We are also seeing the same issue. Thought that after this client patch (it went into
4.20)
https://www.spinics.net/lists/linux-nfs/msg69633.html
Client would have started to honor the RPCSEC_GSS window but we are hitting this issue
even on kernel versions 5.xx
The only solution which mitigates it somewhat is to limit the in-flight RPCs that the
client can have by tweaking tcp_max_slot_table_entries (for example to 16 or 32) and along
with that change the GSS window size in Ganesha to 256. Max_slot_table_entries guarantees
the in-flight rpcs, but it doesn't guarantee the sequence limits. For example, if some
of the requests take unusually long time than the16 in-flight RPCs can have the sequence
numbers which might not fit into 256.