topic Re: [Question] Gateway Optimization in Firewall and Security Management

[Question] Gateway Optimization

Fabz — Mon, 26 Jun 2023 15:22:49 GMT

Hi Checkmates,

Since i dug for more details about CP Security Gateway i found the beauty of CP Gateway. The customize could help improve a customer environment.

CP has lots of capabilities to help optimize the traffic without interrupting operations and taking out security.

im sorry if my query below is covered in training materials or other docs/books, I only check on SK that is accessible to partners and this community.

Regarding SecureXL, these main capabilities help to improve & accelerate traffic and will be offloaded to the secureXL. however i missed one point, how do we know the packet will be offloaded?

in the existing connection with SecureXL enabled, then the traffic is already accelerated but in the middle of the traffic, there are some malicious packets/payloads. how will the gateway perform?
is this mechanism could make an impact if we have a red team and make an attack simulation such as syn flooding/pentest?

For CoreXL, if i use the 7K series which has 1x CPUs, 16 physical cores, and 32 virtual cores based on the datasheet. question :

after enabling CoreXL, is the calculation based on 16 physical cores or 32 virtual cores?
and then enabling VSX, 1VS using 6 core do the split allocation will allocate by default or need to be set manually? AFAIK, split allocation will allocate automatically with 8 cores. 2 SND & 6 FWK.

Im on trying understand about Dynamic Workflow and MultiQueue, and will back to this thread if i have curiosity 😄

Thanks!

Re: [Question] Gateway Optimization

HeikoAnkenbrand — Mon, 26 Jun 2023 17:09:45 GMT

You can find more about performance and arichtecture here:
R81.x Architecture and Performance Tuning - Link Collection

Re: [Question] Gateway Optimization

Fabz — Tue, 27 Jun 2023 01:00:24 GMT

in my case, enabling VSX and split the core based on requirement on each VS. is the HyperThreading still applicable for my case?

Re: [Question] Gateway Optimization

HeikoAnkenbrand — Tue, 27 Jun 2023 07:08:51 GMT

Yes Hyper Threading is applicable.

If necessary you should manually assign the CoreXL instances to the HT Core identically.

For example for VS1 with 4 cores:
Core 1 to HT Core 17
Core 2 to HT Core 18
...

That is better for the performance.