Give more core to SND in a VSX VSLS cluster

Supporto_Checkp — Fri, 09 Feb 2024 14:24:34 GMT

Hi

i've VSX VSLS 81.10 Take 95 cluster made of two 15600 HPP ( 16 core ) + Max Memory [coreXL is disabled]

At the moment it manage 30 VS ,each one with a routed based vpn and we found A LOT of cpu spike on cpu 0 and 8, and we that the guilty process is "Snd [kernel.kallsyms] [k] sha256_block.constprop.528"

We have already changed the encryption algorith to a AES256-GCM that should be lighter and better for SND...but

we are still experiencing a lot of issue due ot the high load on CPU 0 and 8 ,the only two used by SND.

I want to give two more cpu to SND ( i've seen that all the cpu that manages fw kernel instances are under the 20% )

i've looked around but i' wasn't able to find anything related

can anyone point me to the right SK or way to proceed?

Thx

Re: Give more core to SND in a VSX VSLS cluster

Chris_Atkinson — Fri, 09 Feb 2024 14:48:39 GMT

Please see:

https://community.checkpoint.com/t5/Security-Gateways/VSX-How-to-change-the-number-of-SND-cores/td-p/118441

topic Re: Give more core to SND in a VSX VSLS cluster in General Topics

Give more core to SND in a VSX VSLS cluster

Re: Give more core to SND in a VSX VSLS cluster