Could HSCI be affected by a high dataplane utilization?
468
Created On 05/31/23 23:23 PM - Last Modified 10/31/25 19:25 PM
Symptom
As a result of high Dataplane usage, the HSCI port utilized as the HA2 link experienced an impact, leading to the emergence of the following problem: "HA2 keep alive are down"
Environment
- PA-5260
- PANOS-9.0.15-hx
- HA Environment
- HSCI port
Cause
Certainly - HSCI will experience repercussions due to the high utilization of dataplane resources.
In addition to all the in-band dataplane interfaces, the HSCI interface (employed for HA2) also connects to a shared chip that becomes inundated with queued packets when the dataplane packet buffers reach capacity.
Conversely, the dedicated HA1 interfaces, namely HA1-A and HA1-B, are not linked to the same chip and operate independently.
Resolution
It is important to note that since HA2 handles session synchronization and other real-time DP statistics/information, it becomes overwhelmed with the abundance of "sync" information/traffic during periods of high network load.
Additional Information
See more concepts regarding HSCI port:
HA Ports on Palo Alto Networks Firewalls