High latency after Checkpoint migration from VSX to VSEC

Asg.Systems

Member
Jan 14, 2021
14
0
6
53
Hi,
after migration of a Checkpoint VSX to VSEC Appliance on Proxmox infrastructure, seems that traffic passing through this firewall present an high latency and packet loss.
Here an example:

2021-09-20 08:58:34 --- 100 packets transmitted, 98 received, 2% packet loss, time 99027ms --- rtt min/avg/max/mdev = 4.383/212.363/1358.707/377.675 ms, pipe 2
2021-09-20 09:00:14 --- 100 packets transmitted, 100 received, 0% packet loss, time 99023ms --- rtt min/avg/max/mdev = 4.348/4.795/14.034/1.089 ms
2021-09-20 09:01:54 --- 100 packets transmitted, 98 received, 2% packet loss, time 99024ms --- rtt min/avg/max/mdev = 4.386/6.226/145.115/14.122 ms
2021-09-20 09:03:34 --- 100 packets transmitted, 100 received, 0% packet loss, time 99026ms --- rtt min/avg/max/mdev = 4.354/4.608/7.870/0.418 ms
2021-09-20 09:05:14 --- 100 packets transmitted, 100 received, 0% packet loss, time 99001ms --- rtt min/avg/max/mdev = 4.381/4.556/5.785/0.239 ms
2021-09-20 09:06:54 --- 100 packets transmitted, 100 received, 0% packet loss, time 99003ms --- rtt min/avg/max/mdev = 4.386/7.552/201.639/21.213 ms
2021-09-20 09:08:34 --- 101 packets transmitted, 99 received, 1% packet loss, time 99996ms --- rtt min/avg/max/mdev = 4.365/4.762/10.150/0.854 ms
2021-09-20 09:10:14 --- 100 packets transmitted, 98 received, 2% packet loss, time 98998ms --- rtt min/avg/max/mdev = 4.357/4.599/7.342/0.374 ms


Before there wasn't this high latency deviance and packet loss.
Shouldn't be a performance issue because by comparing with performance status graphics, CPU and RAM didn't seem in suffer.
We've disabled already all Checkpoint Blade that can cause performance issue.

Currently the VSEC VM is hosted on a PVE node

Kernel Version: Linux 5.4.128-1-pve #1 SMP PVE 5.4.128-1
PVE Manager Version: pve-manager/6.4-13/9f411e79

Attached the VM configurations.

VSEC_Info.PNGVSEC_Info2.PNG


Someone could help us?

Thanks
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!