topic Re: open server with 4 core license question in Firewall and Security Management

open server with 4 core license question

Daniel_Kavan — Tue, 17 Jan 2023 13:54:53 GMT

Q: In general, does Check Point (R81.20) run more optimally with RE: performance with 16 CPUs using hyper threading HT (12 other, 3 coreXL_fw, and one coreXL_SND) or with HT turned off and running (4 other, 3 coreXL_fw, and one coreXL_SND)?

A: I'm thinking there would be more power in each core with HT turned off.

Re: open server with 4 core license question

G_W_Albrecht — Tue, 17 Jan 2023 14:26:46 GMT

What you believe is not true - it just depends on several configuration and environment factors as explained in sk93000: SMT (HyperThreading) Feature Guide - e.g. FW blade alone does not really profit in performance from HT, but IPS, Application & URL Filtering and Threat Prevention have added performance of up to 30% when HT is used.

Re: open server with 4 core license question

_Val_ — Tue, 17 Jan 2023 14:36:07 GMT

@G_W_Albrecht This only applies if all cores are licensed. This is not the case if I read the comments above correctly.

Re: open server with 4 core license question

PhoneBoy — Tue, 17 Jan 2023 14:53:16 GMT

A four core license only gives you access to four hyperthreaded cores and four real cores, FYI.
I would tend to agree with your assessment, but it really depends on the traffic/blade mix.

Re: open server with 4 core license question

Daniel_Kavan — Tue, 17 Jan 2023 15:01:26 GMT

Interesting, and YES, on THIS gw I just have a 4 core license. And I physically have 8 cores, 16 with HT enabled. This gw is mainly VPN/FW, not much IPS or app control. The problem is with 8 cores on this gateway, I have to choose between 8 and 16 cores (with or with out HT). There is no choice for 4 core + 4 HT cores without splitting it to 16 cores that I can see.

So, are you saying if HT is enabled and even though I have to choose 3/1, gaia/CP will still somehow use 4 HT'd cores?

Re: open server with 4 core license question

Daniel_Kavan — Tue, 17 Jan 2023 15:03:29 GMT

At this point I'm still planning to disable HT. and cpconfig 3/1. Leaving 4 cores unused.

Re: open server with 4 core license question

Wolfgang — Tue, 17 Jan 2023 15:39:38 GMT

I've you have a license for 4 cores you can use only 4 cores, regardless of HT or physical. With an 8 core host it's the best to use 4 physical cores.

But in general more cores are always better 😁

Re: open server with 4 core license question

Daniel_Kavan — Tue, 17 Jan 2023 19:44:30 GMT

Thanks everyone! I just want to confirm my configurations are optimal. I set the processors per socket from 8 to 4 cores in my BIOS so just 4 cores are showing up now. HT is disabled in my BIOS. fw ctl affinity -l -a shows my interfaces all point to the single SND core CPU 0.

Re: open server with 4 core license question

Daniel_Kavan — Tue, 17 Jan 2023 18:31:36 GMT

I think at this point 8 core should be the default not 4. RFE!

Re: open server with 4 core license question

PhoneBoy — Tue, 17 Jan 2023 22:30:04 GMT

Not sure I understand this statement since there is no "default" Open Server license.
You buy the license that's appropriate for your hardware and performance needs.

Having said that, we do sell two and four core licenses still.
I believe even the lowest end appliances we sell have a minimum of four cores now.

Re: open server with 4 core license question

G_W_Albrecht — Wed, 18 Jan 2023 08:21:31 GMT

Yes - but i did not refer to the title, i answered the question I'm thinking there would be more power in each core with HT turned off 8)

Re: open server with 4 core license question

Daniel_Kavan — Wed, 18 Jan 2023 12:59:59 GMT

Thanks again everyone. We bought the 4-core license a long time ago, so good point - it's on me to buy more cores.