topic Re: Cloud performance ( I know the real answer is it depends ) in VM-Series in the Public Cloud

Cloud performance ( I know the real answer is it depends )

OtakarKlier — Thu, 10 May 2018 15:20:20 GMT

Hello All,

Just curious what others have seen when it comes to performance/throughput of a cloud based PAN. My question is geared towards GlobalProtect and clients browsing off network, e.g. off network clients VPN into the cloud PAN and browse the internet that way instead of via the coporate one.

Thanks in advance!

Re: Cloud performance ( I know the real answer is it depends )

jperry1 — Thu, 10 May 2018 15:37:04 GMT

I don't believe there is a way to answer that because of the variables involved. If there is VPN to the cloud from corporate you have to consider

1. the bandwidth and throughput of the connection from Corporate into the Cloud

2. The bandwidth and through of the connection to the internet from the cloud

After you have considered that then comes the question of the type of traffic the customer will need to pass through the firewall.

1. http, https smb?

2. What will the transaction sizes be?

As you can see there are too many variables to make a blanket statement saying that customers are seeing a certain level of performance in those scenarios.

Re: Cloud performance ( I know the real answer is it depends )

OtakarKlier — Thu, 10 May 2018 15:50:56 GMT

Yeah I couldnt agree more on your response. So let me rephrase the question a bit and see if the answers change. I'm trying to size a solution for end users to VPN into a cloud PAN just for web browsing, non corporate tasks. Looking at the published guide, VM-SERIES ON AMAZON WEB SERVICES, I see the following:

It seems that the test results for the vm-100 and 300 are the same so why pay the extra? I know they have different CPU/RAM specs and also the VM Instances are different. Just seeing if a vm-100 would work for 2K+ users performing casual web-browsing, nothing too bandwidth intensive.

Thoughts?

Re: Cloud performance ( I know the real answer is it depends )

AustinS — Tue, 15 May 2018 02:12:15 GMT

Running into the same sizing issue with Azure, there is limited purpose to go for the higher models of Palo Alto VM500 / VM700 as the throughput is simply capped due to the limitations in running in the cloud. Only recomendation I can provide is to try a lower spec model VM100/VM300 aligned to the PA recomended hosting specicifactions and peform testing to see how it peforms.

Re: Cloud performance ( I know the real answer is it depends )

AnkitChhabra — Fri, 07 May 2021 17:47:11 GMT

Do we a similar testing table on KVM ?

Thanks

Ankit