Im not sure if this is a kind of process protection, but we were running
R55 on Nokia until we decided move to Crossbeam and at the same time we
upgrade the CP version to R61.
I found that the minimum of the load was 1, but though that was related
with the crossbeams and not with CP.
Anyway this didnt affect the performance at all, even that the amount of
traffic is going up and down, the load keeps in 1. We have higher loads
in some cases but not with normal traffic.
Regards,
Sebastian.
Reinhard Stich wrote:
hi,
it's not a but, it's a feature :-)
I had a case open about that and checkpoint told me that this should
be some kind of process-protection ...
so just forget about the load of 1.0
br
reinhard
At 01:01 18.02.2008, you wrote:
We've just upgrade our Check Point systems from R55 to R65, and
overall everything went smoothly. One thing that is kind of an odd
behavior, however, is the load average on the enforcement points.
Each of our enforcement points (2 HA clusters of 2 nodes each) shows
a minimum load average of 1.00, depending on what is going on. It
will almost never go under that. On R55, this was not the typical
behavior.
Looking on the system, I see a kernel thread that is appears to be in
a waiting state:
root 638 0.0 0.0 0 0 ? DW Feb16 0:00 [fw1-wt]
Our management system does not have this process running, and does
not show the constant load average.
Looking around, this is a worker thread for FW1. A message on CPUG
states that this is normal behavior (per Check Point support) [1],
but I'm concerned as to why it is perceived as normal?
It doesn't appear to be causing a performance hit that I can tell.
My concern is that something is misconfigured, and I'm not able to
determine what.
Does anyone else notice this behavior on their R65 SPLAT systems?
Did this behavior change sometime between R55 and R65?
[1] Acceptable load average on SPLAT/RHEL
<http://www.cpug.org/forums/check-point-secureplatform-splat/4578-acceptable-load-average-splat-rhel.html>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Sebastian Arriada, Network Security
lastminute.com,
Phone: +54 9221 54558793
[EMAIL PROTECTED]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
