主页
内部部署
ONTAP 9
数据访问
NAS
NAS KB
ipfw.ReachedMaxStates 由于与 StorageGRID 的过多 TLSv1.3 连接

ipfw.ReachedMaxStates 由于与 StorageGRID 的过多 TLSv1.3 连接

最后更新
另存为PDF

Views:

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

适用于

ONTAP 9
TLSv1.3
StorageGrid

问题

EMS 重复记录 ipfw.ReachedMaxStates从 ONTAP 集群间 LIF IP 到 StorageGrid IP
- Mon Apr 27 19:45:15 -0400 [node01: OscHighPriThreadPoo: ipfw.ReachedMaxStates:notice]: The ipfw firewall failed to create dynamic "keep-state" entry. Reason: Dynamic entries for 'keep-state' rules allocation failure, current # of entries: 31776. Recent connections reaching this limit:
  
  [x.x.x.x]:11090->[y.y.y.y]:10443 (TCP):32768;
  
  [x.x.x.x]:11091->[y.y.y.y]:10443 (TCP):32768;
  
  [x.x.x.x]:11092->[y.y.y.y]:10443 (TCP):32768;
  
  [x.x.x.x]:54768->[y.y.y.y]:10443 (TCP):31776;
  
  [x.x.x.x]:11089->[y.y.y.y]:10443 (TCP):32768;