Distributed Firewall DPU kernel CPU usage is very high

Products

• VMware vDefend Firewall

Issue/Introduction

 

Title: "Distributed Firewall DPU kernel CPU usage is very high"

Event ID: distributed_firewall.dfw_cpu_usage_very_high_on_dpu

Added in release: 4.0.0

Alarm Description

purpose/impact: This alarm indicates that CPU utilization on DPU is very high and we can expect performance degradation in firewall datapath.

 

Environment

VMware NSX

Resolution

 

Resolution

• • Maintenance window required for remediation: no
  • Steps to resolve:

    • Consider re-balancing the VM workloads on this host to other hosts.

    • Reduce firewall packet logging if possible.