CoreXL tuning might be needed on CoreXL-enabled systems including Crossbeam X-Series.
Prime examples are systems:
- Which are utilizing the default configuration
- Where high performance is required
- On which only basic firewall and/or NAT functions are performed
Check Point R70 running on Crossbeam Systems X-Series APMs is configured in a similar way to a default R70 configuration running on a system with the same number of cores. That way, cores 0 and 1 for 8 core system (ie. APM-8650) are assigned to process incoming traffic. The traffic dispatcher processes are run on those cores whilst rest of cores are assigned to process traffic (ie. 6 cores: 2-7).
This core allocation provides better performance and full utilization of all the available system resources when SmartDefense/IPS security features or security servers are enabled.
Such a configuration may be optimal for majority of the customers. However, for those customers requiring high performance on systems providing only basic firewall functionality might observe problem symptoms as mentioned above (cores 0 and 1 loaded). The problem might be caused by a high volume of traffic as well as high number of small packets.