CONTAP-819115: Node panic (watchdog timeout) during TLS handshakes with kTLS offload on AFF A1K
Issue
A node can panic with "
thread (ktls_handshakes) ... hung for 4001 milliseconds". The panic happens when many S3 TLS sessions are offloaded to one network port and a large number of new TLS handshakes arrive at the same time. The node stops and fails over. Before the panic, clients often see long handshake delays and timeouts, sometimes for 40 to 60 seconds during reconnect bursts.