This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED Service drops packets with error: too much work queued, dropping packet

Hi Community, we have a UTM that has 35 red tunnels connected (configuration: all split tunnel) , each red has 10-20 clients to handle, most of them connected simultaneously.

Since a few days the tunnels are randomly dropping packages, they don't even appear in 'conntrack' anymore. However kernel dmesg contains various warnings. The license we use has "unlimited connections".

Kernel dmesg error log:

[13496615.819898] RED: red_tunnel_xmit: tunnel id 12, too much work queued, dropping packet
[13496642.261429] RED: red_tunnel_xmit: tunnel id 34, too much work queued, dropping packet
[13496680.631771] RED: red_tunnel_xmit: tunnel id 7, too much work queued, dropping packet
[13496801.900976] RED: red_tunnel_xmit: tunnel id 17, too much work queued, dropping packet
[13496928.608491] RED: red_tunnel_xmit: tunnel id 3, too much work queued, dropping packet

Someone has a clue how we can increase reds work query performance? Please let me know. I found no information on the web about this issue. Any help is appreciated.



This thread was automatically locked due to age.
  • Hallo Patrick and welcome to the UTM Community!

    Which Sophos appliance are you using?  If not, tell us the amount of RAM and the number of processor cores and their speed.  Also the uplink speed of your UTM's Internet connection.

    Check ut #1 in Rulz (last updated 2021-02-16) and let us know if there are any related lines in the Intrusion Prevention log.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA