[FW-1] FW: Performance Pack : Does it improve normal traffic (non-VPN)?

[Internet Security Department <internet.security@FW1-NOSPAMUK.EASYNET.NET>]

Hi,

Has anyone on this list used NG Performance Pack at all?

(We understand that it is activated via a license key, rather than via a
software download.)


>  -----Original Message-----
> From:         Internet Security Department
> Sent: 28 August 2003 14:58
> To:   FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM
> Cc:   Internet Security Department
> Subject:      Performance Pack : Does it improve normal traffic (non-VPN)?
>
> Hi,
>
> Has anyone used the Firewall-1 Performance Pack on NG FP3, on 64-bit
> Solaris SPARC?
>
> We have a firewall which is passing a very large amount of traffic. These
> are normal connections, not VPN connections. Essentially, the CPU load is
> maxing out at high throughputs (but not as high as we need!) The load is
> in the kernel, and we have performance profiles which show the two CPUs
> colliding as they have to wait in turn to use one part of the firewall
> kernel code which is not capable of "multi-threading" (name is fw_mutex).
>
> We have been trying to get an answer to the following questions:
>
> 1. Does the performance pack increase the maximum traffic throughput for a
> firewall running just normal traffic (not security servers or VPNs)?
>
> 2. Does the performance pack make allow multiple CPUs to run the firewall
> kernel code for real benefit? i.e. this code is fully "multi-thread
> capable".
>
>
> Anyone's experiences, even if it's just "we put it on and the CPU load
> dropped", would be nice to hear.
>
> Thanks,
> --
> Gareth Randall
> Internet Security Consultant  <internet.security@uk.easynet.net>
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================