topic Re: Cluster Performance Question in Firewall and Security Management

Cluster Performance Question

biskit — Mon, 02 Dec 2019 09:58:11 GMT

Hi all,

I seem to recall hearing some time ago that there was a performance hit for the more cluster members you added to a cluster. Is this still an issue in R80.30? (or was it ever an issue?!)

I have a cluster of two gateways, and want to add a 3rd cluster member in my DR site, so all the interfaces would be trunked via a 10gb circuit between the main office and the DR site, and the ISP can route the public IP's to the DR site if the primary site went down. Latency over the circuit is very low. Are there any other performance type issues that might trip me up?

Thanks.

Re: Cluster Performance Question

G_W_Albrecht — Mon, 02 Dec 2019 12:43:04 GMT

I would rather assume that what you remember is mainly valid in LS clustering for the pivot member, as we read in ClusterXLAdvanced TechnicalReference Guide :

In ClusterXL Load Sharing mode, configuring more than 4 members significantly decreases cluster performance due to amount of Delta Sync.

Re: Cluster Performance Question

PhoneBoy — Sun, 08 Dec 2019 08:54:06 GMT

The performance hit is mainly relevant in Load Sharing clusters, not Active/Standby/Standby configurations.

Re: Cluster Performance Question

HeikoAnkenbrand — Sun, 08 Dec 2019 15:26:09 GMT

As @PhoneBoy has already said, this is no problem with a HA ClusterXL. We have it with several customers so in use.

Note only the time of the ccp packets. It should be only 100 ms.

Furthermore I would not enable the encryption of ccp packets at R80.30 if you use 3 gateways.