| Previous | Next |
| ERROR_IPSEC_DOSP_NOT_INSTALLED | ERROR_SXS_SECTION_NOT_FOUND |
ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES
The limit applies to fairness queues, not authenticated flow entries
ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES means the feature could not allocate another per-internal-address queue for unauthenticated IPv6 IPsec traffic. These queues implement the per-IP rate limit configured by IpV6IPsecUnauthPerIPRateLimitBytesPerSec; they are separate from authenticated connection state governed by MaxStateEntries.
Inspect how many distinct internal IPv6 destinations are receiving unauthenticated traffic and how long idle queues are retained. A scan across many internal addresses can exhaust queues even when each address receives little traffic. Tune MaxPerIPRateLimitQueues together with PerIPRateLimitQueueIdleTimeoutSeconds, and consider narrowing the protected private address range. Disabling per-IP limits removes isolation between destinations and is not equivalent to adding capacity.
Queue-specific diagnostics
- Count distinct internal destination addresses generating per-IP queues.
- Compare the queue maximum with the configured private address scope.
- Review idle timeout to ensure abandoned queues are reclaimed promptly.
- Look for address-sweep behavior before increasing the maximum.
References
- Microsoft: per-IP rate limits, queue maximum, and timeout
- Microsoft: low-level DoSP queue fields
- Microsoft: CIM properties for per-IP queue limits
Looking for a different code? Search another status or error code.