DNS Application uses more DP CPU utilization

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

DNS Application uses more DP CPU utilization

L3 Networker

Hi,

 

We are facing issue with DNS Application, it uses more DP CPU Utilization 60 to 70%.

We have done DNS Application override but no luck.

 

Please find the DNS Session details below.

 

Mem-Pool-Type MaxSz(KB) Threshold MinSz(KB) CurSz(B) Cur.Alloc Total-Alloc Fail-Thresh Fail-Nomem Local-Reuse(cache)
dns 2048 80023 1024 830152 10012 279410 0 0 23472 (5)

 

Cache-Type MAX-Entries Cur-Entries Cur.SZ(B) Insert-Failure Mem-Pool-Type
dns 7936 0 0 0 proxy
dns_v4 10000 10000 829576 0 dns
dns_v6 10000 0 0 0 dns
dns_id 1024 12 576 0 dns

 

show running application statistics
===================================
App (report-as) sessions packets bytes app changed threats

dns 617738743 2661297868 269003342139 0 0
dns-over-https 144 3304 928999 145 0
DNS_Custom 914095 3979943 370509720 0 0
google_Custom 11823 1441034 876588498 0 0
google_Custom-1 105603 953550 198205705 105725 0
google_Custom-2 169 1735 380693 482 0
google_Custom-3 1 10 2237 6 0
google_Custom-4 15447 142899 31053748 15573 0
alipay 213 8487 3887252 214 0

 

How to reduce the DNS session count or any other alternative way to overcome this issue?

 

Any help here would be appreciated.

 

Regards

Karthikeyan Balamurugan

3 REPLIES 3

Cyber Elite
Cyber Elite

@karthikeyanBHave you checked if it is valid traffic? Do you have internal DNS in your environment? 

 

Also you can verify below article to reduce DP Plane CPU.

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS

 

Mayur

M

Yes it's genuine traffic and we have internal DNS server

Please follow above link given in my earlier reply and check if it helps you.

 

Mayur

M
  • 2530 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!