topic Re: Quantum - HyperFlow, Now in EA! in Firewall and Security Management

Quantum - HyperFlow, Now in EA!

Chen_Muchtar — Sun, 26 Nov 2023 17:41:02 GMT

We are very excited to share that HyperFlow Early Available program is now open for registration.

In today’s fast changing environment, with a growing demand to address different traffic volumes per connection, HyperFlow is designed to automatically tackle such challenges.

Integrated with additional existing gateway performance features like Dynamic Balancing, HyperFlow allows seamless gateway tuning and optimization in the way we utilize the hardware providing Check Point unprecedented security.

See it in action - Demo & Overview of the new advancements:

HyperFlow EA is mainly for NGTP customers with appliance models of 8 cores and above.
Customer’s benefits:

Influence – Ability to shape Check Point’s cyber security upcoming products
Full technical support provided by EA & RnD through the entire process
Upgrade from EA to GA once available

Re: Quantum - HyperFlow, Now in EA!

the_rock — Sun, 16 Jan 2022 14:34:10 GMT

Thats exciting news!

Re: Quantum - HyperFlow, Now in EA!

genisis__ — Sun, 16 Jan 2022 20:39:27 GMT

Awesome!

But I see some caveats here.

- to resolve elephant flow traffic hyper flow requires more cores, so realistically your looks at a minimum appliance spec of a 66xx (Assuming here).

- Does hyperflow work on openserver?

Re: Quantum - HyperFlow, Now in EA!

the_rock — Mon, 17 Jan 2022 03:42:21 GMT

Thats good point, for sure...sometimes, as crazy as it sounds, but 8 cores might not be enough to solve elephant flows problem.

Re: Quantum - HyperFlow, Now in EA!

Chen_Muchtar — Mon, 17 Jan 2022 07:13:29 GMT

HyperFlow boosts elephant flow by processing it on multiple cores in parallel, a minimum of 8 cores is required to allow optimal resource management of the system.

Openserver support will be addressed in future JHFs

Re: Quantum - HyperFlow, Now in EA!

_Val_ — Mon, 17 Jan 2022 08:15:59 GMT

The assumption is way too liberal. 😀

Similar to Dynamic Balancing, HyperFlow can be available with 8 or more cores, as @Chen_Muchtar already mentioned

Re: Quantum - HyperFlow, Now in EA!

genisis__ — Wed, 19 Jan 2022 19:58:36 GMT

Will checkpoint plan to address this on lower end appliances? In most cases people would have 52, 62, 64 or even 6600 appliances where elephant flows are more likely to be seen (again making an assumption here).

Re: Quantum - HyperFlow, Now in EA!

_Val_ — Mon, 17 Jan 2022 09:40:13 GMT

All with 8 or more CPUs. I actually misread your statement and thought you were talking about SP series.

Re: Quantum - HyperFlow, Now in EA!

the_rock — Mon, 17 Jan 2022 12:44:06 GMT

Not an assumption, seen it happen before. Though, not too often, but does happen.

Re: Quantum - HyperFlow, Now in EA!

_Val_ — Mon, 17 Jan 2022 13:17:58 GMT

Regardless of amount of CPUs, we consider an elephant flow a.k.a. a heavy connection when:

Specific instance CPU is over 60%
Suspected connection lasts more than 10 seconds
Suspected connection utilises more than 50% of the total work the instance does

As an example, for a single FWK instance, if it runs 60% of utilization, one single connection should be taking 30% or more. The "classic" cases are: DB replication, backups, VM migrations, and other data transfers between one source and one destination IPs.

The first condition of overall 60% CPU utilization is indeed more common to the situations where your appliance already is running high CPUs. However, you can also have that situation happening on a machine with many cores, where just one of them is too busy, and others are mostly idle. The recent example from today's community thread is here.

Just a few cores, or many of them, one specific FWK is suffering from a massive data transfer all the same. Before HyperFlow, we had Priority Queues and fast_access to work those issues around, now can leverage multiple CPUs for a single connection. With is, in my book, HUGE.

Re: Quantum - HyperFlow, Now in EA!

Timothy_Hall — Mon, 17 Jan 2022 13:37:06 GMT

Very nice, been a long road of development for this one!

Re: Quantum - HyperFlow, Now in EA!

Magnus-Holmberg — Mon, 17 Jan 2022 15:26:27 GMT

Is / will VSX be supported aswell?

regards,
Magnus

Re: Quantum - HyperFlow, Now in EA!

Chen_Muchtar — Mon, 17 Jan 2022 15:36:03 GMT

Yes, VSX is supported

Re: Quantum - HyperFlow, Now in EA!

Magnus-Holmberg — Mon, 17 Jan 2022 15:38:44 GMT

awesome! will it require 8 vs instances or how is it "enabled" when it comes to VSX?

Re: Quantum - HyperFlow, Now in EA!

Martijn — Mon, 17 Jan 2022 15:59:22 GMT

Hi All,

This is great news and a welcome feature for some of our customers.

Does Maestro and Scalable Platform support HyperFlow?

Regards,
Martijn

Re: Quantum - HyperFlow, Now in EA!

Chen_Muchtar — Mon, 17 Jan 2022 17:14:24 GMT

Maestro is supported

Re: Quantum - HyperFlow, Now in EA!

Chen_Muchtar — Mon, 17 Jan 2022 17:15:05 GMT

The requirement in VSX is 6 FWK cores, not instances

Re: Quantum - HyperFlow, Now in EA!

HeikoAnkenbrand — Mon, 17 Jan 2022 17:29:46 GMT

We have been waiting for this for a long time;-)

Because the connection works over several cores, I have few questions:
1) Each core has a connection table. Will be the tabels are shared?
2) How does monitoring work via fw monitor. Are all cores that are used for the connection displayed here?
3) How is IPS, Anti Bot,... supported if the connection works over several cores? How does the PSLXL path work here?
4) Is there a design description for the packet flow?

Re: Quantum - HyperFlow, Now in EA!

Tom_Loeber — Tue, 18 Jan 2022 16:19:56 GMT

Agreed and great questions!

This leads me to ask if CPAS (Active Streaming) and security blade/malware detection is handled with Hyperflow?

I currently have a customer that shows zdebug drops when trying to download very large files. TAC case in progress.

Re: Quantum - HyperFlow, Now in EA!

genisis__ — Tue, 18 Jan 2022 21:14:20 GMT

Question:

When you say 8 cores, do you mean 8 worker cores? If so, this in affect would mean an appliance/openserver with more then 8 cores is required as clearly SND cores would need to be factored in. This would then imply that we would require a minimum 10 cores, including SNDs.

So absolutely this is great milestone, but we are talking highend appliances could realistically benefit from this.

Hyperflow 2.0 ... objective, get this down to a minimum of 3 worker cores, and 1 SND 😉