R80.30 cheat sheet - ClusterXL

[HeikoAnkenbrand]

Introduction

This overview gives you an view of the changes in R80.30 ClusterXL. All R80.10 and R80.20 changes are contained in this command overview (cheat sheet). You could download the cheat sheet at the end of this article as a PDF file.

Cheat Sheet

Chapter

Architecture:
R80.x Security Gateway Architecture (Logical Packet Flow)
R80.x Security Gateway Architecture (Content Inspection) 
R80.x Security Gateway Architecture (Acceleration Card Offloading) 
R80.x Ports Used for Communication by Various Check Point Modules 

Performance Tuning:
R80.x Performance Tuning Tip - AES-NI 
R80.x Performance Tuning Tip - SMT (Hyper Threading) 
R80.x Performance Tuning Tip - Multi Queue 
R80.x Performance Tuning Tip - Connection Table 
R80.x Performance Tuning Tip - fw monitor
R80.x Performance Tuning Tip - TCPDUMP vs. CPPCAP 
R80.x Performance Tuning Tip – DDoS „fw sam“ vs. „fwaccel dos“ 

Cheat Sheet:
R80.x cheat sheet - fw monitor 
R80.x cheat sheet - ClusterXL 

More interesting articles:
Article list (Heiko Ankenbrand)

References

• sk56202 - How to troubleshoot failovers in ClusterXL
• sk62570 - How to troubleshoot failovers in ClusterXL - Advanced Guide
• sk92723 - Cluster flapping prevention
• sk43984 - Interface flapping when cluster interfaces are connected through several switches
• sk83220 - How to collect ClusterXL debug during boot
• sk31499 - How to find out the Multicast MAC Addresses that are associated with Cluster Virtual inter...
• sk92909 - How to debug ClusterXL to understand why a connection is not synchronized
• sk55081 - Best practice for manual fail-over in ClusterXL
• sk92723 - Cluster flapping prevention
• sk32578 - SecureXL Mechanism
• sk33781 - Performance analysis for Security Gateway NGX R65 / R7x

[Igor_Szkaradkie]

Top!

[Marco_Rea]

Nice

[Chinmaya_Naik]

Nice Cheat Sheet for ClusterXL.

Thanks Heiko Ankenbrand‌ 

[Maarten_Sjouw]

Heiko,

Very nice sheet, maybe you could rename it from SecureXL Cheatsheet to ClusterXL Cheat sheet? 😉

Regards, Maarten.

[HeikoAnkenbrand]

Thank you for pointing that out. I took the template from SecureXL and accidentally didn't change the header name to ClusterXL.

Thanks
Heiko

[HeikoAnkenbrand]

Done

[Aviram_Wiele]

Do you have any other cheat sheets?
I think it would be good if there were some on other topics too.

Thanks Heiko Ankenbrand

[Alessandro_Marr]

Heiko, thank you so much for sharing your deep knownledge!

[Abdul_Syed]

Thanks Heiko. Quite useful. It would be good to know if these commands would also work on .SP version since R80.20SP is coming soon.

[Moti]

Great post 

[Aika_Locas]

-  Great post

We need more sheat sheets:-)

[Ralph_Heckler]

We should create more cheat sheets to different topics.

[Lars_Skerka]

nice post

[HeikoAnkenbrand]

Other cheat sheet's coming soon!

Regards

Heiko

[HeikoAnkenbrand]

Other cheat sheet's coming soon!

[HeikoAnkenbrand]

THX,

Heiko

[hong_jungil]

great work

[Rolf_Kaschek]

Nice cheat sheet.

[joerg_weller]

Great  Job!

[Levin_Swizell]

@heiko

Do you have any more cheat sheets?

Regards

Levis

[Antonio_Gerbino]

Thanks to share! Very useful.

[Ralp_B_]

Can I disable session sync between gateways with "fw ctl setsync off/start"?

[Mehmet_Gul]

Very nice ClusterXL cheet sheat.

[Patricia_OSulli]

Hi @HeikoAnkenbrand 

I found the command fcu in your overview.

Do you have any experience with a full connectivity update?

It doesn't always work.

[Timothy_Hall]

If you follow this document, clusters can be upgraded without downtime or a loss of state sync at any point:

Best Practices - Cluster Connectivity Upgrade (CU)

Probably wouldn't be a bad idea to add this great document to the links above...

[Melissa_Swan]

This is very interresting.

[Muhammad_Patel]

Great work! Thanks for sharing.

Thanks,
Mo

[Val_Loukine]

Great job Heiko!

This is a very impressive piece of knowledge, thanks for sharing it with the community.

One side note thought. This part is not yet properly documented, as we all know, because R80.30 is not yet in GA.

For that matter, I urge some caution when using commands related to ccp encryption. Especially, I would not recommend setting up your own custom encryption key at all. For each cluster, a unique key is generated automatically, and tampering with this setting might lead to unpredicted cluster behaviour. 

[Ingor_Kolzov]

Helpful cheat cheat.

Thanks