Intel Connectivity Network Service is causing the ipv6 flowtable attribute set to 0

[elecman]

Dear all

I would like to report an issue that I notice on window 11 recently update 

2025-02-07|4.1025.207.1|0xff0000|0|0|Intel Corporation|Intel Corporation|Intel(R) Connectivity Performance Suite|SWC\VID_8086&PID_ICPS&SID_0002

In windows update it is called 'Intel Corporation - SoftwareComponent- 4.1025.207.1

Once the service  'Intel Connectivity Network Service' it will clean up ipv6 flow table when ssl handshake started, does not matter which nic customer are using, intel or no-intel and wired or no -wired nic. 

while ipv6 flow table got clean up it cause serious problem of ECMP setup big cloud network and flow has been randomly send to different backend device after tcp handshake was established. 

the issue can be reproduce on windows 11 + Intel Connectivity Network Service (Intel Corporation - SoftwareComponent- 4.1025.207.1) with following reproduce script 

$url="https://dev.azure.com";$interval=2;$timeout="1.0";$hostname=$url.split('/')[2].split(':')[0];$p=$url.split(':')[0];while ($true) {curl.exe -6 --tlsv1.3 --connect-timeout $($timeout) -s -w "remote_ip:%{remote_ip},dns_resolution:%{time_namelookup},tcp_established:%{time_connect},ssl_handshake_done:%{time_appconnect},TTFB:%{time_starttransfer},httpstatus:%{http_code},size_download:%{size_download}" $url -o "$($env:temp)\$($env:computername)_curl_$($p)_$($hostname)_result.html"|foreach {"{0},{1},{2}" -f (Get-Date).ToUniversalTime().ToString("yyyy-MM-dd HH:mm:ss"),$hostname,$_;"{0},{1},{2}" -f (Get-Date).ToUniversalTime().ToString("yyyy-MM-dd HH:mm:ss"),$hostname,$_|out-file "$($env:temp)\$($env:computername)_curl_$($p)_$($hostname).log" -append -encoding utf8; start-sleep $interval}}

expected result is 100% 200 ok, 

but we see failed situation like below, once disable Intel Connectivity Network Service  the issue is gone

Answer question in the previous post

• Please share the model name of the Ethernet adapter/controller. 
  HP laptop zbook firefly 14 inch G11 mobile workstation PC, BIOS HP W70 Ver 01.60.10 2025-05-30
  WIFI-6E AX211 160Mhz, actually it does not matter, as long as i have this WIFI 6E adapter,  Windows update will push software 
  "Intel(R) Connectivity Performance Suite" to my laptop and it will impact all NIC (usb/docker/ethernet) 
• Also, kindly provide the system information where it is being used. 
• Additionally, could you clarify what you were referring to by 'Intel Connectivity'?
  "Intel(R) Connectivity Performance Suite"
  https://www.intel.com/content/www/us/en/download/738623/intel-connectivity-performance-suite-icps-for-intel-wireless-products-and-intel-connectivity-manager-icm.html
  
  here is reproduce powershell script 
  you must have ipv6 enable on nic  (wireless/ethernet either one is fine). your network is able to resolve dev.azure.com as ipv6
  dev.azure.com [2603:1061:10:1::16] ,then you can reproduce when ICPS is installed (and Prioritization is set to ON)
  
•  

[Fikri_Intel]

Hi elecman,

Thank you for contacting Intel.

We appreciate you reaching out to us regarding the reported issue. To ensure you receive the most specialized assistance, we have a dedicated forum that addresses these specific concerns. 

Therefore, I will be moving this discussion to the respective team. 

This will allow our knowledgeable community and experts to provide you with timely and accurate solutions.

Regards,

Fikri O.

[KentRusselP_Intel]

Hi elecman,

Thank you for reaching out to the Intel Community Forum. I appreciate your message and want to assure you that I’m here to assist you with your concern. To better understand the issue and provide accurate support, could you please share the following details:

1. What type of IPv6 connectivity do you have?
2. Can you export the complete ICPS configuration?
3. Is there a pattern to when the 403/timeout errors occur?
4. You mentioned it affects "all NICs" - can you test with ONLY the Intel WiFi disabled and using a non-Intel USB Ethernet adapter?
5. Does the issue persist if you disable IPv6 on the Intel WiFi adapter but keep it enabled on other adapters? Can you capture the IPv6 flow table state before/during/after the SSL handshake using netsh int ipv6 show global or similar commands?
6. Are you able to monitor Windows Event Logs for any ICPS-related entries during the issue?
7. Besides "Intel Connectivity Network Service," are there other Intel services running that might be related? What happens if you set the service to "Manual" start instead of completely disabling it?

Additionally, to help us better understand your system configuration and provide accurate support, we kindly request that you share the Intel® System Support Utility (SSU) logs from your device. These logs contain important details about your hardware and software environment, which are crucial for troubleshooting.

Please follow these steps:

1. Download and run the Intel® SSU application.

2. The tool will generate a text file containing your system information.

3. Refer to this guide for detailed instructions: Help Guide for the Intel® System Support Utility

4. Once completed, please attach the generated file to your response.

If you have any additional questions or need further assistance, please don’t hesitate to contact us.

Best regards,

Kent Russel P.

Intel Customer Support Technician