topic Re: CoreXL Dynamic Balancing & HyperFlow in SmartConsole Extensions

CoreXL Dynamic Balancing & HyperFlow

Danny — Wed, 08 Feb 2023 09:14:35 GMT

👨‍💻 Reviewed by Check Point
ℹ️ Supported on CP Enterprise Appliances

SmartConsole Extension to manage sk164155 - Dynamic Balancing for CoreXL & HyperFlow.

Extension URL

https://dannyjung.de/ds.json

Dynamic Balancing Managers

@AmitShmuel - Amit Shmuel
@Chen_Muchtar - Chen Muchtar (TechTalk: Dynamic Workloads, Quantum Hyperflow)
@eladni - Elad Niddam

Re: SmartConsole Extension - CoreXL Dynamic Balancing

Guy_Maoz — Wed, 04 Nov 2020 09:54:43 GMT

Great extension Danny!

Looking forward to the next update.

Re: SmartConsole Extension - CoreXL Dynamic Balancing

Chen_Muchtar — Wed, 04 Nov 2020 19:26:37 GMT

Awesome!

Re: SmartConsole Extension - CoreXL Dynamic Balancing

AmitShmuel — Wed, 04 Nov 2020 19:35:24 GMT

Thanks Danny! This is super useful!

Re: SmartConsole Extension - CoreXL Dynamic Balancing

Mark_Gurevich — Wed, 24 Feb 2021 18:57:01 GMT

Seem to be a great tool. But I am getting "Unsupported" for all kind of appliances (obviously R80.40 )

Re: SmartConsole Extension - CoreXL Dynamic Balancing

_Val_ — Wed, 24 Feb 2021 20:02:35 GMT

From sk164155

System requirements

Supported Platforms: Dynamic Balancing is supported only on Check Point Appliances.
Supported Models: Dynamic Balancing is supported only on these models:
- All models in these series: 7000, 15000, 16000, 23000, 26000 and 28000
- 5000 series: 5600, 5800 and 5900
- 6000 series: 6200T, 6400, 6500, 6600, 6700, 6800 and 6900
- 3000 series: 3100, 3200, 3600 and 3800
Note: On models with fewer than 8 cores, a GNAT port allocation feature must be enabled. Refer to sk165153.
Supported versions: Check Point R80.40 with Jumbo Hotfix Take 25 and higher
Supported configurations: Security Gateway (Kernel or USFW), Stand-Alone
Supported features: IPv6, Management Data Plane Separation (MDPS), Bridge mode
Not supported: Check Point Appliances that run in VSX mode (regardless of the number of CPU cores), Check Point Maestro

Re: SmartConsole Extension - CoreXL Dynamic Balancing

Mark_Gurevich — Thu, 25 Feb 2021 09:08:32 GMT

Hi Val,

I am trying on 5000 and 26000 devices with R80.40. Non VSX

Re: SmartConsole Extension - CoreXL Dynamic Balancing

Danny — Thu, 25 Feb 2021 09:19:55 GMT

HI @Mark_Gurevich ,

please try my helper extension https://dannyjung.de/smx.json and check if these conditions are met:

['type'] == 'CpmiClusterMember' or 'simple-gateway' ['os-name'] == 'Gaia' ['version'] == 'R80.40' or startsWith('R81') ['hardware'].endsWith('Appliance') or ('Appliances')

Re: SmartConsole Extension - CoreXL Dynamic Balancing

Mark_Gurevich — Thu, 25 Feb 2021 09:31:00 GMT

Hi Danny,

Thanks for quick reply.

Not sure how, but after upgrading the SmartConsole to the latest build, everything started to work

Re: CoreXL Dynamic Balancing

pnormanmtvh — Sat, 20 Mar 2021 14:24:34 GMT

HI,

I have a quick query re: the extension. I have added it and it works to a point. I have to 'Load' it; approve the script commit, the look at the task results. In other words I don't see the output in the window as shown in my attached screenshot. I am running the 80.40 SmartConsole Build 416.

Thanks

Paul Norman

Re: CoreXL Dynamic Balancing

Neil_Deane — Thu, 22 Apr 2021 19:48:33 GMT

Hi Danny,

I'm trying the CoreXL balancing extension., and getting error: Loading Error: ERR_CONNECTION_TIMED_OUT

New to these addons and I only added the extension to SmartConsole, is there any other basic pre-reqs for extensions to work ? Any requirement to reboot SMC or gateways ?

Cheers,

Neil.

Re: CoreXL Dynamic Balancing

Danny — Fri, 23 Apr 2021 07:09:32 GMT

There are not other requirements. Which SmartConsole version and build are you using? Does your SmartConsole has direct internet access or is there a proxy in between? Where exactly does the error message appear?

Re: CoreXL Dynamic Balancing

Neil_Deane — Fri, 23 Apr 2021 09:45:52 GMT

Hi Danny,

Its SmartConsole R80.40 Build 416. There is indeed a proxy in between. (Isn't this a security community, why would we let a random connection get to the Internet unchecked ... 🙂

The error appears in extension panel on SmartConsole, see snip.

Cheers,

Re: CoreXL Dynamic Balancing

Danny — Fri, 23 Apr 2021 10:24:40 GMT

Troubleshooting SmartConsole Extensions - sk166932 <- set UseDefaultWebProxy=true and it should work.

Re: CoreXL Dynamic Balancing

Neil_Deane — Fri, 23 Apr 2021 12:07:57 GMT

Excellent - that worked, thanks.

For me I had to add UseDefaultWebProxy=true in SmartConsole.exe.config. Then I had to add the proxy Ip in the GUI clients on the SMC.

On one SMC I found the API service had crashed 😟 so had to restart it. ( More work, I suspect possible memory leak in 80.40 JHFA Take 91 for management)

That SK was hard to find, perhaps pin to Extensions forum, very useful

Anyway, extension now working. Great tool and thanks again

Re: CoreXL Dynamic Balancing

FelipeTropeia — Tue, 05 Apr 2022 15:22:23 GMT

Hi Guys,

I'm also trying to enable it in our env, however, when I click on load button nothing happens. We are using R80.40 GA 118 take, no proxy involved and smartconsole 416 build.

@Danny Cheers after our meeting everything is working as we expected. The smartconsole has been updated to 428 version as well.

Re: CoreXL Dynamic Balancing

Mario_Zuker — Mon, 20 Dec 2021 14:48:12 GMT

Awesome! thanks Danny

Re: CoreXL Dynamic Balancing & HyperFlow

Timothy_Hall — Mon, 04 Apr 2022 14:32:42 GMT

Very nice visualization of what is going on from a performance perspective, looks like the days of figuring out what obscure command to run to see what is going on is finally past! Nicely done!

Re: CoreXL Dynamic Balancing & HyperFlow

bbruelhart — Mon, 12 Sep 2022 15:05:46 GMT

Does anyone know if this feature is supported on the Quantum Light Speed Appliances, in particular on the 450?
I would like to enable it but get an error message:
Dynamic Balancing Status - Off (Stopped due to State Verification failure)

Re: CoreXL Dynamic Balancing & HyperFlow

AmitShmuel — Mon, 19 Sep 2022 10:31:28 GMT

Hi,

It shouldn't be supported if User Space PPAK is enabled.

I believe this message has something to do with MQ.
Please contact me offline @ amitshm@checkpoint.com, and I'll be able to add the relevant owner.

Thanks,
Amit