topic IPSec tunnel throughput drops to 0mbps after some time in Next-Generation Firewall Discussions

IPSec tunnel throughput drops to 0mbps after some time

J.Ong047658 — Wed, 30 Apr 2025 08:38:24 GMT

While testing for maximum throughput over an IPSec tunnel, I noticed that after a while throughput drops to 0mbps.

When the test started, both ends of the tunnel had about 4.5gbps throughput total. But at around the 18 minute mark of the test, the throughput dropped to 0mbps. It self recovered on one end but the other end did not. Subsequent tests had similar behaviours starting to occur at different times of the tests, as early as <1 minute into the test.

I raised this issue to both the beta support team who directed me to CSP who then directed me here.

Equipment: PA-1410

PAN-OS version: 12.1.1-b1

Re: IPSec tunnel throughput drops to 0mbps after some time

JayGolf — Mon, 05 May 2025 04:16:36 GMT

Hi @J.Ong047658 ,

Is this issue consistently reproducible? I would recommend, checking the dataplane utilization during the time of the drop. You can run a show running resource-monitor in the CLI.

Additionally, in the CSP when you are creating a case, you should be able to push through the recommendations and create a support ticket. Please download the tech support file and upload that to your case.

Re: IPSec tunnel throughput drops to 0mbps after some time

J.Ong047658 — Mon, 05 May 2025 08:02:53 GMT

Hi Jay,

The issue is consistently reproducible across different packet sizes and number of streams. I'll need some time to check the dataplane utilization though.

As for CSP, I did manage to create a support ticket but support mentioned that they do not deal with machines that run on beta code or any issues that arise from performance testing.