CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 2 of 2

Thread: ethtool -g Exp1-1 10Gig interface

  1. #1
    Join Date
    2006-09-26
    Posts
    3,134
    Rep Power
    15

    Default ethtool -g Exp1-1 10Gig interface

    From what I can tell, the 10Gig interface on checkpoint appliance can support up to 4096 RX and TX, however, the default in Checkpoint for RX and TX is set to 512 and 1024, respectively.

    What is going to happen if I set both the RX and TX to 4096? What are the Pro's and Cons for setting RX and TX value to 4096?


    [Expert@Power-1-S:0]# ethtool -g Exp1-1
    Ring parameters for Exp1-1:
    Pre-set maximums:
    RX: 4096
    RX Mini: 0
    RX Jumbo: 0
    TX: 4096
    Current hardware settings:
    RX: 512
    RX Mini: 0
    RX Jumbo: 0
    TX: 1024

    [Expert@Power-1-S:0]#

    TIA

  2. #2
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,194
    Rep Power
    13

    Default Re: ethtool -g Exp1-1 10Gig interface

    Quote Originally Posted by cciesec2006 View Post
    From what I can tell, the 10Gig interface on checkpoint appliance can support up to 4096 RX and TX, however, the default in Checkpoint for RX and TX is set to 512 and 1024, respectively.

    What is going to happen if I set both the RX and TX to 4096? What are the Pro's and Cons for setting RX and TX value to 4096?


    [Expert@Power-1-S:0]# ethtool -g Exp1-1
    Ring parameters for Exp1-1:
    Pre-set maximums:
    RX: 4096
    RX Mini: 0
    RX Jumbo: 0
    TX: 4096
    Current hardware settings:
    RX: 512
    RX Mini: 0
    RX Jumbo: 0
    TX: 1024

    [Expert@Power-1-S:0]#

    TIA
    Increasing ring buffer sizes is a last resort to combat excessive (IMHO >0.1%) RX-DRPs. If excessive RX-DRPs are encountered, the right way to address it is by increasing the number of SND/IRQ cores and/or enabling Multi-Queue. One can also increase the Gaia SoftIRQ "budget" but this is undocumented and unsupported by Check Point. Increasing ring buffer size is a last resort due to BufferBloat.
    --
    Second Edition of my "Max Power" Firewall Book
    Now Available at http://www.maxpowerfirewalls.com

Similar Threads

  1. Replies: 5
    Last Post: 2016-03-09, 11:53
  2. Replies: 0
    Last Post: 2015-10-06, 10:10
  3. 10Gig NICs do not show up during the GAIA R75.46 or R77.10 installation
    By cciesec2006 in forum Installing And Upgrading
    Replies: 1
    Last Post: 2014-02-07, 00:28
  4. ethtool and rxerrors
    By renuka in forum Check Point SecurePlatform (SPLAT)
    Replies: 4
    Last Post: 2010-03-04, 05:46
  5. mii-tool and ethtool
    By cciesec2006 in forum Check Point SecurePlatform (SPLAT)
    Replies: 6
    Last Post: 2008-09-11, 05:13

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •