Palo Alto QOS - WRED drops

preetpk — Wed, 10 Feb 2021 09:41:08 GMT

In Palo Alto firewall, we observed WRED drops on QOS (150Mbps) applied egress interface eth 1/11 – due to which DB sync/mirroring is randomly getting failed/dropped between DC & DR. Please let me know for any configuration changes/workarounds to avoid this WRED drops.

Re: Palo Alto QOS - WRED drops

BPry — Wed, 10 Feb 2021 22:47:29 GMT

@preetpk,

Why are you classifying SQL traffic as low priority traffic? In the vast majority of environments you would be giving SQL a higher priority over other traffic, not setting it as low priority traffic. With how you have things configured, your QoS is performing exactly what you are telling it to. Traffic starts queuing, WRED kicks in and will start dropping packets from lower priority queues to preserve high priority traffic.

You need to look at how you've actually configured QoS and what your organizations actual goal is with this traffic. From the look of things and how you have it configured at the moment, it appears like you want to treat SQL traffic as low priority. If that's the case and it meets your business use-case that's all fine and well, but you will run into DB replication issues.

topic Palo Alto QOS - WRED drops in General Topics

Palo Alto QOS - WRED drops

Re: Palo Alto QOS - WRED drops