Hello, my Unraid 7.1.4 server has been crashing at least once a day, sometimes multiple times a day. I am unable to access the login page, it becomes unresponsive to pings or SSH, and all services stop working until I force shutdown. I figured out how to save the syslog to the flash drive. I think Docker is causing the issue, but I'm not sure how to fix it. Please let me know if I should change something. Specifically, I see lines like this in the syslog:
Oct 25 16:58:30 Tower kernel: docker0: port 18(veth7a065bb) entered blocking state

Oct 25 16:58:30 Tower kernel: docker0: port 18(veth7a065bb) entered forwarding state

Oct 25 16:59:12 Tower kernel: TCP: request_sock_TCP: Possible SYN flooding on port 10.96.0.31:42678. Sending cookies.

syslog-previous syslog

Edited October 26, 2025Oct 26 by ElTecnico
I added additional context and corrected spelling errors

what dockers are you running diad / syslog doen't give full story.

ITs normal to see docker sys log with a docker turns on making a veth .. if a docker is constanly stoping and starting that can ause a spam in the syslog...

so you need to find the culprit docker that is stoping and starting...

18 minutes ago, bmartino1 said:

what dockers are you running diad / syslog doen't give full story.

ITs normal to see docker sys log with a docker turns on making a veth .. if a docker is constanly stoping and starting that can ause a spam in the syslog...

so you need to find the culprit docker that is stoping and starting...

Thanks, I'll try that. I shut off most of them now and will see if it still crashes, then stop/start one at a time from here. My Docker image recently corrupted and I had to rebuild my containers. I wonder if it was caused by whichever docker container is still causing me issues. The list of my containers is below:

ActualServer

apprise-api

authentik

authentik-worker

dumbassets

Glance

GluetunVPN

HomeAssistant_inabox

immich

kopia

LubeLogger

nextcloud-aio-mastercontainer

Nginx-Proxy-Manager-JC21

NPMplus

paperless-ngx

Plex-Media-Server

Postgres12.5

PostgreSQL_Immich

Redis-authentik

Redis-paperless

redis-vouchervault

syncthing

UptimeKuma

VoucherVault

This could be weird network issues due to cross traffic with your reverse proxy and totp with authentik.

as multiple request could be crossing over and colliding with the process for your authentication and access to the webpage and setups.

I would double check your docker lgos on those dockers at those would be my high check potential problem with this setup.

are you separating docker bridges to unraid host IP or using custom br0?
https://bmartino1.weebly.com/guide-dockernetworks.html

There's nothing logged in the syslog previous other than starting the syslog server. Was that after a crash?

Also make sure this has been taken care of:

https://forums.unraid.net/topic/46802-faq-for-unraid-v6/page/2/#findComment-819173

6 hours ago, JorgeB said:

There's nothing logged in the syslog previous other than starting the syslog server. Was that after a crash?

Also make sure this has been taken care of:

https://forums.unraid.net/topic/46802-faq-for-unraid-v6/page/2/#findComment-819173

Yes, the syslogs were pulled from the flash drive as soon as I force rebooted. Your advice on the BIOS settings seemed to have worked, thank you so much! It's been up for a few hours now, but yesterday and earlier today it had gotten to the point of crashing every 10 minutes, even sitting idle with VMs and Docker containers off.

In case anyone else finds this: I also figured out my memory was going bad. I ran memtest and identified which stick was bad. My server would still crash after removing it until I changed the BIOS settings linked by JorgeB. Not sure if that made my problem worse or was related at all, but figured I'd mention it.

Thanks again! I have no idea what I would've done without this advice.