High latencies after HA failover

Netadmin — Tue, 28 Nov 2023 14:36:04 GMT

Goodmorning, i have a cluster with two PA3060 running panos 9.1.16.

We are about to upgrade to 9.1.16.H3 due to certificate expiration.

I had already updated the Secondary (passive) node to 9.1.16.H3 without issues 1 days before .

The second step was to upgrade the Primary node.

Before to upgrade the active node i requested the failover, the secondary node became active and all the network started to slow down.

I had many costant pings windows on different zones of the networks and i've observerd a strong increase of latencies (1000-3000). Most part of network services became unreachable due to high latencies but Firewalls management port were still fast and reachable.

In the secondary (active) node i noticed Management plane with low percents but traffic plane at 100%

When i resumed the primary node state to active the issue disappeared.

Re: High latencies after HA failover

reaper — Wed, 29 Nov 2023 10:56:43 GMT

did you collect information like `show session info` and `show running resource-monitor` or `debug dataplane pool statistics`?

you're not giving us much to work with here 🙂

topic High latencies after HA failover in Next-Generation Firewall Discussions

High latencies after HA failover

Re: High latencies after HA failover