Environment:
MDS R80.20, Gateway R77.30 T216, Hardware 13800
Cores are not overloaded, stays around 30-60%
We see a lot a "hide NAT failure" messages in firewall logs. User reports latency and page not found at that time. Adding additional NAT addresses on the top of existing hide NAT addresses resolves the issue but my concern is the output of these commands that I am using to check the number of times each of my hide NAT is used.
[Expert@R77.30GTW]# fw tab -u -t connections | grep -ci bbxxxx0a
165032
[Expert@R77.30GTW]# fw tab -u -t connections | grep -ci bbxxxx0b
184938
[Expert@R77.30GTW]# fw tab -u -t connections | grep -ci bbxxxx0c
105793
Note: No errors messages or user complains at this point. Also note that these numbers have not changed uch in last few days, since the time we had the issues.
Are these numbers look real? If we divide the output by 2, still we are talking about 50K to 90K range that is theoretically not possible.
Is it possible that some connections got stuck, not getting released or something?