AWS Security ChangesHomeSearch

AWS sap documentation change

Service: sap · 2026-03-07 · Documentation medium

File: sap/latest/sap-hana/fsx-host-scaleup.md

Summary

Added steps to configure NFS client parameters for faster failover detection and reduced I/O errors during FSx for ONTAP failovers, similar to scale-out documentation

Security assessment

Similar to scale-out changes, these updates focus on improving system reliability during failovers without addressing specific security vulnerabilities. The modifications aim to prevent operational issues rather than security exploits.

Diff

diff --git a/sap/latest/sap-hana/fsx-host-scaleup.md b/sap/latest/sap-hana/fsx-host-scaleup.md
index e159f8809..9b52f3307 100644
--- a//sap/latest/sap-hana/fsx-host-scaleup.md
+++ b//sap/latest/sap-hana/fsx-host-scaleup.md
@@ -30,2 +30 @@ The following section is an example host setup for SAP HANA scale-up deployment
-Create a file named `91-NetApp-HANA.conf` with the following configurations in the `/etc/sysctl.d` directory.
-    
+  1. Create a file `/etc/sysctl.d/91-NetApp-HANA.conf` with the following configurations
@@ -43,0 +43,12 @@ Create a file named `91-NetApp-HANA.conf` with the following configurations in t
+    sunrpc.tcp_slot_table_entries = 128
+
+  2. To reduce I/O errors during failover of FSx for ONTAP Single-AZ file systems, including [planned maintenance windows](https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/maintenance-windows.html) create an additional file `/etc/sysctl.d/99-fsx-failover.conf`. These parameters optimize NFS client behavior to detect and respond to failover events more quickly.
+    
+        # NFS client optimizations for faster failover detection
+    # Replace 'default' with your interface name (e.g., eth0, ens5) to target a specific interface
+    net.ipv4.neigh.default.base_reachable_time_ms = 5000
+    net.ipv4.neigh.default.delay_first_probe_time = 1
+    net.ipv4.neigh.default.ucast_solicit = 0
+    net.ipv4.tcp_syn_retries = 3
+
+For more information and options, see [Troubleshooting I/O errors and NFS lock reclaim failures](https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/nfs-failover-issues.html).
@@ -45 +56 @@ Create a file named `91-NetApp-HANA.conf` with the following configurations in t
-Increase the max sessions slots for NFSv4 to 180.
+If these errors occur, in some cases they may cause SAP HANA to perform an emergency shutdown of the indexserver process to protect database consistency.
@@ -46,0 +58 @@ Increase the max sessions slots for NFSv4 to 180.
+  3. Increase the max sessions slots for NFSv4 to 180.
@@ -50 +62,4 @@ Increase the max sessions slots for NFSv4 to 180.
-You must reboot your instance for the kernel parameters and NFS settings to take effect.
+
+
+
+To activate these changes, run `sysctl -p` for the kernel parameters and reload the NFS module, or reboot the instance during a planned maintenance window (recommended).