topic Re: Inter Vsys Throughput Limitation in General Topics

Inter Vsys Throughput Limitation

ImBatman — Thu, 20 Jul 2017 16:09:42 GMT

We are currently testing out a PA-5220 in a POC. We have run into a strange issue with througput limitations when traffic is passing between Vsys. On a single Vsys (L2, L3 and vWire), we are able to max out 10Gb's using a single TCP session with iperf3. As soon as we introduce another Vsys into the equation and route traffic between them, single TCP session througput drops to 1.25Gb/s. Using multiple TCP sessions we can get back up to 10GB/s. That's fine, but if we have a use case where two systems in separate vsys are communicating with a single TCP session this will be an issue. Does anyone know if this is a limitation of using Vsys or have I stumbled across a bug?

Thanks in advance,

Jeremy

Re: Inter Vsys Throughput Limitation

TerjeLundbo — Fri, 21 Jul 2017 10:09:39 GMT

We have tested this in the past with the same result as you. Direct inter-VSYS communication is slow. But if you run the traffic through an external switch the performance is much better.

Re: Inter Vsys Throughput Limitation

ImBatman — Fri, 21 Jul 2017 14:10:34 GMT

Update,

I was able to get near 10Gb/s using jumbo frames. So either it's a bug or the PPS (Packets Per Second) capability is less for inter-Vsys communication. I'm still leaning towards a bug at this point. Thank you for the "outside the box" idea. I'll give it a whirl.

<literally, outside the box - HAHA>