hi,
it starts with R60 that the load on _all_ linux based
systems/appliances is 1.0 if you have a checkpoint module running.
on ipso/solaris the load is still 0.x
br
reinhard
At 13:12 18.02.2008, you wrote:
Im not sure if this is a kind of process protection, but we were
running R55 on Nokia until we decided move to Crossbeam and at the
same time we upgrade the CP version to R61.
I found that the minimum of the load was 1, but though that was
related with the crossbeams and not with CP.
Anyway this didnt affect the performance at all, even that the
amount of traffic is going up and down, the load keeps in 1. We have
higher loads in some cases but not with normal traffic.
Regards,
Sebastian.
Reinhard Stich wrote:
hi,
it's not a but, it's a feature :-)
I had a case open about that and checkpoint told me that this
should be some kind of process-protection ...
so just forget about the load of 1.0
br
reinhard
At 01:01 18.02.2008, you wrote:
We've just upgrade our Check Point systems from R55 to R65, and
overall everything went smoothly. One thing that is kind of an
odd behavior, however, is the load average on the enforcement points.
Each of our enforcement points (2 HA clusters of 2 nodes each)
shows a minimum load average of 1.00, depending on what is going
on. It will almost never go under that. On R55, this was not the
typical behavior.
Looking on the system, I see a kernel thread that is appears to be
in a waiting state:
root 638 0.0 0.0 0 0 ? DW Feb16 0:00 [fw1-wt]
Our management system does not have this process running, and does
not show the constant load average.
Looking around, this is a worker thread for FW1. A message on
CPUG states that this is normal behavior (per Check Point support)
[1], but I'm concerned as to why it is perceived as normal?
It doesn't appear to be causing a performance hit that I can tell.
My concern is that something is misconfigured, and I'm not able to
determine what.
Does anyone else notice this behavior on their R65 SPLAT systems?
Did this behavior change sometime between R55 and R65?
[1] Acceptable load average on SPLAT/RHEL
<http://www.cpug.org/forums/check-point-secureplatform-splat/4578-acceptable-load-average-splat-rhel.html>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Sebastian Arriada, Network Security
lastminute.com,
Phone: +54 9221 54558793
[EMAIL PROTECTED]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Reinhard Stich [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
Scanned by Check Point Total Security Gateway.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
