Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Petrus_Rossouw
Participant
Jump to solution

Kernel Tables Calculation

Is there a calculation tool available for the kernel table sizes. I might have to increase the size of the hold_table on one of my firewall clusters and would like to calculate the optimal size for the available memory and current usage thereof.

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend
Legend

I would strongly suggest to involve TAC instead of blundering Smiley Sad...

CCSE CCTE CCSM SMB Specialist

View solution in original post

4 Replies
G_W_Albrecht
Legend
Legend

While adjusting the hold timer is possible, it is strongly not recommended - see the sk44711 Kernel debug shows that TCP traffic is "dropped by fwhold_expires Reason: held chain expired" for detailed explanations. The hold table change ic covered in sk107324 Some traffic does not pass through Security Gateway and kernel debug shows "...dropped by fw_filter_chain Reason: chain hold".

There is no calculation for the optimal size - you have to raise it slowly until the drops disappear. Memory consumtion will grow of course...

CCSE CCTE CCSM SMB Specialist
0 Kudos
G_W_Albrecht
Legend
Legend

I would strongly suggest to involve TAC instead of blundering Smiley Sad...

CCSE CCTE CCSM SMB Specialist
_Val_
Admin
Admin

second that

0 Kudos
Petrus_Rossouw
Participant

Thank you for the feedback. I was never going to blunder through this and would certainly first check with Tac. I was however hoping to do a calculation of how much memory would increase by if I up the table by 25 or 50. The box have a fairly large memory reserve.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events