Difference between revisions of "Performance Tuning"
| Line 2: | Line 2: | ||
'''[[Check Point#Gaia|Back to Gaia]]''' | '''[[Check Point#Gaia|Back to Gaia]]''' | ||
| − | Set these on FWDIR/boot/modules/fwkern.conf | + | Set these on $FWDIR/boot/modules/fwkern.conf |
fwmultik_input_queue_len=4096 | fwmultik_input_queue_len=4096 | ||
fwkern_optimize_drops_support=1 | fwkern_optimize_drops_support=1 | ||
Revision as of 16:14, 24 October 2018
Set these on $FWDIR/boot/modules/fwkern.conf
fwmultik_input_queue_len=4096 fwkern_optimize_drops_support=1 activate_optimize_drops_support_now=1 fwha_freeze_state_machine_timeout=90 fwha_enable_state_machine_by_vs=1 cphwd_nat_templates_support=1 cphwd_nat_templates_enabled=1
In SmartDashboard, open Security Gateway object and Go to 'Optimizations' pane. The 'Calculate the maximum limit for concurrent connections' should be set to 'Automatically', or put 150k (the default 50k is too tight)
Ensure CoreXL is enabled in cpconfig, and SecureXL (using 'fwaccel stat')
Consider to use CPU Affinity for interfaces (using 'sim affinity -s')
Check the sk98348 for proper documentation on performance optimization Best Practices.
Disable log for DNS and Proxy rules as the information is stored in application's log, thus the firewall log adds almost no value.
And on Dashboard filter for Hits:High and Very High and move these rules upwards.
Check the Performance Tuning Administration Guide for R77 / R80