Support Center > Search Results > SecureKnowledge Details
Issues with traffic passing through Security Gateway with CoreXL Dynamic Dispatcher enabled
Symptoms

  • Issues with traffic passing through Security Gateway with CoreXL Dynamic Dispatcher enabled (per sk105261).

  • Output of "top" command during the issue shows that each CoreXL FW instance (fw_worker_<N>) is consuming only a slight percentage of CPU usage.

  • "kernel: BUG: soft lockup - CPU#0 stuck for 10s!" appears repeatedly in /var/log/messages file.

    In addition, the soft lockup print the stack related to CoreXL FW instances (fw_worker_<N>):

    Pid: ..., comm:          fw_worker_<N>:/:
... ... ...
EIP is at fwmultik_pending_conn_list_handle_seq+...

  • After reboot, issue occurs again after several weeks of uptime.

Cause

CPU cores that are allocated  to CoreXL SND are highly utilized due to iterating over an internal list that holds sequence numbers of the packets that were processed by CoreXL (this internal list is used to support a temporary connection system, required for connection stickiness). The longer a machine is up and running, the longer this internal list becomes, which in turn requires more CPU resources.


Solution
 Note: To view this solution you need to Sign In .