https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPU-Affinity/m-p/86357#M6672 <P>I'm not sure why you would want to do that on a 2-core firewall, I assume since it is standalone you want all firewall workers and SND's sharing core 0 while SMS management functions use core 1?&nbsp; Your performance will almost certainly be terrible since there will be so many CoreXL components fighting each other for a single core, what you might want to do instead is disable CoreXL completely from <STRONG>cpconfig</STRONG> which should give you one SND on Core 0 and one Firewall Worker on Core 1.&nbsp; Management processes will take a backseat to kernel operations occurring in the single SND and single Firewall Worker.&nbsp;&nbsp;</P> <P>If you want to do it anyway, you'll need to configure the fwaffinity.conf file, see&nbsp;<SPAN><A class="cp_link sc_ellipsis" href="https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_PerformanceTuning_AdminGuide/html_frameset.htm" target="_blank" rel="noopener">R80.30 Performance Tuning Administration Guide</A>.&nbsp; In general though setting up manual affinity is not a desirable path to start down if it can be avoided.</SPAN></P> Tue, 26 May 2020 15:05:02 GMT Timothy_Hall 2020-05-26T15:05:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPU-Affinity/m-p/86348#M6671 <P>Hello!<BR />How can I configure to set manually the process "Kernel fw_0" must be processed by CPU-0?<BR />See the attachment to see what I mean.</P> Tue, 26 May 2020 14:28:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPU-Affinity/m-p/86348#M6671 Fernandosilva 2020-05-26T14:28:59Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPU-Affinity/m-p/86357#M6672 <P>I'm not sure why you would want to do that on a 2-core firewall, I assume since it is standalone you want all firewall workers and SND's sharing core 0 while SMS management functions use core 1?&nbsp; Your performance will almost certainly be terrible since there will be so many CoreXL components fighting each other for a single core, what you might want to do instead is disable CoreXL completely from <STRONG>cpconfig</STRONG> which should give you one SND on Core 0 and one Firewall Worker on Core 1.&nbsp; Management processes will take a backseat to kernel operations occurring in the single SND and single Firewall Worker.&nbsp;&nbsp;</P> <P>If you want to do it anyway, you'll need to configure the fwaffinity.conf file, see&nbsp;<SPAN><A class="cp_link sc_ellipsis" href="https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_PerformanceTuning_AdminGuide/html_frameset.htm" target="_blank" rel="noopener">R80.30 Performance Tuning Administration Guide</A>.&nbsp; In general though setting up manual affinity is not a desirable path to start down if it can be avoided.</SPAN></P> Tue, 26 May 2020 15:05:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPU-Affinity/m-p/86357#M6672 Timothy_Hall 2020-05-26T15:05:02Z