Hi,
after migration of a Checkpoint VSX to VSEC Appliance on Proxmox infrastructure, seems that traffic passing through this firewall present an high latency and packet loss.
Here an example:
2021-09-20 08:58:34 --- 100 packets transmitted, 98 received, 2% packet loss, time 99027ms --- rtt min/avg/max/mdev = 4.383/212.363/1358.707/377.675 ms, pipe 2
2021-09-20 09:00:14 --- 100 packets transmitted, 100 received, 0% packet loss, time 99023ms --- rtt min/avg/max/mdev = 4.348/4.795/14.034/1.089 ms
2021-09-20 09:01:54 --- 100 packets transmitted, 98 received, 2% packet loss, time 99024ms --- rtt min/avg/max/mdev = 4.386/6.226/145.115/14.122 ms
2021-09-20 09:03:34 --- 100 packets transmitted, 100 received, 0% packet loss, time 99026ms --- rtt min/avg/max/mdev = 4.354/4.608/7.870/0.418 ms
2021-09-20 09:05:14 --- 100 packets transmitted, 100 received, 0% packet loss, time 99001ms --- rtt min/avg/max/mdev = 4.381/4.556/5.785/0.239 ms
2021-09-20 09:06:54 --- 100 packets transmitted, 100 received, 0% packet loss, time 99003ms --- rtt min/avg/max/mdev = 4.386/7.552/201.639/21.213 ms
2021-09-20 09:08:34 --- 101 packets transmitted, 99 received, 1% packet loss, time 99996ms --- rtt min/avg/max/mdev = 4.365/4.762/10.150/0.854 ms
2021-09-20 09:10:14 --- 100 packets transmitted, 98 received, 2% packet loss, time 98998ms --- rtt min/avg/max/mdev = 4.357/4.599/7.342/0.374 ms
Before there wasn't this high latency deviance and packet loss.
Shouldn't be a performance issue because by comparing with performance status graphics, CPU and RAM didn't seem in suffer.
We've disabled already all Checkpoint Blade that can cause performance issue.
Currently the VSEC VM is hosted on a PVE node
Kernel Version: Linux 5.4.128-1-pve #1 SMP PVE 5.4.128-1
PVE Manager Version: pve-manager/6.4-13/9f411e79
Attached the VM configurations.
Someone could help us?
Thanks
after migration of a Checkpoint VSX to VSEC Appliance on Proxmox infrastructure, seems that traffic passing through this firewall present an high latency and packet loss.
Here an example:
2021-09-20 08:58:34 --- 100 packets transmitted, 98 received, 2% packet loss, time 99027ms --- rtt min/avg/max/mdev = 4.383/212.363/1358.707/377.675 ms, pipe 2
2021-09-20 09:00:14 --- 100 packets transmitted, 100 received, 0% packet loss, time 99023ms --- rtt min/avg/max/mdev = 4.348/4.795/14.034/1.089 ms
2021-09-20 09:01:54 --- 100 packets transmitted, 98 received, 2% packet loss, time 99024ms --- rtt min/avg/max/mdev = 4.386/6.226/145.115/14.122 ms
2021-09-20 09:03:34 --- 100 packets transmitted, 100 received, 0% packet loss, time 99026ms --- rtt min/avg/max/mdev = 4.354/4.608/7.870/0.418 ms
2021-09-20 09:05:14 --- 100 packets transmitted, 100 received, 0% packet loss, time 99001ms --- rtt min/avg/max/mdev = 4.381/4.556/5.785/0.239 ms
2021-09-20 09:06:54 --- 100 packets transmitted, 100 received, 0% packet loss, time 99003ms --- rtt min/avg/max/mdev = 4.386/7.552/201.639/21.213 ms
2021-09-20 09:08:34 --- 101 packets transmitted, 99 received, 1% packet loss, time 99996ms --- rtt min/avg/max/mdev = 4.365/4.762/10.150/0.854 ms
2021-09-20 09:10:14 --- 100 packets transmitted, 98 received, 2% packet loss, time 98998ms --- rtt min/avg/max/mdev = 4.357/4.599/7.342/0.374 ms
Before there wasn't this high latency deviance and packet loss.
Shouldn't be a performance issue because by comparing with performance status graphics, CPU and RAM didn't seem in suffer.
We've disabled already all Checkpoint Blade that can cause performance issue.
Currently the VSEC VM is hosted on a PVE node
Kernel Version: Linux 5.4.128-1-pve #1 SMP PVE 5.4.128-1
PVE Manager Version: pve-manager/6.4-13/9f411e79
Attached the VM configurations.
Someone could help us?
Thanks