topic Performance issue between VSX onsite running R81.10 and Azure running R80.10 in Firewall and Security Management

Performance issue between VSX onsite running R81.10 and Azure running R80.10

pnobels — Mon, 19 Sep 2022 13:36:58 GMT

Hi,

we're currently running an environment with onsite a VSX running R81.10 and in Azure running R80.10.

Previous the VSX environment was running R80.30. Since the upgrade of the VSX to R81.10, we get reports of performance issues between hosts communicating between the two firewalls. To put it clear :

host A - VSX vpn ipsec - Azure - host B

The difference is quite remarquable. No real error to be found. Batch jobs which previously took 10 mins, now take 50 mins. Has anyone perhaps encountered similar issues?

Re: Performance issue between VSX onsite running R81.10 and Azure running R80.10

Ilya_Yusupov — Tue, 20 Sep 2022 06:56:41 GMT

Hi @pnobels ,

Can you share your exact topology? i mean is it VS directly connected to Azure or it's VS going through some VSW/VR?

Thanks,

Ilya

Re: Performance issue between VSX onsite running R81.10 and Azure running R80.10

pnobels — Tue, 20 Sep 2022 09:23:07 GMT

Hi,

vs is directly connected to the internet with a public ip. This one has an ipsec vpn with the azure fw which is behind an azure virtual router. The only component which has been upgraded is the vsx cluster (running the site to site vpn) from R80.30 to R81.10 (and ofcourse latest patches).