ASR1k UDP Nat translation issues

[divadko]

Hi all,

i have problem on ASR1006 with DNS packet translations that occours every 3 weeks after "clear ip nat translations"

Symptoms are laggy web loadding. Need to refresh browser several times to load the page.

TCP translations are ok. Only UDP have extreme latency and drops.

Have you any idea what should case this?´ and how to fix it?

Only solution to solve it is "clear ip nat translations"

The udp latency translation is for all private ips that are mapped to one same public IP.

Clearing translations for customer only wont help

[marce1000]

 - Always useful to check software version running and compare to latest advisory release. Upgrade  , if applicable , and check if that can lead to improvement , 

 M.

[divadko]

I cant find any info in changelogs for this problem.

I am using asr1000rpx86-universalk9.16.09.07.SPA.bin"

[marce1000]

             >...I can find any info in changelogs for this problem.
                        - Despite that , it is still worth trying , 

 M.

[paul driver]

Hello
Can you confirm your existing nat translation timeouts, it may be worth tweaking the default values and max -entries 

Example:
ip nat translation 300 (default 86,400 secs)
ip nat translation udp-timeout 300 (default 300 secs)
ip nat translation dns-timeout 45 (default 60)
ip nat translation tcp-timeout 2500 (default 86,400 secs)
ip nat translation finrst-timeout 45 (default 60 secs)
ip nat translation icmp-timeout 45 (default 60 secs)
ip nat translation syn-timeout 45 (default 60 secs)
ip nat translation max-entries 1000 (default unlimited)

[divadko]

I am using default values for timers.

I am also using ip nat translation max-entries 5000

I have issues only with DNS translation and only on 1 WAN ip from pool. But it is changing after clear translation

And problem repeats after 2 weeks after clearing translations...