Description

When traffic hits application services that rely on TCP proxy in flowd, the object cache usage spikes and can result in dropped packets.

On SRX4200, SRX4600, SRX4700, and SRX5K-SPC3 platforms, configuring application services with TCP proxy can occasionally drive up object cache usage. Extremely high usage may trigger memory allocation failures, disrupting traffic processing.

Symptoms

Upgraded to 23.4R2-S3 or newer.Before upgrade, no issues.

After upgrade, when traffic load is high there's packet loss, vty "show arena" shows high SHM, "monitor security packet-drop" shows "FLOW:First path SM interest check"

Solution

Fix is expected for Junos releases:

23.4R2-S7

24.2R2-S3

24.4R2-S3

25.2R1-S2

25.2R2

25.4R1

Modification History

2025-11-24 : Article Created
2026-04-01 : Added 24.4R2-S3, as it's mentioned in Fix release of PR1895420