topic Re: Requirements to IPv6 Migration in Firewall and Security Management

Requirements to IPv6 Migration

gmoctezuma — Thu, 15 Jun 2023 17:34:06 GMT

How much memory and CPU percentage is increased in Firewalls when migrating to dual stack ipv6?

I know that it is difficult to know the exact percentage, but I would like to know an estimate?

Re: Requirements to IPv6 Migration

PhoneBoy — Thu, 15 Jun 2023 19:28:47 GMT

It depends entirely on how much IPv6 traffic you're processing, but you can expect both to increase (memory more so than CPU)

Due to the size of IPv6 headers (40 bytes) compared to IPv4 (20 bytes), IPv6 connections will take more memory to track.
This will mean less IPv6 connections can be tracked compared to IPv4 (again, exact number depends on configuration).
Routing table entries will also take more memory as a result (be it dynamic or static).

Because there is less room in a 1500 byte packet for data, you may receive more IPv6 packets for the same amount of data sent via IPv4.
That will ultimately have an impact on CPU, but far less than the impact on memory.

Re: Requirements to IPv6 Migration

gmoctezuma — Wed, 28 Jun 2023 17:29:05 GMT

Thanks for the information. Is there any other point to take into account in the FW to successfully migrate to IPV6?

Licensing or another Limitation?

Re: Requirements to IPv6 Migration

Chris_Atkinson — Thu, 29 Jun 2023 00:15:55 GMT

sk163313: IPv6 features and limitations in R80.30 and higher