UDP out-of-order
My first post here and first of all, l want to say hello to everyone and of cause to Tom!
PAN-OS 8.1.10-h1
We have a weird issue where F5 keep shifting UDP packets for a given flow and sends them toward PA.
Below the clean and expected flow sent from the client:

It looks like, PA is doing it's best to receive, apply NAT and send packets in the correct order but still fails. Not all packets are sent in exactly the same order (based on the client-side capture above):

Checking the KB below, it looks like they all should be sent in the correct order:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClWeCAK
Does this mean PA is doing best efforts or that feature is broken?
Thanks,
myky
221 Views


I see, thanks Tom!
Under normal circumstances, the network device should not shuffle packets. Just trying to understand why they arrive out-of-order in the first place.