
12-25 21:57:21.485 27274 27274 D AFWall  : Removing existing binary: iptables
12-25 21:57:21.495 27274 27274 D AFWall  : Successfully installed binary: iptables (size: 511736 bytes, executable: true)
12-25 21:57:21.495 27274 27274 D AFWall  : Installing binary: ip6tables to /data/user/0/dev.ukanth.ufirewall/app_bin/ip6tables
12-25 21:57:21.495 27274 27274 D AFWall  : Removing existing binary: ip6tables
12-25 21:57:21.506 27274 27274 D AFWall  : Successfully installed binary: ip6tables (size: 511736 bytes, executable: true)
12-25 21:57:21.506 27274 27274 D AFWall  : Installing binary: nflog to /data/user/0/dev.ukanth.ufirewall/app_bin/nflog
12-25 21:57:21.506 27274 27274 D AFWall  : Removing existing binary: nflog
12-25 21:57:21.518 27274 27274 D AFWall  : Successfully installed binary: nflog (size: 600280 bytes, executable: true)
12-25 21:57:21.518 27274 27274 D AFWall  : Removing existing binary: afwallstart
12-25 21:57:21.525 27274 27274 D AFWall  : Successfully installed binary: afwallstart (size: 670 bytes, executable: true)
12-25 21:57:21.525 27274 27274 D AFWall  : Installed binaries for arm64-v8a.
12-25 21:57:21.525 27274 27274 D AFWall  : New installation completed - showing toast
12-25 21:57:21.528 27274 27274 D AFWall  : Starting root shell(4)...
12-25 21:57:21.541 27274 27274 I AFWall  : Selected Profile: AFWallPrefs
12-25 21:57:23.347 27274 27274 I AFWall  : Using original NFLOG binary
12-25 21:57:23.347 27274 27274 I AFWall  : Starting Log Service: /data/user/0/dev.ukanth.ufirewall/app_bin/nflog 40 for LogTarget: NFLOG
12-25 21:57:23.375 27274 27274 I AFWall  : Starting log watcher with command: /data/user/0/dev.ukanth.ufirewall/app_bin/nflog 40
12-25 21:57:23.377 27274 27274 I AFWall  : Using original NFLOG binary
12-25 21:57:23.377 27274 27274 I AFWall  : Starting Log Service: /data/user/0/dev.ukanth.ufirewall/app_bin/nflog 40 for LogTarget: NFLOG
12-25 21:57:23.377 27274 27274 I AFWall  : Starting log watcher with command: /data/user/0/dev.ukanth.ufirewall/app_bin/nflog 40
12-25 21:57:23.377 27274 27274 W AFWall  : ExecutorService is not available, recreating...
12-25 21:57:23.379 27274 27274 D AFWall  : Root shell(4) is open
12-25 21:57:31.807 27274 27338 I AFWall  : Applying IPv4 rules
12-25 21:57:31.807 27274 27338 D AFWall  : assertBinaries() called - Entry point
12-25 21:57:31.807 27274 27338 D AFWall  : assertBinaries() - currentVer=20251223, storedVer=20251223, wasAlreadyInstalled=true
12-25 21:57:31.807 27274 27338 D AFWall  : assertBinaries() - Verifying existing binaries...
12-25 21:57:31.807 27274 27338 D AFWall  : verifyBinaries() called - Starting verification
12-25 21:57:31.807 27274 27338 D AFWall  : verifyBinaries() - Binary directory: /data/user/0/dev.ukanth.ufirewall/app_bin
12-25 21:57:31.807 27274 27338 D AFWall  : verifyBinaries() - Checking busybox: exists=true, canExecute=true, canRead=true, size=2295680 bytes
12-25 21:57:31.807 27274 27338 D AFWall  : verifyBinaries() - Testing busybox functionality with 'echo test'
12-25 21:57:31.812 27274 27338 W AFWall  : Busybox execution test failed due to Android security restrictions (expected behavior)
12-25 21:57:31.812 27274 27338 W AFWall  : Binary will be available for root execution. Skipping direct execution test.
12-25 21:57:31.812 27274 27338 D AFWall  : verifyBinaries() - Checking other required binaries
12-25 21:57:31.812 27274 27338 D AFWall  : verifyBinaries() - Checking iptables: exists=true, canExecute=true
12-25 21:57:31.813 27274 27338 D AFWall  : verifyBinaries() - Checking ip6tables: exists=true, canExecute=true
12-25 21:57:31.813 27274 27338 D AFWall  : Binary verification successful - All checks passed
12-25 21:57:31.813 27274 27338 D AFWall  : assertBinaries() - Verification passed, returning true (no reinstall needed)
12-25 21:57:31.813 27274 27338 I AFWall  : Forcing configuration: true
12-25 21:57:31.813 27274 27338 I AFWall  : Constructing rules for v4
12-25 21:57:31.813 27274 27274 D AFWall  : Bluetooth initialization disabled to prevent service connection leaks
12-25 21:57:31.813 27274 27338 D AFWall  : Adding NFLOG rule to reject chain: -A afwall-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding final REJECT rule: -A afwall-reject -j REJECT
12-25 21:57:31.814 27274 27338 D AFWall  : Populating individual reject chain: afwall-3g-home-reject
12-25 21:57:31.814 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-3g-home-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-3g-home-reject -j REJECT
12-25 21:57:31.814 27274 27338 D AFWall  : Populating individual reject chain: afwall-3g-roam-reject
12-25 21:57:31.814 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-3g-roam-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-3g-roam-reject -j REJECT
12-25 21:57:31.814 27274 27338 D AFWall  : Populating individual reject chain: afwall-wifi-wan-reject
12-25 21:57:31.814 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-wifi-wan-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-wifi-wan-reject -j REJECT
12-25 21:57:31.814 27274 27338 D AFWall  : Populating individual reject chain: afwall-wifi-lan-reject
12-25 21:57:31.814 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-wifi-lan-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-wifi-lan-reject -j REJECT
