Lightspeed accelerated connection problems after R81.20 JHF Take 111

[hti]

Hello,

is anybody else experiencing issues with lightspeed accelerated connections after upgrading to R81.20 JHF Take 111 or 113?

We've been running R81.20 JHF Take 98 with some custom hotfixes on QLS450 and it was quiet stable. After upgrading to JHF Take 111 lightspeed accelerated connections do not work. They are not shown as dropped but packets just disappear.

To rule out any issues with the custom hotfixes we performed a clean install on R81.20 JHF Take 113 and still have the same problems. By disabling the low latency mode a lot less connections are lightspeed accelerated and the packet loss is reduced. No error message in the log files.

Checkpoint support was unable to recreate the issue so far but as it affects a clean install with just the firewall blade enabled I suspect there are a lot more customers affected.

Any help is appreciated.

Best regards,
hti

[PhoneBoy]

That sounds like a possible UPPAK-related issue.
In any case, keep us posted.

[Lesley]

fwaccel stat ouput?

You run it as security gateway, maestro, vsx or vsxnext?

QLS450 need special image did you keep this in account?

Why installation of take 113 if 118 is now recommended? 

Any crashes here ? /var/log/dump/usermode/

[hti]

Hi Lesley,

it's hard to gather fwaccel stat output while the gateway is active, as we loose connectivity when doing so. We will capture fwaccel stat output in our next maintenance from the serial console.

The QLS450 is running as a security gateway with only the firewall blade active.

We did take the wrong blink image when doing the clean install, indeed! Thanks for pointing this out! We will try again using the correct image. 

Take 113 was the recommended take a few weeks ago when we reimaged the appliance. We will upgrade to take 118 after the clean install with the correct image.

No crash dumps in /var/log/dump/usermode/

[Lesley]

Ok, for the crash files I was thinking about: https://support.checkpoint.com/results/sk/sk180298

I don't see any relevant fixes in take 118 for this issue

Might be worth to run also hcp -r all during issue (if possible)

Is all traffic affected or only VPN traffic? 

Extra tip, if you are troubleshooting and see high load with top, uptime etc this is normal -> https://support.checkpoint.com/results/sk/sk180299

Take 98 was not a good take for you, they fixed this in your current higher take. Maybe this is now bothering you (this was a critical bug)

https://support.checkpoint.com/results/sk/sk183181

[the_rock]

Did you open TAC case for it?