Hello,
currently we are implementing Check Point vSEC GW hosted on ESXi host with 2x10G interfaces to Internet and 2x 10G interfaces to LAN. We would like to bond the interfaces for load balancing, however I don't know if we should do the aggregation on VMWare layer in vSwitch or I should create 2 interfaces to Check Point GW VM and bond them there together. What do you think would give us better throughput? Thanks for suggestions.
We will be using VMXNET 3 as driver for 10G vNICs.
Speaking strictly from point of view of Gaia interface:
The link speed increment is not defined by the user. So if you'll perform port aggregation in VMware, the Gaia may still default to a single interface speed.
It stands to reason that you may want to present both interfaces as separate entities and perform aggregation in the bond on Gaia.
I am uncertain how the LACP will act with ESXi's virtual switch though. It is possible that you may have to tinker with the promiscuous mode settings on the port group assigned to carry this traffic.
Timothy Hall could probably chime in on this subject.