NFS hangs due to half-open TCP session
Applies to
- ONTAP
- NFS
- Stateful firewall
Issue
-
NFS Operations Hang:
- NFS operations hang, requiring a reboot to restore access to the NFS mount.
- e.g.
df
,ls
, andumount
- e.g.
- Client error:
- e.g.
<linux-client> kernel: nfs: <server> not responding, still trying
- e.g.
- NFS operations hang, requiring a reboot to restore access to the NFS mount.
- Packet Traces indicate a repeating loop
- The client sends a TCP SYN reusing the same ephemeral port.
- ONTAP responds with a challenge ACK, expecting a TCP RST from the client.
- The challenge ACK or RST is blocked by the firewall, causing the client to retransmit the SYN.
- Behavior is often seen after a Firewall upgrade/reboot.