Skip to main content

Illumio Core 25.1 Administration Guide

PCE Administration Troubleshooting Scenarios

This section describes issues that can arise during ongoing PCE operations and how to resolve them.

Transaction ID Wraparound in PostgreSQL Database

Symptom:

The PCE uses PostgreSQL databases to store data. Under certain conditions, PostgreSQL may issue warnings about transaction ID wraparound.

Warning

These messages indicate a very serious condition. The database is not functional, and the PCE will not work as expected. Immediate remediation from Illumio Support is required.

In illumio-pce.log and postgresql.log, look for messages like the following:

ERROR: database is not accepting commands to avoid wraparound data loss in database "<database_name>"
Stop the postmaster and vacuum that database in single-user mode.

Cause:

In a PostgreSQL database, transaction wraparound (also known as transaction ID exhaustion) can occur if a very large number of transactions have occurred and the transaction ID reaches its maximum possible value and is forced to begin again at zero. As a result, transactions from the past suddenly have a higher transaction ID than the current ID, and therefore appear to be in the future – and therefore inaccessible. The result is extreme loss of data. The database stops accepting requests. The only way to recover from transaction ID wraparound is to manually execute commands.

To avoid this situation, PostgreSQL provides an autovacuum feature which recovers disk space, by doing things like removing dead row versions, before transaction ID wraparound can occur. The PCE databases use the PostgreSQL autovacuum feature to prevent transaction wraparound. However, in the following situations, autovacuum might not succeed:

  • Vacuum did not run on the tables.

  • Temporary tables remained in the database, rather than being dropped as they should be. Temporary tables are not vacuumed.

For details about autovacuum and transaction ID wraparound, see the PostgreSQL documentation page Preventing Transaction ID Wraparound Failures.

Monitoring and Diagnosis:

Use the dbcheck tool to periodically monitor the system for early detection of any potential transaction ID wraparound condition. It is vital to act before the situation develops into transaction ID wraparound failure. See Monitor Database Replication.

Warning

If you find messages that indicate a risk of transaction wraparound, immediately contact Illumio Support for assistance.