Trafffic generated by Load Tester is dropped on Checkpoint Gateway

[Lijo_mathai]

We are doing some performance test on the checkpoint gateway. During the test we noticed majority of the traffic being dropped by Chechpoint gateway when we  trigger the load with imix traffic the traffic is being dropped and tge zdebug  output shows traffic being dropped due to an CPU instance spike.

The traffic is basically IPP253.

The gateway model is SG16200

On top of this we tried to pump the load with default frame size-1500 byte and 100 streams. There was no traffic drop observed 

Have anyone encountered this? We need to do the load test with varying frames sizes as well. 

Is there any setting to be done on the gateways to allow varying frame size to be allowed through the gateway without dropping?

[Lesley]

CPU spikes do not cause extra performance and is a tool to log spikes to data for troubleshooting.

This should not drop traffic.

If you stress a system enough it is most likely it will drop traffic. If you want to get more performance from the system start with this sk

https://support.checkpoint.com/results/sk/sk167553

For now I don't know what has been tested and how much data we are talking about. Also version is not known. Tested only one interface or more? What blades are enabled etc. 

[Chris_Atkinson]

As stated more information regarding the version/hotfix level, configuration and enabled blades is required in order to optimize the performance...