topic Re: VSX and CoreXL disabled- CPU usage in Firewall and Security Management

VSX and CoreXL disabled- CPU usage

Mariusz88 — Tue, 29 Mar 2022 08:39:17 GMT

Hello,

I have HA VSA with 4 VS (2-5) and CoreXL disabled.

My Question is: Will each VS use only one CPU for Fw workers ?From what I can see (cpview per vs and top) each VS is using 3 cores. I thought that with CoreXL disabled each VS will use only one CPU.

Can somebody explain me how it works, please?

Checkpoint 15400 16 CPU cores

R80.40 latest hotfix

IPSEC/IPS/Anti-bot enabled on one VS (4)

MQ enabled

no manual affinities

[Expert@FIREWALL]# fw ctl affinity -l
VS_0 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_2 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_3 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_4 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_5 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
Interface eth3-01: has multi queue enabled
Interface eth3-02: has multi queue enabled
Interface Mgmt: has multi queue enabled
Interface Sync: has multi queue enabled
[Expert@FIREWALL]#
[Expert@FIREWALL]# mq_mng --show
Total 16 cores. Multiqueue 4 cores
i/f type state mode cores
------------------------------------------------------------------------------------------------
Mgmt igb Up Auto (2/2) 0,8
Sync igb Up Auto (2/2) 0,8
eth3-01 ixgbe Up Auto (4/4) 0,8,1,9
eth3-02 ixgbe Up Auto (4/4) 0,8,1,9

[Expert@FIREWALL]#
[Expert@FIREWALL]# fw ctl multik stat
CoreXL is disabled << on ALL 4 VS

Re: VSX and CoreXL disabled- CPU usage

_Val_ — Tue, 29 Mar 2022 10:36:34 GMT

You need to specify how many FW cores a VS use on SmartConsole. Before that, anything on CLI is pointless. What do you expect for each VS?

Re: VSX and CoreXL disabled- CPU usage

Chris_Atkinson — Tue, 29 Mar 2022 10:43:51 GMT

Some context would help, what are you attempting to achieve and why?

Re: VSX and CoreXL disabled- CPU usage

Oliver_Fink — Tue, 29 Mar 2022 12:44:46 GMT

As far as I understood CoreXL is only effective for VS0. For all other VSes you can specify the number of cores for IPv4 and IPv6 separately in the CoreXL-Tab of the VS object in SmartConsole – as Val mentioned.

Re: VSX and CoreXL disabled- CPU usage

Mariusz88 — Tue, 29 Mar 2022 13:59:24 GMT

I got just such FW configured and I am wondering how VSX is working when CoreXL is disabled. Just general knowledge. Is it sharing all FWK CPUs for all 4 VS+VS0 or those outputs (fw ctl, cpview) are useless. It is confusing me. I would expect to see 8CPU 100% idle.

I know how it's behaving with CoreXL enabled .