Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Wolfgang
Authority
Authority
Jump to solution

performance impact of sk34295 (How to configure DNS NAT) ?

Are there any performance impact following How to configure DNS NAT (checkpoint.com) ?

If enabled all UDP-DNS traffic will be not accelerated by SecureXL but I think this has not much impact. 

0 Kudos
1 Solution

Accepted Solutions
Timothy_Hall
Legend Legend
Legend

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path.  It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it.  Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

I don't believe DNS traffic benefits from SecureXL that substantially, given the relatively short nature of a DNS query.
Never heard of a performance-related issue tied to this feature, either.

0 Kudos
Timothy_Hall
Legend Legend
Legend

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path.  It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it.  Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
the_rock
Legend
Legend

I cant speak for others, but TAC had customer follow this back in 2020 and they never had any issues afterwards.

Best,

Andy

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events