Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

[tamilvanan]

Hi All,

Our Data Plane is going high. While checking we could see that the packet descriptor (on-chip) average and the packet buffer average had gone.

I just want to know what does packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall means.

Thanks in advance

[OtakarKlier]

Hello,

To check data place CPU usage, check out the following article, but i usually just open a case:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRTCA0

Here you might find the definition answers?

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/dos-pr...

[laurence64]

HI @OtakarKlier 

so looking at the document you linked, does that mean that packet descriptor (on-chip) is referring to slow pathed traffic that is being buffered ?

[hpandit]

Hello Tamilivanan,

Please find the below info,

Packet Descriptors: This is a Data structure in the DRAM where the actual RAW packets are saved.

Packet Descriptors: This is a Data Structure within the DRAM where the WQE is stored 

Packet Descriptors on chip: This is a Data Structure within the SSO’s internal memory. It is used for Internal QoS queues, Inflight Queues and Desheduled Packet Queue.

Hope this info will help you.

[OtakarKlier]

Hello,

It should be both, slow and fast path. The data plane handles both.

Someone please correct me if incorrect.

Regards,