Bad throughput on NGX R65 cluster

[drhex2000]

Hi group,

I am running a NGX R65 UTM cluster on Dell SC1425s and the boxes are *** S L O W *** (about 10kB/s) throughput on FTP to external directly on the FW boxes. Any known issues there?

Thanks in advance,

Florian

[abusharif]

first step - check the interface for errors on the firewalls and the switch ports these are connected to and adjust accordingly if errors are found

[drhex2000]

Hi Abu,

many thanks for the quick reply!
All interfaces are hardset to 100,fd,auto off and show no drops or errors whatsoever. Also the CPU load stays at 0-1%. top shows similar results.
I have absolutely no idea what these boxes are doing.

Thanks again,

Florian

[abusharif]

Originally Posted by drhex2000

Hi Abu,

many thanks for the quick reply!
All interfaces are hardset to 100,fd,auto off and show no drops or errors whatsoever. Also the CPU load stays at 0-1%. top shows similar results.
I have absolutely no idea what these boxes are doing.

Thanks again,

Florian

its only ftp thats causing this problem or other traffic as well?

[drhex2000]

All traffic is really slow (users complaining). I just used FTP directly from the gateway machines, as this is the easiest way for me to get some BW measurements.

Thanks,

Florian

[dantro]

(1) Place a macbook/notebook between your firewall and your ISP router. Check your connection performance. If it's slow, call your ISP.
(2) If the connection is faster than behind the firewall cluster, fire up SmartView Monitor. Review the live statistics for unexpected traffic from outside/inside.

Check "mii-tool -w" and "cphaprob stat" for a while. Maybe an interface has a problem and goes up&down. Watch top for swapping memory.

Best regards,
Danny Trommer
CCSA/CCSE/CCSE+

[drhex2000]

Hi Danny,

I found advanced routing being enabled on one node, disabling that got me to 1 Mbit (which might now be throttled by the internet as a whole). Will continue to look, maybe this was the reason...
Many thanks for your help Danny!
Best regards,

Florian

[drhex2000]

OK, found the main reason and it had nothing to do with Checkpoint, my ISP had a router misconfiguration.

Thanks again to Danny,

Florian