VIP ping delay and active addresses of the MGMT interface

[Arturxr]

Hello, we've discovered that we have high ping latency to the VIP address and the active node address on our Check Point cluster on the MGMT IP. This seems to be causing communication issues between the Identity Collector and Check Point, as timeout errors periodically occur, and some events may not reach Check Point. Furthermore, the pdp monitor user command output returns the message "daemon did not respond or not running!", while the pdp monitor ip command displays a result.
I also can't run the cpinfo -y all command (the output freezes), and the gateway periodically appears red in the Smart Console.

Could you tell me what could be causing the ping latency to the VIP address and the active addresses of the MGMT interface?

[Timothy_Hall]

Code level?  This option for fwaccel templates was introduced in R81.20.

[Vincent_Bacher]

Yes, memory issue was my second thought.
In the introductory article he states that he uses IDC.
What do you think of my idea of creating an upstream instance from redundant PDP devices, connecting the IDC to these devices, and then sharing the sessions with the pep / enforcing firewalls (vs), preferably using push instead of SmartPull?
IDC --> PDP --> PEP

[the_rock]

Im totally with you on that one, Vince. Certainly appears to be memory related.

[Vincent_Bacher]

It was my thought too, but the first person to mention memory here was our performance god Timothy. 😉

[the_rock]

Performance god...I like that 🙂

[Arturxr]

can you tell me what kind of memory is meant? There is no high utilization in terms of memory and RAM

[Arturxr]

I also found this picture, can you tell me if we can reconfigure the cores, it seems there are quite a lot of snd cores and few fw cores

[Arturxr · Accepted solution]

it seems that the problem has been resolved, we will monitor it, we have done core balancing, according to https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_PerformanceTuning_AdminGuide...

in short,: set dynamic-balancing state enable

reboot

[the_rock]

Excellent, thanks for letting us know!