- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
02-26-2020 07:03 AM
Hi,
We are facing issue with DNS Application, it uses more DP CPU Utilization 60 to 70%.
We have done DNS Application override but no luck.
Please find the DNS Session details below.
Mem-Pool-Type MaxSz(KB) Threshold MinSz(KB) CurSz(B) Cur.Alloc Total-Alloc Fail-Thresh Fail-Nomem Local-Reuse(cache)
dns 2048 80023 1024 830152 10012 279410 0 0 23472 (5)
Cache-Type MAX-Entries Cur-Entries Cur.SZ(B) Insert-Failure Mem-Pool-Type
dns 7936 0 0 0 proxy
dns_v4 10000 10000 829576 0 dns
dns_v6 10000 0 0 0 dns
dns_id 1024 12 576 0 dns
show running application statistics
===================================
App (report-as) sessions packets bytes app changed threats
dns 617738743 2661297868 269003342139 0 0
dns-over-https 144 3304 928999 145 0
DNS_Custom 914095 3979943 370509720 0 0
google_Custom 11823 1441034 876588498 0 0
google_Custom-1 105603 953550 198205705 105725 0
google_Custom-2 169 1735 380693 482 0
google_Custom-3 1 10 2237 6 0
google_Custom-4 15447 142899 31053748 15573 0
alipay 213 8487 3887252 214 0
How to reduce the DNS session count or any other alternative way to overcome this issue?
Any help here would be appreciated.
Regards
Karthikeyan Balamurugan
02-26-2020 09:05 AM
@karthikeyanBHave you checked if it is valid traffic? Do you have internal DNS in your environment?
Also you can verify below article to reduce DP Plane CPU.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS
Mayur
02-26-2020 10:26 AM
Yes it's genuine traffic and we have internal DNS server
02-27-2020 01:10 AM
Please follow above link given in my earlier reply and check if it helps you.
Mayur
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!