Check Point R70 supports CoreXL technology, which allows more granular control over functions performed on different CPU cores. SecureXL, also known as Performance Pack (PPAK) is available on R70 and previous platforms which are currently supported.
CoreXL allows individual cores to be used in two ways:
Individual cores are able to receive incoming network traffic if they are assigned to one of interrupts (sim affinity).
Affinity with an interface is set in the same way as without CoreXL, since it is directly related to kernel interface<->CPU core affinity.
Under most operating conditions, each core performs only one of above mentioned tasks, but a core can perform both tasks. See the configurations below.
The default R70 configuration is set as follows:
2 core system - 2 dispatchers and 2 instances (both CPUs act in both roles)
4 core system - 1 dispatcher and 3 instances
8 core system - 2 dispatchers and 6 instances
Verify core utilization:
# fw ctl multik stat
Cores not listed as instances are used by the dispatcher and SXL.
List cores assigned to particular interfaces (SDPs):
# sim affinity –l
The default configuration is suitable for general use, where a mix of traffic is observed, providing the best performance in most cases.
For any further questions, please contact Crossbeam Technical Support for assistance.