07-20-2017 09:09 AM
We are currently testing out a PA-5220 in a POC. We have run into a strange issue with througput limitations when traffic is passing between Vsys. On a single Vsys (L2, L3 and vWire), we are able to max out 10Gb's using a single TCP session with iperf3. As soon as we introduce another Vsys into the equation and route traffic between them, single TCP session througput drops to 1.25Gb/s. Using multiple TCP sessions we can get back up to 10GB/s. That's fine, but if we have a use case where two systems in separate vsys are communicating with a single TCP session this will be an issue. Does anyone know if this is a limitation of using Vsys or have I stumbled across a bug?
Thanks in advance,
Jeremy
07-21-2017 03:09 AM
We have tested this in the past with the same result as you. Direct inter-VSYS communication is slow. But if you run the traffic through an external switch the performance is much better.
07-21-2017 07:10 AM
Update,
I was able to get near 10Gb/s using jumbo frames. So either it's a bug or the PPS (Packets Per Second) capability is less for inter-Vsys communication. I'm still leaning towards a bug at this point. Thank you for the "outside the box" idea. I'll give it a whirl.
<literally, outside the box - HAHA>
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
