tailieunhanh - check point ng vpn 1 firewall 1 advanced configuration and troubleshooting phần 9

These tương tự là hữu ích trong danh sách các tập tin quan trọng cần thiết sao lưu bằng tay. Các tập tin và thư mục cụ thể được liệt kê trong CPDIR cả $ có chứa các cấu hình vàCác câu hỏi sau đây thường gặp, đã trả lời bởi các tác giả của cuốn sách này, | Performance Pack Chapter 13 481 The platform selection guide is again edifying as to the expected performance of different SecurePlatform-based basic SecurePlatform is identified as a Celeron or Duron processor 256MB RAM one 32-bit 33MHz PCI bus with standard 10 100 network throughput of this configuration is given as 200Mbps. Next up is the midrange SecurePlatform which sports a Pentium or Athlon CPU 512MB of RAM two Intel Pro 1000 network interfaces and 64-bit 66MHz PCI buses. Throughput is stated as 1Gbps . Lastly is the high performance SecurePlatform with dual Xeon or Athlon MP processors 1GB of RAM four Intel Pro 1000 network interfaces and four separate PCI-X stated throughput here is 3Gbps . The importance of the I O bus for raw TCP UDP throughput cannot be overstated as this example shows a dual Xeon GHz machine 1GB RAM two independent 64-bit 66MHz PCI buses dual Xeon GHz machine 1GB RAM four independent PCI-X buses . Comparing the raw CPU speeds one would expect a performance increase to about 2Gbps not 3Gbps. It is the I O bus that is slowing the first configuration down. That said these throughput figures are large TCP streams without encryption. Read on for some qualifying statements about performance. Performance Considerations Keep in mind that 900Mbps Solaris or 3Gbps SecurePlatform is maximum FireWall-1 throughput using 1500-byte is lower in a real-world situation. Look at some numbers You can expect around 4 percent of your packet volume which equals approximately 20 percent of your byte volume to come from these 1500-byte packets. About a third of the packets are dataless ACKs 40 bytes with maybe another fourth coming from 552-byte median packet size is about 256 bytes a good 85 percent of all streams are under 1KB in length. Now throw encryption VPN-1 into the picture and your performance drops dramatically from the quoted 900Mbps or 3Gbps . We d love .