Cloud SWG POP capacity and bandwidth scaling for high-traffic applicationsBroadcom manages Cloud Secure Web Gateway (Cloud SWG) Points of Presence (POPs) to ensure high-capacity availability for all customers. This article describes how POP capacity is sc
Article ID: 446944
Updated On:
Products
Cloud Secure Web Gateway - Cloud SWG
Issue/Introduction
Broadcom manages Cloud Secure Web Gateway (Cloud SWG) Points of Presence (POPs) to ensure high-capacity availability for all customers. This article describes how POP capacity is scaled and the technical limitations of individual connection methods when deploying high-bandwidth applications.
Environment
Product: Cloud Secure Web Gateway (Cloud SWG)
- Connectivity: IPsec Tunnels, WSS Agent, SEP/ESA Agents
- Traffic Type: High-bandwidth rollouts (e.g., NotebookLM, 4K Video, Large-scale file sync)
Resolution
Broadcom Operations and Engineering monitor global POP capacity 24/7. Capacity is dynamically scaled to handle general traffic increases across the tenant landscape. For specific customer rollouts, adhere to the following bandwidth guidelines:
- IPsec Tunnel Limits: Each individual IPsec tunnel is limited to a maximum throughput of 1 Gbps.
- Scaling Infrastructure: If anticipated traffic for a site or application exceeds 1 Gbps, establish additional IPsec tunnels using unique public IP addresses to distribute the load across the Cloud SWG infrastructure.
- Security Overhead: Security scanning (SSL Interception, DLP, Malware Scanning) requires real-time processing. While this may result in lower "raw" throughput in synthetic speed tests, the service is optimized to support high-quality user experiences for demanding applications.
- Benchmarking: Most enterprise applications (Zoom, Webex, 4K streaming) require less than 20 Mbps per user. If performance is consistently below 20 Mbps or productivity is impacted, contact support for a performance review.
Additional Information
Feedback
Yes
No
Powered by
