- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hey expert
I have a doubt about splitting corexl between fw worker and snd/irq cores.
Before starting tuning I have a situation like that , 32 virtual core (ht enabled) 28 fwworker 4snd/irq , since we are going to use only one bond of two 10gb interfaces I was thinking to increment snd/irq core to 6 going 26 fw worker.
My question is do I need to use sim affinity -s and assign the new snd/irq cores to the interfaces used for the bond interface or since all other interfaces are down this configuration is not needed and sim affinity -a is enough?
Thanks
bump ![]()
I tend to stick with defaults until they don't work.
But if you're concerned, you might as well double-check the affinity.
so " sim affinity -a " will be the best option at the moment
Automatic interface affinity (sim affinity -a) is the default. With 2 10gig interfaces a starting split of 6/24 is quite reasonable; if there is a large amount of fully-accelerated traffic you might need more SNDs than that.
If there will only be two main interfaces used and they will handle almost all the traffic, Multi-Queue might be prudent as well depending on network traffic load and the burstiness level of network traffic.
--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com
Thanks for the reply Tim , so basically I can leave the other interface in shut and there are no need so assign the other snd/irq core to the 2 gb interface with sim affinity -s command
No just let automatic interface affinity handle it and enable Multi-Queue.
--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 14 | |
| 10 | |
| 9 | |
| 7 | |
| 6 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
Fri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Fri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY