NFS hangs due to half-open TCP session
Applies to
- ONTAP
- NFS clients through a stateful firewall
Issue
- NFS operations hang the CLI, requiring a reboot to restore access to NFS mount e.g.
df
,ls
,umount
- Client error messages may include:
<linux-client> kernel: nfs: <server> 10.10.10.1 not responding, still trying
- Packet Traces indicate a repeating loop
- The client sends a TCP SYN reusing the same ephimeral port.
- ONTAP responds with a challenge ACK, expecting a TCP RST from the client.
- The challenge ACK, or RST, is blocked by the firewall; the client retransmits the SYN.