IPsec packets are dropped or fail to pass with QAT enabled

There is a known incompatibility between QAT and VT-d on some platforms which can prevent IPsec traffic from passing when QAT acceleration is enabled. See Disable VT-d in the BIOS for details.

Console DMA / PTE Read access Error Messages

Errors similar to the following may appear on the console:

[110772.063766] DMAR: [DMA Read] Request device [04:01.0] fault addr 406482000
   [fault reason 06] PTE Read access is not set
[110773.059440] DMAR: DRHD: handling fault status reg 102

The cause is likely an incompatibility between an enabled QAT device and VT-d in the BIOS. See Disable VT-d in the BIOS for details.

Console Messages Obscure Prompts

When connected to the console of a TNSR device, such as the serial console, the kernel may output messages to the terminal which obscure prompts or other areas of the screen. This is normal and an expected effect when using the console directly.

To work around this intended behavior, use one of the following methods:

  • Press Ctrl-L to clear or redraw the screen without the messages.

  • Press Enter to receive a new prompt.

  • Run sudo dmesg -D from a shell prompt or with the TNSR shell command, which will disable kernel output to all consoles.

  • Connect to the TNSR device using SSH instead of the console.