> Perhaps you should use pidstat to validate which processes are running on the two busy cores? Did that an can confirm that CPU 5 and 6 are not exclusively used by networking - but also by nginx and php-fpm.