NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] Performance Pack : Does it improve normal traffic (non-VPN)?



Hi,

Has anyone used the Firewall-1 Performance Pack on NG FP3, on 64-bit Solaris
SPARC?

We have a firewall which is passing a very large amount of traffic. These
are normal connections, not VPN connections. Essentially, the CPU load is
maxing out at high throughputs (but not as high as we need!) The load is in
the kernel, and we have performance profiles which show the two CPUs
colliding as they have to wait in turn to use one part of the firewall
kernel code which is not capable of "multi-threading" (name is fw_mutex).

We have been trying to get an answer to the following questions:

1. Does the performance pack increase the maximum traffic throughput for a
firewall running just normal traffic (not security servers or VPNs)?

2. Does the performance pack make allow multiple CPUs to run the firewall
kernel code for real benefit? i.e. this code is fully "multi-thread
capable".


Anyone's experiences, even if it's just "we put it on and the CPU load
dropped", would be nice to hear.

Thanks,
--
Gareth Randall
Internet Security Consultant  <[email protected]>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.