topic Re: how many percentage of performance degradations in General Topics

how many percentage of performance degradations

BenjaminXu — Sat, 25 Mar 2023 16:52:50 GMT

if enable VSX on security gateway or Maestro architecture, how many percentage of performance degradations?

Re: how many percentage of performance degradations

HeikoAnkenbrand — Sat, 25 Mar 2023 17:37:39 GMT

It depends on which blades you activate in the vs. You can't really make a general statement.

For the VS own VSX processes I see in practice about 1%-3% pervormance loss per instance.

If you use a large applinace, e.g. a 26000, this should not be a problem.

If you use a large applinace, e.g. a 26000, this should not be a problem.

For example, with 48 cores (48*100% = 4800% CPU performance) and 20 VS (2%*20 VS = 40% CPU performance) you lose 40% of 4800%. Is normally no problem.

It is similar with Maestro.

Re: how many percentage of performance degradations

HeikoAnkenbrand — Sun, 26 Mar 2023 08:44:40 GMT

Small addendum:

For example, if you have 20 VS, there are 20 instances of this fwk0_dev_x process.

A calculation sample for the utilization of VS process fwk0_dev_X:

                                  max_CoreXL_number     max_CoreXL_number
fwkX_dev_0 =        ∑ fwkX_0                         + ∑ fwkX_dev_0 +                     fwk0_kissd +                 fwk0_hp
                                  x=0                                      x=0

- fwk0_X -> fw instance thread that takes care for the packet processing
- fwk0_dev_X -> the thread that takes care for communication between fw instances and other CP daemons
- fwk0_kissd -> legacy Kernel Infrastructure (obsolete)
- fwk0_hp -> (high priority) cluster thread

More read here:
- R8x - Performance Tuning Tip – User Mode Firewall vs. Kernel Mode Firewall

Re: how many percentage of performance degradations

the_rock — Sat, 25 Mar 2023 19:25:09 GMT

Link @HeikoAnkenbrand sent is 100% your best reference. Not sure if you guys have anything better over there internally, but this is pretty good.

Cheers,

Andy

Re: how many percentage of performance degradations

Chris_Atkinson — Sat, 25 Mar 2023 23:00:53 GMT

As a guide ~12% overhead for VSX itself then the rest is very much configuration & version dependent.

Re: how many percentage of performance degradations

HeikoAnkenbrand — Sun, 26 Mar 2023 08:50:14 GMT

This is a VSX environment in the LAB with 2 VS instances and without blades enabled. At the moment, no traffic is going through the VS instancen.

I think each VS uses about 2% CPU performance when idle.

Re: how many percentage of performance degradations

the_rock — Mon, 27 Mar 2023 01:18:48 GMT

I actually spun up VSX in the lab today and saw pretty much the same thing. I gave it 32 GB of ram and also 2 VSs and shows 4% utilization. Not sure if yours was R81.20, but thats what I created.

Re: how many percentage of performance degradations

HeikoAnkenbrand — Mon, 27 Mar 2023 05:32:31 GMT

I used R81.20 for the test.

With
-> R80.40 approx. 4%
-> R81.10 approx. 3%
per VS instance.