Windows Network Load Balancing Event 105

Question

I got the event log when deployed Windows Network Load Balancing (NLB) "NLB cluster [%2]: Timer starvation has been detected. This might be due to a denial of service attack or a very high server load. During this period, some connections might fail. If this problem recurs frequently, analyze the threat and take appropriate measures and/or add more servers to the cluster. An informational event log entry will be logged when the attack has subsided". I have checked the threat and no attack. Can any one help me to disabled NLB Protection or have any suggestion for this issue?
Thank you so much.

Answer 1

Hello @Danny Dao

I think this was an know issue related with the TMG version:

https://support.microsoft.com/en-us/topic/an-ipsec-vpn-site-to-site-tunnel-or-a-pptp-vpn-site-to-site-tunnel-does-not-work-if-you-enable-integrated-nlb-on-a-forefront-tmg-2010-array-b0dc04fc-7e71-285e-9577-ab658020caa9

You can also check the resolution provided in this article. It might be related too:

Event ID 105 — NLB Denial-of-service Protection
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc726481(v=ws.10)?redirectedfrom=MSDN

Hope this helps with your query!

--------
--If the reply is helpful, please Upvote and Accept as answer--