CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Crossbeam
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #21 (permalink)  
Old 2008-06-04
Junior Member
 
Join Date: 2008-06-04
Posts: 1
Rep Power: 0
farukaydin has an average reputation (10+)
Default Re: X80 performance 4 times less than C25!?

Hi Dragon,
How did you solve your SoftIRQ problem? I have same problem. I need some help.

Thanks,
Faruk
Reply With Quote
  #22 (permalink)  
Old 2008-06-12
Junior Member
 
Join Date: 2008-03-19
Posts: 16
Rep Power: 0
Dragon has an average reputation (10+)
Default Re: X80 performance 4 times less than C25!?

SUMMARY OF OPTIONS FOR CROSSBEAM PERFORMANCE IMPROVEMENTS

On both platforms: C25 and X80:
  • make sure that SecureXL is turned ON
  • if majority of traffic is HTTP, modify default object settings: in object properties, go to Advanced service properties in SmartDashboard and change Protocol type to "NONE"
  • turn off Sync in Cluster and logging for any non-critical sercives, for example HTTP
  • use sim affinity command to hardcode interface allocation to a specific CPU (details in this thread) *** new update - do for both not just C25 ***

For C25 / COS:
  • make sure that you are running R65 HFA02 or else you might experience packet drops on interface, check with netstat -i

For X80 / XOS
  • if NATing is used, make sure that reclassify-nat-flows is switched on
  • if you use VLAN tagging, make sure that hide-vlan-header is set on each tagged interface

Combination of these helped to reduce CPU load by approx 50%.

REMEMBER: With SecureXL switched ON tcpdump and fw monitor outputs won't be "correct" *** new update - works fine with R65 and above ***

Last edited by Dragon; 3 Weeks Ago at 22:52.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 02:14.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0