Palo Alto 3050 high DP and MP planes CPU utilization

[SutareMayur]

Hello Folks,

I have upgraded my palo alto HA cluster (model 3050) to version 9.0.3-h3. All of sudden i have started facing high dp as well as mp planes cpu utilization. There is no much traffic on the firewall. Connection table utilization is also around 20% in peak time. Wanted to check if it is anyone has come acrossed such issue..?

Thanks!

[kiwi]

Hi @SutareMayur .

Coming from which version exactly ?

Any particular reason why you opted for 9.0.3 instead of the recommended release 9.0.5 ?

What does show running resource-monitor tell you ?

What is the observed mgmt CPU%? Is it high all time ? Are you experiencing issues like GUI slowness or slow commits ?

Can you provide some more info ?

Cheers !

-Kiwi.

[SutareMayur]

We have upgraded from 8.1.4 to 9.0.3-h3 which was recommended by TAC and at that time, 9.0.5 was not released.

show running resource-monitor shows cpu load around 20-25% for slow and fast path.

CPU usage is varying but the value is slightly higher.  In last week, gateway itself got rebooted due to high load on data plane.  Also two days back, the GUI as well as CLI was taking time to load.

[OtakarKlier]

Hello,

What was the CPU usage before the upgrade? I also noticed a bit of an increase, but nothing that was breaking things. The new OS, 9.0.x, does have additional features and functions so there is a bit overhead, but nothing drastic. Also TAC can assist in determining where the CPU is being used.

Regards,

[SutareMayur]

Thank u for your reply.

Before upgrade, cpu was normal. Yes i am checking same with TAC too.

[SutareMayur]

Is anyone faced this behaviour??

Mayur