Issue and Symptoms
A race condition may occur when resources are being de-allocated for a virtual machine. This de-allocation occurs during VM shutdown or a vmotion action.
The race condition can be encountered more often on ESXi servers that have a large range of varying remote addresses (i.e. connections inbound) that are sending IP (any IP/IPv6) packets to a given VM(s). A list of tracked hosts grows in size, and when it is cleaned up, such as during VM shutdown or vmotion action, results in the holding of a lock for too long. The VMware kernel does not tolerate this resource hold. This results in a PSoD on the ESXi server, and requires a server reboot.
Because it is a race condition, it is not possible to predict if the situation will occur.
Potentially Affected Users
The following customers are affected:
- Customers using Deep Security Virtual Appliance (DSVA) 9.0 on ESXi 5.1 or 5.0
- Customers running any Deep Security network security feature (Firewall, Intrusion Prevention, Web Reputation)
Customers who are using only Anti-Malware or using DSVA 8.x will not experience this issue.