IPSec tunnel throughput drops to 0mbps after some time

[J.Ong047658]

While testing for maximum throughput over an IPSec tunnel, I noticed that after a while throughput drops to 0mbps. 

When the test started, both ends of the tunnel had about 4.5gbps throughput total. But at around the 18 minute mark of the test, the throughput dropped to 0mbps. It self recovered on one end but the other end did not. Subsequent tests had similar behaviours starting to occur at different times of the tests, as early as <1 minute into the test. 

I raised this issue to both the beta support team who directed me to CSP who then directed me here. 

Equipment: PA-1410

PAN-OS version: 12.1.1-b1

[JayGolf]

Hi @J.Ong047658 ,

Is this issue consistently reproducible? I would recommend, checking the dataplane utilization during the time of the drop. You can run a show running resource-monitor in the CLI. 

Additionally, in the CSP when you are creating a case, you should be able to push through the recommendations and create a support ticket. Please download the tech support file and upload that to your case. 

[J.Ong047658]

Hi Jay,

The issue is consistently reproducible across different packet sizes and number of streams. I'll need some time to check the dataplane utilization though.

As for CSP, I did manage to create a support ticket but support mentioned that they do not deal with machines that run on beta code or any issues that arise from performance testing.