Description

This article provides information about the SRX message - kern.maxfiles limit exceeded by uid 65534, please see tuning(7)


Symptoms

Two symptoms have been observed when the following message is seen:

kern.maxfiles limit exceeded by uid 65534, please see tuning(7)

Symptom 1
  • Device is accessible only via Console.
  • Production traffic is not affected by this scenario.


Symptom 2
  • Users could not web browse through the Primary SRX FW.
  • Console would not respond to CLI commands, Failing over to the Secondary SRX FW allowed users to send across traffic.
  • Old Primary (current Secondary) had to be rebooted to regain the Console CLI access.
  • eventd and idpd coredumps were generated.


In the UTM relay module, within forwarding process, close on the fd (file descriptor) is missing under the condition when there is no data to fetch for the open fd. The output of the following commands will help find information about the files open on the system:
sysctl -a | grep files
fstat

Solution

 

Workaround :

The restart forwarding command will release open fd in forwarding process. This will recover the system until fd leak builds up again.


Fix:

This issue has been resolved in 10.4R6,11.1R4, 11.2R1 ,11.4R1 and onwards releases. The fix is applicable for HA as well as the stand-alone mode.
Also, see PR674511 .