open server with 4 core license question

[Daniel_Kavan]

Q: In general, does Check Point (R81.20) run more optimally with RE: performance with 16 CPUs using hyper threading HT (12 other, 3 coreXL_fw, and one coreXL_SND) or with HT turned off and running (4 other, 3 coreXL_fw, and one coreXL_SND)?

A: I'm thinking there would be more power in each core with HT turned off.

[G_W_Albrecht]

What you believe is not true - it just depends on several configuration and environment factors as explained in sk93000: SMT (HyperThreading) Feature Guide - e.g. FW blade alone does not really profit in performance from HT, but IPS, Application & URL Filtering and Threat Prevention have added performance of up to 30% when HT is used.

[_Val_]

@G_W_Albrecht This only applies if all cores are licensed. This is not the case if I read the comments above correctly.

[G_W_Albrecht]

Yes - but i did not refer to the title, i answered the question I'm thinking there would be more power in each core with HT turned off 8)

[Daniel_Kavan]

Thanks again everyone.   We bought the 4-core license a long time ago, so good point - it's on me to buy more cores.     

[PhoneBoy]

A four core license only gives you access to four hyperthreaded cores and four real cores, FYI.
I would tend to agree with your assessment, but it really depends on the traffic/blade mix.

[Daniel_Kavan]

Interesting, and YES, on THIS gw I just have a 4 core license.   And I physically have 8 cores, 16 with HT enabled.   This gw is mainly VPN/FW, not much IPS or app control.  The problem is with 8 cores on this gateway, I have to choose between 8 and 16 cores (with or with out HT).   There is no choice for 4 core + 4 HT cores without splitting it to 16 cores that I can see. 

So, are you saying if HT is enabled and even though I have to choose 3/1, gaia/CP will still somehow use 4 HT'd cores?

[Daniel_Kavan]

At this point I'm still planning to disable HT. and cpconfig 3/1.   Leaving 4 cores unused.

[Daniel_Kavan]

Thanks everyone!   I just want to confirm my configurations are optimal.   I set the processors per socket from 8 to 4 cores in my BIOS so just 4 cores are showing up now.   HT is disabled in my BIOS.   fw ctl affinity -l -a shows my interfaces all point to the single SND core CPU 0.   

[Daniel_Kavan]

I think at this point 8 core should be the default not 4.   RFE!

[PhoneBoy]

Not sure I understand this statement since there is no "default" Open Server license.
You buy the license that's appropriate for your hardware and performance needs.

Having said that, we do sell two and four core licenses still.
I believe even the lowest end appliances we sell have a minimum of four cores now.

[Wolfgang]

I've you have a license for 4 cores you can use only 4 cores, regardless of HT or physical. With an 8 core host it's the best to use 4 physical cores.

But in general more cores are always better 😁