question

DannyDao-0818 avatar image
0 Votes"
DannyDao-0818 asked VladimirGomez-6672 commented

Windows Network Load Balancing Event 105

I got the event log when deployed Windows Network Load Balancing (NLB) "NLB cluster [%2]: Timer starvation has been detected. This might be due to a denial of service attack or a very high server load. During this period, some connections might fail. If this problem recurs frequently, analyze the threat and take appropriate measures and/or add more servers to the cluster. An informational event log entry will be logged when the attack has subsided". I have checked the threat and no attack. Can any one help me to disabled NLB Protection or have any suggestion for this issue?
Thank you so much.

windows-server
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered VladimirGomez-6672 commented

Hello @DannyDao-0818

I think this was an know issue related with the TMG version:

https://support.microsoft.com/en-us/topic/an-ipsec-vpn-site-to-site-tunnel-or-a-pptp-vpn-site-to-site-tunnel-does-not-work-if-you-enable-integrated-nlb-on-a-forefront-tmg-2010-array-b0dc04fc-7e71-285e-9577-ab658020caa9

You can also check the resolution provided in this article. It might be related too:

Event ID 105 — NLB Denial-of-service Protection
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc726481(v=ws.10)?redirectedfrom=MSDN

Hope this helps with your query!


--If the reply is helpful, please Upvote and Accept as answer--

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

This solution does not work for us, I have a scenario with two servers. There have to be a way to disable the DofS Protection.

0 Votes 0 ·