12-25 21:57:31.814 27274 27338 D AFWall  : Populating individual reject chain: afwall-vpn-reject
12-25 21:57:31.814 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-vpn-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-vpn-reject -j REJECT
12-25 21:57:31.814 27274 27338 D AFWall  : Populating individual reject chain: afwall-tether-reject
12-25 21:57:31.814 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-tether-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.814 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-tether-reject -j REJECT
12-25 21:57:31.814 27274 27338 I AFWall  : Forcing configuration: true
12-25 21:57:31.814 27274 27338 I AFWall  : no ipv4 found:true,
12-25 21:57:31.814 27274 27338 I AFWall  : No ipaddress found for LAN
12-25 21:57:31.829 27274 27338 I AFWall  : Successfully applied IPv4 rules
12-25 21:57:31.829 27274 27338 I AFWall  : Applying IPv6 rules
12-25 21:57:31.829 27274 27338 D AFWall  : assertBinaries() called - Entry point
12-25 21:57:31.829 27274 27338 D AFWall  : assertBinaries() - currentVer=20251223, storedVer=20251223, wasAlreadyInstalled=true
12-25 21:57:31.829 27274 27338 D AFWall  : assertBinaries() - Verifying existing binaries...
12-25 21:57:31.829 27274 27338 D AFWall  : verifyBinaries() called - Starting verification
12-25 21:57:31.829 27274 27338 D AFWall  : verifyBinaries() - Binary directory: /data/user/0/dev.ukanth.ufirewall/app_bin
12-25 21:57:31.829 27274 27338 D AFWall  : verifyBinaries() - Checking busybox: exists=true, canExecute=true, canRead=true, size=2295680 bytes
12-25 21:57:31.829 27274 27338 D AFWall  : verifyBinaries() - Testing busybox functionality with 'echo test'
12-25 21:57:31.835 27274 27338 W AFWall  : Busybox execution test failed due to Android security restrictions (expected behavior)
12-25 21:57:31.835 27274 27338 W AFWall  : Binary will be available for root execution. Skipping direct execution test.
12-25 21:57:31.835 27274 27338 D AFWall  : verifyBinaries() - Checking other required binaries
12-25 21:57:31.835 27274 27338 D AFWall  : verifyBinaries() - Checking iptables: exists=true, canExecute=true
12-25 21:57:31.835 27274 27338 D AFWall  : verifyBinaries() - Checking ip6tables: exists=true, canExecute=true
12-25 21:57:31.836 27274 27338 D AFWall  : Binary verification successful - All checks passed
12-25 21:57:31.836 27274 27338 D AFWall  : assertBinaries() - Verification passed, returning true (no reinstall needed)
12-25 21:57:31.836 27274 27338 I AFWall  : Forcing configuration: false
12-25 21:57:31.836 27274 27338 I AFWall  : Constructing rules for v6
12-25 21:57:31.836 27274 27338 D AFWall  : Adding NFLOG rule to reject chain: -A afwall-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.836 27274 27338 D AFWall  : Adding final REJECT rule: -A afwall-reject -j REJECT
12-25 21:57:31.836 27274 27338 D AFWall  : Populating individual reject chain: afwall-3g-home-reject
12-25 21:57:31.836 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-3g-home-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.836 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-3g-home-reject -j REJECT
12-25 21:57:31.836 27274 27338 D AFWall  : Populating individual reject chain: afwall-3g-roam-reject
12-25 21:57:31.836 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-3g-roam-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.836 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-3g-roam-reject -j REJECT
12-25 21:57:31.836 27274 27338 D AFWall  : Populating individual reject chain: afwall-wifi-wan-reject
12-25 21:57:31.836 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-wifi-wan-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
12-25 21:57:31.836 27274 27338 D AFWall  : Adding REJECT to individual reject chain: -A afwall-wifi-wan-reject -j REJECT
12-25 21:57:31.836 27274 27338 D AFWall  : Populating individual reject chain: afwall-wifi-lan-reject
12-25 21:57:31.836 27274 27338 D AFWall  : Adding NFLOG to individual reject chain: -A afwall-wifi-lan-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group

Edit:
After removing app data and setting up AFWall+ from scratch the app list performance got better for me too, but its still a lot worse compared to even the worst case performance on 3.6.0. At least its not fully unusable (because it takes like 5 minutes to scroll through the whole app list) anymore. Now the cpu "only" spikes to ~70% while scrolling according to htop.
Not exactly ideal because setting up all individual app settings from scratch will take quite a while.

[ukanth]

Are these f-droid builds ? Because no one reported any slowness in playstore version.

[nutpantz]

Mine was play store paid.
performance has degraded since i installed it.
It is still usable, but painfully slow. I can only hope it does not get worse

[PureIncompetence]

The builds on all devices I could get my hands on are from fdroid.

Interestingly though I've also updated a rather old device (Samsung A500FU with a Snapdragon 410 MSM8916 running on android 9 - also afwall fdroid release) to v4.0.0 where the performance did not degrade after the update.

[nutpantz]

I just wanted to report back that performance feels much worse today compared to last month. It is painfully slow. Thankfully i rarely have to change anything.
Black view 9800 pro Android 9