PowerScale: Problemer med NFS-ydeevne på grund af overbelastning af ICAP-server

Summary: NFS-ydeevnen påvirkes, mens antivirusscanningsindstillingerne "Scan ved åbning" eller "Scan ved lukning" er aktiveret, hvilket får ICAP-servere til at overbelaste.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Den påvirkning af ydeevnen på NFS, der er beskrevet i denne KB, gælder for en klynge, der er konfigureret med ICAP-servere. Kontroller først ICAP Antivirus-serverindstillingerne:
 

# isi antivirus icap settings view
 
           Fail Open: Yes
        Glob Filters: -
Glob Filters Enabled: No
Glob Filters Include: No
       Path Prefixes: /ifs/nasprod2024/smb
              Repair: No
       Report Expiry: 1W
       Scan On Close: Yes       <<<-- Enabled
        Scan On Open: Yes     <<<-- Enabled
Scan Cloudpool Files: No
   Scan Size Maximum: 100.00M
             Service: Yes
          Quarantine: Yes
            Truncate: No



Bekræft nfs-tråde, der venter på "av" eller "av_wait" i det generelle præstationsscript.
https://confluence.cec.lab.emc.com/display/ISILON/General+Performance+Troubleshooting
 

>>> Wait Channel Values<<<
11 av_wait
20 kqread
20 av
4 sbwait
1 opwres
4 sigwait
107 ucond


Bekræft i logmeddelelser på den berørte node inden for den berørte tidsramme.
 

  1. ICAP-servere overbelaster meddelelser i /var/log/messages
     
2025-05-06T17:42:20.639078-07:00 <0.5> nasprod2024-4(id4) /boot/kernel.amd64/kernel: [bam_av.c:1176](pid 14848="nfs")(tid=100543) Scan 1:155d:543d::HEAD failed with timeout (probably due to ICAP server overload); doing opdata cleanup with state: dequeued
2025-05-06T17:42:20.639138-07:00 <0.5> nasprod2024-4(id4) /boot/kernel.amd64/kernel: [bam_av.c:1176](pid 14848="nfs")(tid=100524) Scan 1:0c2e:9531::HEAD failed with timeout (probably due to ICAP server overload); doing opdata cleanup with state: dequeued
 
 
  1. Avscan coring og genstart n /var/log/messages 

 

2025-05-06T17:00:03.571382-07:00 <0.5> nasprod2024-1(id1) /boot/kernel.amd64/kernel: /lib/libthr.so.3:_pthread_create+0x906
2025-05-06T17:00:03.571392-07:00 <0.5> nasprod2024-1(id1) /boot/kernel.amd64/kernel: --------------------------------------------------
2025-05-06T17:00:03.571403-07:00 <0.6> nasprod2024-1(id1) /boot/kernel.amd64/kernel: pid 68624 (isi_avscan_d), jid 0, uid 0: exited on signal 11 from pid 0 (unknown) (core dumped)
2025-05-06T17:00:03.905443-07:00 <3.3> nasprod2024-1(id1) isi_avscan_d[63725]: [0x4d07b71b3000] Setting process flag P_NO_SEMLOCK for avscan
2025-05-06T17:00:03.905857-07:00 <3.4> nasprod2024-1(id1) isi_avscan_d[63725]: [0x4d07b71b3000] isi_avscan_d starting up
2025-05-06T17:00:03.949657-07:00 <3.4> nasprod2024-1(id1) isi_avscan_d[63725]: [0x4d07b71b3000] isi_avscan_d completed start up, ready...

 

  1. Avscan-logfiler viser tegn på en overbelastet ICAP-server
     
2025-05-06T17:38:58.867768-07:00 <3.6> nasprod2024-1(id1) isi_avscan_d[63725]: [0x4d07b7998200] Scan request timeout exceeded and dropped for 1:17c5:0b6e::HEAD, policy id: SCAN_ON_OPEN, report id: SCAN_ON_OPEN.
2025-05-06T17:38:58.868241-07:00 <3.6> nasprod2024-1(id1) isi_avscan_d[63725]: [0x4d07b71b4900] Scan request timeout exceeded and dropped for 1:17b7:6f7d::HEAD, policy id: SCAN_ON_OPEN, report id: SCAN_ON_OPEN.
2025-05-06T17:38:58.868439-07:00 <3.6> nasprod2024-1(id1) isi_avscan_d[63725]: [0x4d07b7997300] Scan request timeout exceeded and dropped for 1:0e78:89b3::HEAD, policy id: SCAN_ON_OPEN, report id: SCAN_ON_OPEN.


Bekræft den scannede sti ved hjælp af isi_get. For eksempel skal ovenstående LIN 1:0c2e:9531 fra meddelelsesloggen matche en NFS-eksportsti. 
 

A valid path for LIN 1:0c2e:9531::HEAD is /ifs/nasprod2024/nfs/libarc-p1/mysql/#ib_16384_0.dblwr

Cause

Kundens ICAP-servere overbelastes, når filer åbnes og lukkes. ICAP-vejledningen anbefaler mindst et forhold på 1:1.

PowerScale OneFS CLI-administrationsvejledning – ICAP-servere


 

Resolution

For øjeblikkelig lindring skal du deaktivere "scan ved åbning" og derefter teste ydeevnen.
 

# isi antivirus icap settings modify --scan-on-open=false


Hvis problemet fortsætter, skal du deaktivere "scan on close" og derefter teste ydeevnen.
 

# isi antivirus icap settings modify --scan-on-close=false


For permanent opløsning, og hvis ønsket er at aktivere begge indstillinger, skal du øge antallet af ICAP-servere.
 
Scan ved lukning er det anbefalede 1:1 ICAP-server-til-node-forhold.
 
Scanning ved åben er det anbefalede forhold mellem 2:1 ICAP-servere og noder. 

Affected Products

Isilon, PowerScale OneFS
Article Properties
Article Number: 000328556
Article Type: Solution
Last Modified: 30 Sept 2025
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.