CoreXL Dynamic Balancing & HyperFlow

[Danny]

👨‍💻 Reviewed by Check Point
ℹ️ Supported on CP Enterprise Appliances

SmartConsole Extension to manage sk164155 - Dynamic Balancing for CoreXL & HyperFlow.

Extension URL

https://dannyjung.de/ds.json

Dynamic Balancing Managers

• @AmitShmuel - Amit Shmuel
• @Chen_Muchtar - Chen Muchtar (TechTalk: Dynamic Workloads, Quantum Hyperflow)
• @eladni - Elad Niddam

[Guy_Maoz]

Great extension Danny!

Looking forward to the next update.

[Chen_Muchtar]

Awesome! 

[AmitShmuel]

Thanks Danny! This is super useful!

[Mark_Gurevich]

Seem to be a great tool. But I am getting "Unsupported" for all kind of appliances (obviously R80.40 )

[_Val_]

From sk164155

System requirements

• Supported Platforms: Dynamic Balancing is supported only on Check Point Appliances. 
  
  
• Supported Models: Dynamic Balancing is supported only on these models:
  
  • All models in these series: 7000, 15000, 16000, 23000, 26000 and 28000
  • 5000 series: 5600, 5800 and 5900
  • 6000 series: 6200T, 6400, 6500, 6600, 6700, 6800 and 6900
  • 3000 series: 3100, 3200, 3600 and 3800
  Note: On models with fewer than 8 cores, a GNAT port allocation feature must be enabled. Refer to sk165153.

• Supported versions: Check Point R80.40 with Jumbo Hotfix Take 25 and higher

• Supported configurations: Security Gateway (Kernel or USFW), Stand-Alone
  
  
• Supported features: IPv6, Management Data Plane Separation (MDPS), Bridge mode 
  
  
• Not supported: Check Point Appliances that run in VSX mode (regardless of the number of CPU cores), Check Point Maestro

[Mark_Gurevich]

Hi Val,

I am trying on 5000 and 26000 devices with R80.40. Non VSX

[Danny]

HI @Mark_Gurevich ,

please try my helper extension https://dannyjung.de/smx.json and check if these conditions are met:

['type'] == 'CpmiClusterMember' or 'simple-gateway'
['os-name'] == 'Gaia'
['version'] == 'R80.40' or startsWith('R81')
['hardware'].endsWith('Appliance') or ('Appliances')

[Mark_Gurevich]

Hi Danny,

Thanks for quick reply.

Not sure how, but after upgrading the SmartConsole to the latest build, everything started to work

BR

[Timothy_Hall]

Correction: sk178070: HyperFlow in R81.20 and higher has just been updated stating that the 3800 model does not support Hyperflow even though it has the required 8 cores.  Not sure why this would be unless the Atom processor can't handle Hyperflow for some reason.

[pnormanmtvh]

HI,

I have a quick query re: the extension. I have added it and it works to a point. I have to 'Load' it; approve the script commit, the look at the task results. In other words I don't see the output in the window as shown in my attached screenshot. I am running the 80.40 SmartConsole Build 416.

Thanks

Paul Norman

[Neil_Deane]

Hi Danny,

I'm trying the CoreXL balancing extension., and getting error: Loading Error: ERR_CONNECTION_TIMED_OUT

New to these addons and I only added the extension to SmartConsole, is there any other basic pre-reqs for extensions to work ? Any requirement to reboot SMC or gateways ?

Cheers,

Neil.

[Danny]

There are not other requirements. Which SmartConsole version and build are you using? Does your SmartConsole has direct internet access or is there a proxy in between? Where exactly does the error message appear?

[Neil_Deane]

Hi Danny,

Its SmartConsole R80.40 Build 416. There is indeed a proxy in between. (Isn't this a security community, why would we let a random connection get to the Internet unchecked ... 🙂

The error appears in extension panel on SmartConsole, see snip.

Cheers,

[Danny]

Troubleshooting SmartConsole Extensions - sk166932 <- set UseDefaultWebProxy=true and it should work.

[Neil_Deane]

Excellent - that worked, thanks.

For me I had to add UseDefaultWebProxy=true in SmartConsole.exe.config. Then I had to add the proxy Ip in the GUI clients on the SMC.

On one SMC I found the API service had crashed 😟 so had to restart it. ( More work, I suspect possible memory leak in 80.40 JHFA Take 91 for management)

That SK was hard to find, perhaps pin to Extensions forum, very useful

Anyway, extension now working. Great tool and thanks again

[FelipeTropeia]

Hi Guys,

I'm also trying to enable it in our env, however, when I click on load button nothing happens. We are using R80.40 GA 118 take, no proxy involved and smartconsole 416 build. 

@Danny Cheers after our meeting everything is working as we expected. The smartconsole has been updated to 428 version as well. 

[Mario_Zuker]

Awesome! thanks Danny

[Timothy_Hall]

Very nice visualization of what is going on from a performance perspective, looks like the days of figuring out what obscure command to run to see what is going on is finally past!  Nicely done!

[bbruelhart]

Does anyone know if this feature is supported on the Quantum Light Speed Appliances, in particular on the 450?
I would like to enable it but get an error message:
Dynamic Balancing Status - Off (Stopped due to State Verification failure)

[AmitShmuel]

Hi,

It shouldn't be supported if User Space PPAK is enabled.

I believe this message has something to do with MQ.
Please contact me offline @ amitshm@checkpoint.com, and I'll be able to add the relevant owner.

Thanks,
Amit

[CheckPointerXL]

Hello,

it does works with 81.10?

on my environment 81.10 and 32core it doesn't (dynamic balancing)

[_Val_]

@CheckPointerXL Hyperflow is not available in R81.10, but Dynamic Balancing is, assuming your GWs have at least 8 cores. The extension should work on R81.10, but I will let @Danny to confirm this.

[Danny]

@CheckPointerXL : This extension was tested to work with R81.10 on 32 core appliances and bigger ones. Your comment sounds to me that you are unable to activate dynamic balancing. If this is the case, please open a service request with TAC.

[CheckPointerXL]

hello danny,

thank you for the reply.

i have currently no access to smartconsole, but i remember that the box extension was blank with N/A.
R81.10 Take 66, dynamic balancing 100% enabled. 

i will update you

best regards

[belteto]

Hi!

I got this after the activation of the extension
Loading Error: ERR_NAME_NOT_RESOLVED

Any idea?

[Danny]

• Sounds like a DNS or URL rewrite issue.
• Do you have a proxy in use?
• Do any of the other SmartConsole extensions work for you?
• Could you provide more information at which stage exactly this error message shows up?
• Did you try any of the solutions mentioned above?

[belteto]

Hi Danny!

Thx for the fast response.

I'm using the HCP extension already.

The error is coming when I check the result under the gateway new dynamic balancing tab.

We have proxy in place, but just set in the windows itself. not in the smartconsole.exe.config.

If I set the proxy to "True" in the config file, I cannot connect to the management server 🙂

But adding your extension with just the proxy in the windows was worked well. So internet connection is okay.

Balint

[Danny]

Perfect! 👍