Impact on Processing rulebase order

tomdevos-D09 — Fri, 15 Oct 2021 11:25:03 GMT

Hi,

Is there and if so what is the difference on processing speed of a PA rulebase when most hit rules are on top vs when most hit rules are spread throughout the rule base?

For example: Imagine a rulebase of 15000 rules. What would be the processing speed difference if a certain rule is hit 10000 times a day if it's on top (say 1th rule in the rulebase) or when it is the last rule in the rulebase.

Re: Impact on Processing rulebase order

LAYER_8 — Fri, 15 Oct 2021 16:36:55 GMT

Here's an example of a firewall with a lot more rules than that. The 3k and 5k series boxes have their own dedicated first packet processor with tens of gigs speed hitting the network/security chipset fabric. Of course there will be a slight difference but with dedicated hardware, very minimal.

topic Impact on Processing rulebase order in General Topics

Impact on Processing rulebase order

Re: Impact on Processing rulebase order