Last Modified: Nov 07, 2023
Known Affected Versions:
126.96.36.199, 15.1.9, 188.8.131.52, 15.1.10, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 16.1.4, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124
Opened: Jun 01, 2023 Severity: 3-Major
If a duplicate SYN arrives on a connection before the SYN/ACK is processed and the connection is pushed into PVA, when it is evicted from PVA it may stop passing traffic and be reset with the RST cause "Handshake Timeout".
Connection will stop passing traffic and resets when they are evicted from PVA.
- PVA enabled - Mirroring enabled - Duplicate SYNs on the network
Perform one of the following as a workaround: - Disable PVA - Disable mirroring - Modify sys db tm.fastl4_ack_mirror value to Disable - Modify sys db tm.fastl4_mirroring_taciturn value to Enable.