SUMMARY OF OPTIONS FOR CROSSBEAM PERFORMANCE IMPROVEMENTS On both platforms: C25 and X80:- make sure that SecureXL is turned ON
- if majority of traffic is HTTP, modify default object settings: in object properties, go to Advanced service properties in SmartDashboard and change Protocol type to "NONE"
- turn off Sync in Cluster and logging for any non-critical sercives, for example HTTP
- use sim affinity command to hardcode interface allocation to a specific CPU (details in this thread) *** new update - do for both not just C25 ***
For C25 / COS:- make sure that you are running R65 HFA02 or else you might experience packet drops on interface, check with netstat -i
For X80 / XOS- if NATing is used, make sure that reclassify-nat-flows is switched on
- if you use VLAN tagging, make sure that hide-vlan-header is set on each tagged interface
Combination of these helped to reduce CPU load by approx 50%.
REMEMBER: With SecureXL switched ON tcpdump and fw monitor outputs won't be "correct"
*** new update - works fine with R65 and above ***