Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rafal_N
Contributor

fw ctl fast_accel - some traffic still going slow path

Hi Team,

I'm using fast_accel for few months and it works fine with backup traffic, cifs/smb etc but in heavy_conection there are still traffic to DB servers. Issue is with internal traffic ms sql (tcp 1433). It still produce some CPU spikes.

Some days ago I found out fw_mux command and it looks that every connection with tcp 1433 it is not accelerated. Can any one help me figure out what can cause that?? 

 

R80.30 take 219 kernel 2.6

 

fw ctl fast_accel show_state
fw fast_accel: The feature state is: enabled.

 

------------------------------------ FIREWALL FAST ACCEL TABLE ------------------------
# Source IP Destination IP D-Port Protocol Hit count
---- ------------------ ------------------ ------ -------- -----------
19) 192.168.184.0/22 192.168.184.0/22 any 6 9686885
20) 192.168.0.0/16 192.168.0.0/16 1433 6 0

 

Two examples form fw_mux

Connection: <dir 0, 192.168.184.90:41622 -> 192.168.186.20:1433 IPP 6>
VM_Connection: <dir 1, 192.168.184.90:41622 -> 192.168.186.20:1433 IPP 6>
Info:
Path: Slow, Streaming mode: PSL, InZone: INTERNAL_ZONE, OutZone: UNDEFINED_ZONE, Num of registered apps: 2
Rule id: 59, ref count: 2, mux state flags: VM_CONN_WAS_SET ,INSPECT_C2S ,INSPECT_S2C.
APPS:
ADVP: app_flags: INSPECT_BOTH, C2S byte skip: 0, S2C byte skip: 0
TIER1: app_flags: NO_FLAGS, C2S byte skip: 0, S2C byte skip: 0

Connection: <dir 0, 192.168.100.95:40600 -> 192.168.186.20:1433 IPP 6>
VM_Connection: <dir 1, 192.168.100.95:40600 -> 192.168.186.20:1433 IPP 6>
Info:
Path: Slow, Streaming mode: PSL, InZone: INTERNAL_ZONE, OutZone: UNDEFINED_ZONE, Num of registered apps: 2
Rule id: 59, ref count: 2, mux state flags: VM_CONN_WAS_SET ,INSPECT_C2S ,INSPECT_S2C.
APPS:
ADVP: app_flags: INSPECT_BOTH, C2S byte skip: 0, S2C byte skip: 0
TIER1: app_flags: NO_FLAGS, C2S byte skip: 0, S2C byte skip: 0

Any ideas? hints where should I look for?

Best regards,

Rafal 

 

 

0 Kudos
5 Replies
This widget could not be displayed.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events