Maximum recommended forwarding hosts on Edge SWG (ProxySG)

Products

• ProxySG Software - SGOS

Issue/Introduction

The Edge SWG with many forwarding hosts defined and in use in Policy with the following symptoms:

- High CPU utilization

- Slow service for client requests

- Unexpected restarts when changing or committing Policy

- Unexpected restarts if DNS or other networking issues occur

- Restarts with the following signature found in the Mini-Context section in the Sysinfo file:

Hardware exception code: 0x0
Software exception code: 0x3a0004
Page fault linear address: 0x0
Process group: "PG_HEALTH_CHECKS"
Process: "HC Watchdog" in "" at .text+0x0

Cause

The Edge SWG experiences performance issues or restarts unexpectedly when more than 1000 forwarding hosts are defined.

Resolution

Keep the forwarding hosts to less than 1000 entries. Forwarding TCP tunneled requests can be done with Policy rewrite without using forwarding hosts.

See the technical documentation for Optimizing Forwarding Policy for Tunneled Traffic