topic Re: Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall in General Topics

Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

tamilvanan — Tue, 21 Dec 2021 13:09:57 GMT

Hi All,

Our Data Plane is going high. While checking we could see that the packet descriptor (on-chip) average and the packet buffer average had gone.

I just want to know what does packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall means.

Thanks in advance

Re: Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

OtakarKlier — Tue, 21 Dec 2021 21:56:47 GMT

Hello,

To check data place CPU usage, check out the following article, but i usually just open a case:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRTCA0

Here you might find the definition answers?

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/dos-protection-against-flooding-of-new-sessions/identify-sessions-that-use-too-much-of-the-on-chip-packet-descriptor

Re: Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

laurence64 — Wed, 22 Dec 2021 09:33:51 GMT

HI @OtakarKlier

so looking at the document you linked, does that mean that packet descriptor (on-chip) is referring to slow pathed traffic that is being buffered ?

Re: Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

hpandit — Mon, 14 Nov 2022 14:54:50 GMT

Hello Tamilivanan,

Please find the below info,

Packet Descriptors: This is a Data structure in the DRAM where the actual RAW packets are saved.

Packet Descriptors: This is a Data Structure within the DRAM where the WQE is stored

Packet Descriptors on chip: This is a Data Structure within the SSO’s internal memory. It is used for Internal QoS queues, Inflight Queues and Desheduled Packet Queue.

Hope this info will help you.

Re: Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

OtakarKlier — Tue, 15 Nov 2022 22:28:51 GMT

Hello,

It should be both, slow and fast path. The data plane handles both.

Someone please correct me if incorrect.

Regards,