topic Re: Virtual System Resource allocation in General Topics

Virtual System Resource allocation

SahulH — Tue, 11 Feb 2020 05:20:40 GMT

Hi Team,

We would like to know how can we allocate the CPU resources for Virtual system (Vsys) on a Firewall.

Please share your thoughts !!

Awaiting for a response. Thanks in advance !!

Best Regards,

Sahul Hameed

Re: Virtual System Resource allocation

SutareMayur — Tue, 11 Feb 2020 05:51:12 GMT

@SahulHHello, you can't define CPU resources to particuler Vsys. CPU cycles are global to box. You can only define resources like session limit, security and NAT policies, tunnel limits and other (PFA image for seeing other) to particular vsys under resources.

Hope this helps !

Mayur

Re: Virtual System Resource allocation

SahulH — Tue, 11 Feb 2020 06:09:19 GMT

@SutareMayur Thanks Mayur,

Yes, I do agree on that, we can only able to specify limitation for the mentioned features. However, my concern is how the packet processing will be handled by the Firewall if we have deployed a Multi Vsys enabled. In order to get clarified more regarding how the resources are getting allocated for each and every ingress packets.

So for now my understanding here is, the firewall will use the default mechanism for CPU allocation for the packets received for processing. Am i right?

So if my understanding is correct. the firewall will not consider Vsys information for allocating the CPU and Memory resources for any ingress packets.

Please correct me if i am wrong !!

Best Regards,

Sahul Hameed

Re: Virtual System Resource allocation

SutareMayur — Tue, 11 Feb 2020 06:43:47 GMT

@SahulH Firewall will have all the information of multiple vsys but it will not consider it while allocating resources like cpu and memory. Firewall will only consider the features that we just discussed related to limiting resources per vsys. Yes, when packets comes into firewall, it will use its default mechanism of cpu and memory allocation. So all vsys have access to all resources, so they will just grab what they can until resources are exhausted.

Hope this helps !

Mayur

Re: Virtual System Resource allocation

SahulH — Tue, 11 Feb 2020 06:55:01 GMT

@SutareMayurThanks Mayur, For your explanation and also confirming my understanding is right !!.

Best Regards,

Sahul Hameed