cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Iron

Halting RAD requests handling / RAD reached maximum allowed concurrent request

Hello everybody,
we have had a support case running for a long time, but wanted to ask if anyone else still has the problem? The bug has been chasing us since R80 / currently with R80.40. br alois

0 Kudos
4 Replies
Highlighted
Silver

Re: Halting RAD requests handling / RAD reached maximum allowed concurrent request

I am not sure if it is the same, but sk103422 was a solution for an issue I had with RAD.

0 Kudos
Highlighted
Iron

Re: Halting RAD requests handling / RAD reached maximum allowed concurrent request

good day, many thanks for your answer - unfortunately that only works with r70 - the cache_size for url_filter / max_conn in guidbedit rad_services only works in r70 according to support and our experience. br alois

0 Kudos
Highlighted

Re: Halting RAD requests handling / RAD reached maximum allowed concurrent request

Please provide the exact error message you are seeing, as there have been a variety of issues with rad.  Most of the capacity issues seemed to get solved by this: sk163793: How to scale up requests/responses RAD handling rates

Make sure the DNS servers you have defined in Gaia on the gateway are speedy and working correctly by testing them with the nslookup command.  Having to wait for slow DNS service can cause issues with rad.

Also try running rad_admin stats on urlf then visiting the RAD screen of cpview which can be quite informative about how rad is working and give you hints about what issues it is having.  Don't forget to run rad_admin stats off urlf when done!  If rad is having issues, from a user perspective the most common impact to performance tends to be URLF due to its need to hold user connections and query the ThreatCloud, so I'd start there.

Finally, check for this corner case with URL filtering: sk90422: How to modify URL Filtering cache size?

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
0 Kudos
Highlighted
Iron

Re: Halting RAD requests handling / RAD reached maximum allowed concurrent request

hi, URLF - is not activated at all, the problem is related to AntiBot and DNS Trap. Also an interesting info - the URLF sk works only with R70x, also the RAD connection in the regedit makes no improvement, think the problem is that we have a lot of dns requests and the rad handler is pushing the limit here - and also for one week the cp support does not find the setting. br alois

0 Kudos