UDP duplicate cache is at capacity

Logged when the duplicate cache cannot accept another RADIUS UDP request. Radiator discards the request so the client can retransmit it later. Fields identify the peer, client, packet identifier, and configured max_entries.

Each distinct accepted request occupies an entry until its cache lifetime expires. Capacity is reached when new request generations arrive faster than entries expire. Compare the server Requests and Replies rates and inspect source-address distribution. Rising backend Errors, Timeouts, or PoolExhausted usually indicates a slow or underprovisioned backend. Unexpected traffic concentrated by source can indicate a broken client, a retransmission storm, or a denial-of-service attack.

Increase max_entries when sufficient memory is available, or shorten the cache timeout and negative_timeout when the observed load is legitimate and the retransmission windows can be shorter.