topic Re: performance impact of sk34295 (How to configure DNS NAT) ? in Firewall and Security Management

performance impact of sk34295 (How to configure DNS NAT) ?

Wolfgang — Wed, 17 Apr 2024 05:08:24 GMT

Are there any performance impact following How to configure DNS NAT (checkpoint.com) ?

If enabled all UDP-DNS traffic will be not accelerated by SecureXL but I think this has not much impact.

Re: performance impact of sk34295 (How to configure DNS NAT) ?

PhoneBoy — Wed, 17 Apr 2024 14:28:35 GMT

I don't believe DNS traffic benefits from SecureXL that substantially, given the relatively short nature of a DNS query.
Never heard of a performance-related issue tied to this feature, either.

Re: performance impact of sk34295 (How to configure DNS NAT) ?

Timothy_Hall — Wed, 17 Apr 2024 15:24:56 GMT

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path. It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it. Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

Re: performance impact of sk34295 (How to configure DNS NAT) ?

the_rock — Wed, 17 Apr 2024 16:37:40 GMT

I cant speak for others, but TAC had customer follow this back in 2020 and they never had any issues afterwards.

Best,

Andy