Recover OOM Process and Restart
Focus
Focus
Prisma SD-WAN

Recover OOM Process and Restart

Table of Contents

Recover OOM Process and Restart

Break an out-of-memory reboot loop on a Prisma SD-WAN ION device by stopping the forwarding controller process and reducing memory-intensive configuration.
Where Can I Use This?What Do I Need?
  • Prisma SD-WAN (Managed by Strata Cloud Manager)
  • Prisma SD-WAN
An OOM (out-of-memory) condition causes the Linux kernel to kill the FC (forwarding controller) process, which triggers a reboot. If the configuration that caused the OOM condition is not addressed, the ION reboots again as soon as the FC process restarts, creating a loop. Common causes include a large number of security policy rules, prefixes, or zones. This procedure breaks the loop by stopping the FC process on the console, then reducing the configuration from Strata Cloud Manager.
Stopping the FC process drops all traffic through this ION device for the duration of the fix. The ION device has partial usability between reboot cycles. Plan this action before proceeding.
  1. Connect a console cable to the ION.
  2. Wait for the ION to provide console access after the next reboot cycle.
  3. Log in and stop the FC (flow controller) process to break the reboot loop by running the following command:
    debug process stop name=fc
  4. From Strata Cloud Manager, identify and reduce the configuration elements causing the OOM condition. Select ConfigurationPrisma SD-WANPoliciesSecurity Policy and reduce the number of rules, prefixes, or zones assigned to this ION device. For guidance on reducing memory usage in security policies, see Best Practices for Memory-Efficient Security Policies on ION Devices.
  5. Verify the controller connection is re-establishing by running the following command
    dump overview
    In the output, look for Controller Connection: Up. Wait for the controller status to show as connected before proceeding.
  6. Restart the FC process by running the following command:
    debug process start name=fc