cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

Adding rules is slow through the API

Jump to solution

Hi,

I'm using the R80.10 management API to add firewall rules with the mgmt_cli tool. First I login, obtain the sessionid and then create firewall rules using the "add access-rule" command. Finally, the changes are published. For a couple of rules this works fine, but 200 rules takes 16 minutes. I add the rules using position "bottom", I would expect this to be nearly instant. I only publish at the end.

The mgmt is R80.10 running on a VM, but on a 3150 it isn't any faster.

Any tips to speed this up?

Cheers, Robbert

0 Kudos
1 Solution

Accepted Solutions
Employee++
Employee++

Re: Adding rules is slow through the API

Jump to solution

One thing that I can offer you is to inverse the order - add rules from the bottom-most one and go up. Running the API in this way runs faster than adding rules top-to-bottom especially when dealing with adding many rules in the same session.

We are working on improving the performance of adding rules in the "to the bottom" situation.

Robert.

View solution in original post

2 Replies
Employee++
Employee++

Re: Adding rules is slow through the API

Jump to solution

One thing that I can offer you is to inverse the order - add rules from the bottom-most one and go up. Running the API in this way runs faster than adding rules top-to-bottom especially when dealing with adding many rules in the same session.

We are working on improving the performance of adding rules in the "to the bottom" situation.

Robert.

View solution in original post

Re: Adding rules is slow through the API

Jump to solution

I can confirm that for large rulebases, positioning on top is signficantly faster than on the bottom. Thanks for the answer.

Robbert

0 Kudos