Performance Optimization

[Vijay_Nagaraj]

Hi Team,

I need some clarification on fwaccel stats -s command. There are different values on different fields. Need explanation for the same. 

Accelerated conns/Total conns : 98%

Accelerated pkts/Total pkts : 92 %

F2Fed pkts/Total pkts : 7 %

PXL pkts/Total pkts : 4%

QXL pkts/Total pkts : 0

The values are example values.

In case if i see QXL very less like 0% is that mean the fastest path is not utilized at all ,?? PXL is medium path and F2Fed is a default path and even that value is around 7% and what is the difference between Accelerated conns / Total conns and 

Accelerated pkts / Total pkts,, if those values are higher than 90% what does that exactly means..

It would be really great if i get a clarification.

[Timothy_Hall]

Accelerated conns/Total conns : 98%

How many current connections were templated by SecureXL Session Rate Acceleration and avoided a firewall path (slowpath) rulebase lookup upon start of the new connection.

Accelerated pkts/Total pkts : 92 %

How many total packets were fully accelerated by SecureXL Throughput Acceleration after the connection was established

F2Fed pkts/Total pkts : 7 %

How many packets were processed through the slowest Firewall path due to fragmentation or other situations that cannot be handled by PXL

PXL pkts/Total pkts : 4%

How many packets required streaming inspection by blades such as APCL/URLF/IPS/AV and were partially accelerated.  The vast majority of traffic on real-world firewalls tends to congregate in this path.

QXL pkts/Total pkts : 0

Special PXL path for traffic handled by QoS/Floodgate-1/etm feature, will always be zero unless QoS blade is enabled.

These statistics can be reset on the fly with fwaccel stats -r.

--
My book "Max Power: Check Point Firewall Performance Optimization"
now available via http://maxpowerfirewalls.com.