Sounds good. O, by the way, I would strongly suggest they choose AUTOMATIC option and here is reason why. Its because that way, gateway calculates automatically how to distribute amout of connections based on memory/cpu allocated and the resources, rather than when its set manually, as I had seen cases where people give way more connections than whats needed and that can certainly have negative impact on the performance.
Some commands to check this (from my lab)
[Expert@quantum-firewall:0]# fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 40 481 55
[Expert@quantum-firewall:0]# fw ctl multik print_heavy_conn
[Expert@quantum-firewall:0]# fw ctl pstat
Virtual System Capacity Summary:
Physical memory used: 20% (3854 MB out of 18581 MB) - below watermark
Kernel memory used: 3% (650 MB out of 18581 MB) - below watermark
Virtual memory used: 17% (3158 MB out of 18581 MB) - below watermark
Used: 3158 MB by FW, 1152 MB by zeco
Concurrent Connections: 23 (Unlimited)
Aggressive Aging is enabled, not active
Kernel memory (kmem) statistics:
Total memory bytes used: 2283715237 peak: 4000157343
Allocations: 846397085 alloc, 0 failed alloc
754610695 free, 0 failed free
Cookies:
12822991 total, 0 alloc, 0 free,
135376 dup, 24517708 get, 6642283 put,
30630748 len, 16781497 cached len, 0 chain alloc,
0 chain free
Connections:
919962 total, 152859 TCP, 213925 UDP, 549132 ICMP,
4046 other, 0 anticipated, 1 recovered, 23 concurrent,
1135 peak concurrent
Fragments:
18 fragments, 9 packets, 0 expired, 0 short,
0 large, 0 duplicates, 0 failures
NAT:
1136860/0 forw, 1456731/0 bckw, 3405335 tcpudp,
1878 icmp, 330875-231282 alloc
Sync: Run "cphaprob syncstat" for cluster sync statistics.
[Expert@quantum-firewall:0]#
Hope those help.
Cheers,
Andy
