topic PA 5220 aho and dfa offload in General Topics

PA 5220 aho and dfa offload

MP18 — Mon, 25 Nov 2019 23:18:53 GMT

Do i need to enable aho and dfa or not ?

Running 8.1.9 on PA 5220

debug dataplane fpga state

aho offload not ready

dfa offload setup
Use software only

Re: PA 5220 aho and dfa offload

BPry — Tue, 26 Nov 2019 03:13:53 GMT

@MP18,

You are currently running defaults, which is what I would expect. Why are you looking at modifying the FPGA settings?

Re: PA 5220 aho and dfa offload

MP18 — Tue, 26 Nov 2019 18:02:11 GMT

Was curious to know what they do?

Re: PA 5220 aho and dfa offload

MP18 — Tue, 03 Dec 2019 21:46:02 GMT

Verify with PA that these are default settings and suppose to work better this way

Re: PA 5220 aho and dfa offload

damiller — Mon, 30 Nov 2020 21:12:50 GMT

Doesn't this article imply otherwise?
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLsbCAG

P.S. I have the same issue currently.

Re: PA 5220 aho and dfa offload

BPry — Tue, 01 Dec 2020 00:42:47 GMT

@damiller,

What issue are you actually trying to address? When your troubleshooting potential FPGA issues you can change Aho and dfa to use solely software, but by default the firewall is going to want to offload these to FPGA.

Re: PA 5220 aho and dfa offload

damiller — Tue, 01 Dec 2020 00:46:37 GMT

We had a problem with high latency on the data plane despite low apparent resource utilization. It appears to be resolved now though. Turns out it was related to QoS.

Re: PA 5220 aho and dfa offload

MP18 — Tue, 01 Dec 2020 17:48:09 GMT

Thanks for updating us!

Regards