link that R80.20 GAIA 3.10 kernel not supported on CP gateway appliance

[Garrett_DirSec]

Hello -- I'm simply looking for web resource with CP official black/white statement that R80.20 GAIA 3.10 kernel is not supported on CP badged gateway appliance.

At min, I would expect such a statement or reference in one of following:

1. release notes
2. install and upgrade guide
3. SK141173 on R80.20 and GAIA 3.10 kernel

Why is Check Point being somewhat evasive on topic?

To address the expected comments:  yes, I understand the R80.20 GAIA 3.10 feature most benefit Management platforms (Smartcenter, log server, Smartevent).    I would like to have option to run journaling filesystem on gateway (ie. XFS).  

Yes, I understand there's an extensive list of [surprising] limitations of GAIA 3.10 kernel, the R80.20 codebase, and ClusterXL + IPv6 features (ie.  mileage may vary -- or not work at all).

Any insight would be appreciated.  -Garrett

[PhoneBoy]

The delta between Linux 2.6 and 3.10 is fairly significant and it clearly impacts VSX and IPv6.
The main reason we released R80.20 with Linux 3.10 prior to resolving these issues is because of the lack of availability of Open Server hardware that supports the older Linux kernel.
We do plan to resolve the limitations and standardize on the newer kernel for Check Point-branded appliances, it's just taking longer than initially planned.

[Garrett_DirSec]

Hey D - thanks for msg and quick reply. Are you aware of web resource that clearly states CP badged gatways not supported. As far as I can tell at monent, this only tribal knowledge. Because this is such a "widely known" limitation, I'm surprised it's not clearly stated in R80.20 release notes. my 0.02.

[PhoneBoy]

What's listed in the SK are the platforms on which the release is formally supported.
Everything else not listed would be considered unsupported, same as with every other release.

Having said that, we have in a few threads encouraged people to give this release a try to see if it works on their particular Open Server appliance, even without formal support.
I assume Check Point appliances would work with these releases, but we haven't certified this yet.

[Garrett_DirSec]

Hello D -- while I appreciate the comments, I suggest that CP badged appliance are THE check point bread and butter.    Making support decision based on whether "it's listed or not" is evasive and somewhat "not in keeping with the leadership position that CP strives for..." considering their placement in industry and Gartner Magic Quad.

...

[_Val_]

I believe Dameon has iterated already why decision to support specific appliances is still pending. It is a matter of extensive QA cycle, and before we are 100% sure the kernel in absolutely stable and does not cause any unexpected issues, it is better to stick with "known good". 

New kernel is to come, please be just a bit more patient. Thanks

[G_W_Albrecht]

Honestly, i would suggest better NOT to write before writing such an unnecessary comment that surely is not helpfull for anyone - and at least for me, a technical forum does not need emotion-based bashing its vendor at all...

[_Val_]

Guenther, we encourage open and transparent discussions in this forum.

Sometimes it might be that an individual is very passionate, so some emotions are still okay 🙂

[Garrett_DirSec]

Hello V -- thanks for msg.     I completely understand and sympathize with all development and QA issues surrounding release of GAIA 3.10 kernel.    My point of frustration resides around lack of clear roadmap details and fact I have customers telling me (reseller) about details that I should have known first.

Examples:

R80.20 release notes don't mention whether CP badged appliances do -- or do not -- support GAIA kernel 3.1.

R80.30 EA release notes appear to be a scrape/paste of R80.20 and (again) don't mention anything different vs previous release.

In the day since I realized that R80.20 GAIA 3.10 would not support CP badged appliances, everything I've heard is that R80.30 will resolve all the current GAIA 3.1 kernel limitations for gateway code (clusterXL active-active, IPv6, etc).    However, the R80.30 EA don't mention anything about that so I'm unsure what to believe.  

[_Val_]

Once more, it seems your frustration is based on your own personal expectations which were not backed up by any information from our side. 

1. We have never claimed that R80.20 GA will come with 3.10 kernel. We did emphasise before and after release that 3.10 kernel is part of MGMT but not GW general availability. Limited support for 3.10 is announced in a well publicised SK article, which is also part of R80.20 GA reference article.  

2. R80.30 EA Release Notes do have "What's new" part describing new features. As it is not a GA release, the documentation is still work on progress.

It terms of the road map, we are working hard to deliver full support for 3.10 kernel, but it is a subject of thorough performance, stability and compatibility tests. 

[MeravAlon]

Hi @Garrett_DirSec 

Thanks for your feedback. We have updated the SK to be more clear.

Please note we expect to add support for all appliances in the near future

[Garrett_DirSec]

Hello.   sincere thanks for the update and clarification. 

Since the GAIA 3.10 kernel seems to have a life unto itself, I suggest you maintain an SK article with "everything you needed to know about all aspects of GAIA 3.10+ kernel".   this would include compatibility with SmartCenter, Log Server, SmartEvent, Gateway on both open server and CP branded platforms.   In addition, if there are any "gotchas" about GAIA 3.10 kernel on virtualization platforms, it would be good to reference in SK and point towards of GAIA virtualization performance tuning SK. 

thanks -GA