Solved: Re: performance impact of sk34295 (How to configur...

Wolfgang · ‎2024-04-16

Are there any performance impact following How to configure DNS NAT (checkpoint.com) ?

If enabled all UDP-DNS traffic will be not accelerated by SecureXL but I think this has not much impact.

Timothy_Hall · ‎2024-04-17

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path. It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it. Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course

View solution in original post

PhoneBoy · ‎2024-04-17

I don't believe DNS traffic benefits from SecureXL that substantially, given the relatively short nature of a DNS query.
Never heard of a performance-related issue tied to this feature, either.

Timothy_Hall · ‎2024-04-17

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path. It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it. Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course

the_rock · ‎2024-04-17

I cant speak for others, but TAC had customer follow this back in 2020 and they never had any issues afterwards.

Best,

Andy

Are you a member of CheckMates?

performance impact of sk34295 (How to configure DNS NAT) ?