Distributed Firewall CPU usage very high Alarm

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

Title: Alarm for distributed_firewall.dfw_cpu_usage_very_high
Event ID: distributed_firewall.dfw_cpu_usage_very_high

Alarm Description

• Purpose: Distributed Firewall kernel CPU usage is very high.
• Impact: In this case, we can expect performance degradation in distributed firewall datapath.

Environment

VMware NSX-T Data Center

Resolution

Steps to Resolve

For 3.0.0 and higher

Recommendations:

Consider re-balancing the VM workloads on this host to other hosts.

Maintenance window required for remediation? No

 

Additional Information

'Migrating Virtual Machines' Admin Guide Documentation:

 

 

vSphere 7.0 - https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/7-0/vsphere-virtual-machine-administration-guide-7-0/managing-virtual-machinesvm-admin/migrating-virtual-machinesvm-admin.html

vSphere 8.0 - https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/vcenter-and-host-management-8-0/migrating-virtual-machines-host-management/migration-with-vmotion-host-management.html

vSphere 9.0 - https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/9-0/vcenter-and-host-management/migrating-virtual-machines-host-management/migration-with-vmotion-host-management.html