IRPStackSize and Clusters.

What is IRPStackSize? IRPStackSize stands for I/O Request Packets (IRPs) Stack Size.
The count of IRP stack locations used by default for AFD (Ancillary function driver).
Specifies how many stack locations the Server service (srv.sys) establishes for I/O Request Packets (IRPs).

On some Windows Server 2003 RTM/SP1/R2/SP2 Failover Clusters, it might be necessary to increase this number for certain transports or if you have many file system drivers (and kernel filter drivers such as antivirus programs) installed on the system.

Each stack uses 36 bytes of memory for each receive buffer (also known as a work item ).

This is more common on File Failover Clusters Servers, Print Failover Clusters Servers, and SQL 2005 Failover Clusters Servers.

In the System event log, you might see:
Event Type: Error
Event Source: Srv
Event ID: 2011
Date:  1/1/2008
Time:  12:00:00 AM
Computer: MachineName
The server’s configuration parameter “irpstacksize” is too small for the server to use a local device.  Please increase the value of this parameter.

And on the Cluster log, you might see the following error:
1/1/2008 12:00:00 AM 1 2055 1055 ClusSvc N/A MachineName(PhysicalNode) Cluster File Share resource
‘Share: FOLDERSHARENAME’ has failed a status check. The error code is 1130.

What is error code 1130?

C:>net helpmsg 1130

Not enough server storage is available to process this command.

Note:  Before proceding, please make a System State Backup using NTBackup, it only takes 3-5 minutes.
It will save you a lot of headaches.

Click on Start, Run, Regedit
Click Edit, point to New, and then click DWORD Value.
Type IRPStackSize , and then press ENTER to name the value.

Note: Type IRPStackSize exactly as it is displayed.
The value name is case sensitive.

Radix: Decimal
Value data: 20 (increase by increments of 2 if the problem persists)

WARNING: Do not set to 32 Decimal or higher which might cause network related issues.

When you get a chance, stop and restart the server service.
Note: When you stop the server service, your network shares will be temporarily unavailable.

This remains the same in Windows Server 2008.

More information:
285089 Description of the IRPStackSize parameter in Windows 2000, in Windows XP,
and in Windows Server 2003

198386 Changes in IRP Stack Size in Lanman Server

177078 Antivirus software may cause Event ID 2011

106167 Error message: “Not enough server storage is available to process this command”

Author: Yong Rhee
Support Escalation Engineer
Microsoft – Windows Server – Enterprise Platforms Support – Core team (Setup, Cluster and Performance)