https://community.checkpoint.com/t5/Firewall-and-Security-Management/Priority-Queueing-Trigger-Time/m-p/176439#M32307 <P>The Priority Queueing feature deprioritizes the packets of an identified elephant/heavy flow when the CPU utilization of a individual Firewall Worker Instance reaches 100%.&nbsp; My question is for how long must the CPU utilization of that Firewall Worker Instance be at 100% before Priority Queueing kicks in?&nbsp; This doesn't appear to be documented; all the official documentation and SKs just say that Priority Queueing becomes active when the core reaches 100%.</P> <P>Poking around in the Firewall Worker Instance kernel variables, there is an undocumented variable that may be related:</P> <P>fwmultik_prio_grace_thld = 300</P> <P>I'm assuming the 300 indicates 300 milliseconds, so is the answer 0.3 seconds?&nbsp; That seems like a reasonable value.</P> Tue, 28 Mar 2023 16:28:09 GMT Timothy_Hall 2023-03-28T16:28:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Priority-Queueing-Trigger-Time/m-p/176439#M32307 <P>The Priority Queueing feature deprioritizes the packets of an identified elephant/heavy flow when the CPU utilization of a individual Firewall Worker Instance reaches 100%.&nbsp; My question is for how long must the CPU utilization of that Firewall Worker Instance be at 100% before Priority Queueing kicks in?&nbsp; This doesn't appear to be documented; all the official documentation and SKs just say that Priority Queueing becomes active when the core reaches 100%.</P> <P>Poking around in the Firewall Worker Instance kernel variables, there is an undocumented variable that may be related:</P> <P>fwmultik_prio_grace_thld = 300</P> <P>I'm assuming the 300 indicates 300 milliseconds, so is the answer 0.3 seconds?&nbsp; That seems like a reasonable value.</P> Tue, 28 Mar 2023 16:28:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Priority-Queueing-Trigger-Time/m-p/176439#M32307 Timothy_Hall 2023-03-28T16:28:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Priority-Queueing-Trigger-Time/m-p/176493#M32312 <P>Wow, I can’t even find that kernel variable in internal SKs/SRs.<BR />Maybe&nbsp;<a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8659">@Chen_Muchtar</a>&nbsp;knows.</P> Tue, 28 Mar 2023 22:22:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Priority-Queueing-Trigger-Time/m-p/176493#M32312 PhoneBoy 2023-03-28T22:22:10Z