Alarm for very high Enhanced Datapath flow table usage in NSX.

Products

• VMware NSX Networking

Issue/Introduction

Title: Alarm for very high Enhanced Datapath flow table usage.
Event ID: esx_health.enhanced_dp_flow_table_usage_very_high
Fixed in the release: 4.2.0
Alarm Description

• Purpose: There is at least one flow-table on the Host in which more than 95% of entries are filled.
• Impact: Slower traffic or packet drop would be observed due to flow miss as there is high chance new flow entry creation could fail.

Cause
If the number of active flows exceeds the flow-table size, or if there are many short-lived connections coming in, the flow tables can fill up. Increasing the flow table size is beneficial when the number of active flows is stable over time. However, this might not improve performance in cases where short-lived connections continuously come in. In such scenarios, the flow table might always be full, regardless of its size.

Note: This article is for very-high-usage (above 95% occupancy). For high-usage (90-95% occupancy), please refer to KB Article 345796 

Script Settings

Minutes to Remind:
Hours to Remind:
Auto Refresh Interval (seconds):
Auto Refresh:
Auto Check-In:
Check-In Time:
Check-Out Time:
Template File:
Save

Open Trumbowyg

▶

Environment

VMware NSX-T Data Center

Resolution

For Enhanced Datapath (EDP) host switch mode, consider increasing the flow table size by invoking the following command, if performance degradation is observed.

'nsxdp-cli ens flow-table size set -s $NUM_ENTRIES'
$NUM_ENTRIES must be a power of 2. Host must be rebooted.

Increasing the number of flow entries doesn't always improve performance, if short lived connections keep coming in. The flow table might be always full regardless of the flow table size. A large flow-table size wouldn't help in this case. EDP has a logic to detect this and automatically enable and disable flow tables to handle such a case.
Increasing the number of flow entries may increase the memory footprint.

Additional Information

API Guide: https://developer.vmware.com/apis/1583/nsx-t
Admin Guide: https://docs.vmware.com/en/VMware-NSX/4.1/administration/GUID-72C2F2B2-7DC6-49A2-AD74-2FBAC93E3FAC.html

Script Settings

Minutes to Remind:
Hours to Remind:
Auto Refresh Interval (seconds):
Auto Refresh:
Auto Check-In:
Check-In Time:
Check-Out Time:
Template File:
Save

Open Trumbowyg

▶