Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 30 subscribers
  • Views 9351 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Poor Routing/Firewall Performance

Christoph Sulik

Hello,

I am using XG Firewall with firmware SFOS 16.05.8 MR-8 on ESX with 4GB RAM and Intel(R) Xeon(R) CPU E3-1240 V2 @ 3.40GHz (4 CPUs assigned to VM) imported from original VM template. On the ESX host there are two other vms in different networks (Two different VLANs on the same interface of the firewall). XG routes beetween the two networks.

For the speedtest I used netio between the two VMs (so network traffic does not leave the ESX host) and made a new firewall rule for the test without any IPS and other features. I checked, if the rule is used for the test: yes.

The performance in the screenshot I also noticed, when I copy files from Server to Storage (about 10-20MB/Sec connected to LAN with 1GB/s). Copying files from Server to Storage on the same Layer 2 network I get about 100MB/Sec throughput (full GBit speed)

The speedtest with the same VMs on the same Layer2 network looks like this:

Of couse I do not expect the same speed on Layer2 and Layer3 with firewall function. But I thing the performance is poor.

 

Is there someting I can check or change to improve the speed?



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Christoph Sulik

    Did you try disabling the DOS section also? It affects some people and not others. I wonder if you would get better performance with a multi stream test. Maybe their vmware template sucks and you can try installing an ISO. I am just spit balling here since I haven't done a single stream iperf type test but have no problem hitting gigabit traffic on hardware appliances with multiple users.

Children
No Data