Inter-site IPsec tunnel collapses when ONTAP flexcache traffic is traversing it
Applies to
- ONTAP 9
- Flexcache
- IPsec tunnel with insufficient ability to handle the high number of connections / packets per second that Flexcache imposes
Issue
- When deploying an IPSec tunnel between sites, a Flexcache configuration in ONTAP may contribute dramatically more TCP sessions, as well as packets per second than other services, causing higher impact to tunnel stability than other workloads
- This could result in packet loss or other performance degradation for the IPsec tunnel if the underlying infrastructure lacks the needed resources to accommodate all of that traffic
