DNS Application uses more DP CPU utilization

[karthikeyanB]

Hi,

We are facing issue with DNS Application, it uses more DP CPU Utilization 60 to 70%.

We have done DNS Application override but no luck.

Please find the DNS Session details below.

Mem-Pool-Type MaxSz(KB) Threshold MinSz(KB) CurSz(B) Cur.Alloc Total-Alloc Fail-Thresh Fail-Nomem Local-Reuse(cache)
dns 2048 80023 1024 830152 10012 279410 0 0 23472 (5)

Cache-Type MAX-Entries Cur-Entries Cur.SZ(B) Insert-Failure Mem-Pool-Type
dns 7936 0 0 0 proxy
dns_v4 10000 10000 829576 0 dns
dns_v6 10000 0 0 0 dns
dns_id 1024 12 576 0 dns

show running application statistics
===================================
App (report-as) sessions packets bytes app changed threats

dns 617738743 2661297868 269003342139 0 0
dns-over-https 144 3304 928999 145 0
DNS_Custom 914095 3979943 370509720 0 0
google_Custom 11823 1441034 876588498 0 0
google_Custom-1 105603 953550 198205705 105725 0
google_Custom-2 169 1735 380693 482 0
google_Custom-3 1 10 2237 6 0
google_Custom-4 15447 142899 31053748 15573 0
alipay 213 8487 3887252 214 0

How to reduce the DNS session count or any other alternative way to overcome this issue?

Any help here would be appreciated.

Regards

Karthikeyan Balamurugan

[SutareMayur]

@karthikeyanBHave you checked if it is valid traffic? Do you have internal DNS in your environment? 

Also you can verify below article to reduce DP Plane CPU.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS

Mayur

[karthikeyanB]

Yes it's genuine traffic and we have internal DNS server

[SutareMayur]

Please follow above link given in my earlier reply and check if it helps you.

Mayur