An internal software issue on SRX5000 Series and SRX4600 platforms may cause traffic to be unexpectedly subjected to AppQoS rate limiting when PowerMode IPsec (PMI) is enabled. As a result, traffic that is not intended to be rate limited may exceed the configured AppQoS limits and experience packet drops.

This issue existed prior to Junos OS 21.3; however, PMI became enabled by default starting in Junos OS 21.3, making the issue more likely to be observed.

You may observe unexpected packet drops, reduced throughput, or application traffic being impacted even though the traffic is not expected to match AppQoS rate-limiting policies.

This issue may occur when:

• The device is an SRX5000 Series or SRX4600.
• AppQoS rate limiting is configured.
• PMI is enabled.

This issue is resolved in the following releases:

• 22.4R3-S6
• 23.2R2-S3
• 23.4R2-S4
• 24.2R2
• 24.4R1
• 24.4R2
• 25.2R1 and later

Workaround: Disable PMI

https://prsearch.juniper.net/problemreport/PR1828819