This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tuning an ASG425?

Hi all.  We have 4 active/passive clusters of ASG425s running 8.301, and since the 8.x train debuted, speed (as in throughput and responsiveness of web sites) has, frankly, sucked.  Three of the clusters just have the web/network subscriptions, and the fourth has web, network, and mail.  The fourth is the slowest firewall, which makes sense to a certain degree, since it is doing the most work.
Can anyone suggest a strategy to go through the configuration of the firewalls and tune them to eke out a little more speed?  Our users are complaining of speed, and given the specs of the firewalls, the speed is somewhat shameful.
As a clarification, every cluster sits on its own connection to the Internet, and every connection has a Public wireless system connected to it as well, with its own firewall, usually just a small commodity firewall running DD-WRT.  Speed is usually blazing on that connection, even when people are complaining of the Astaro's speed.
TIA
Brian

This thread was automatically locked due to age.

Parents

0 William Warren over 13 years ago

I would talk to your reseller9if you ahve one) about activating the local content filter database. There's also tuning that can be done to ips if you are using it as well.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrianRobison over 13 years ago in reply to William Warren

I would talk to your reseller9if you ahve one) about activating the local content filter database. There's also tuning that can be done to ips if you are using it as well.

I tried this last night, word for word. Given that this unit is an older 425a with 2GB RAM, I told it to copy to disk.
Impressions:
I was able to start browsing the Internet about a minute after issuing this command.
Right after issuing the command, I issued the "ls -l /var/chroot-http/var/pattern/sfcontrol" command, and the file was already at ~383MB, so it either copied it down really quickly or it was already there.
Question: is there a command that will tell you where the CF database lives, now that I've taken this step?
Truth be told, the Internet seems a little snappier, but not by a large amount.

I used these steps:
1) enable SSH for both loginuser && root in the Management > System Settings > Shell Access
2) ssh to ASG and login with loginuser
3) su root
4) cc set http sc_local_db disk
5) /var/mdw/scripts/httpproxy restart
6) ls -l /var/chroot-http/var/pattern/sfcontrol

bluffw:/home/login # ls -l /var/chroot-http/var/pattern/sfcontrol
total 375232
-rw------- 1 httpproxy httpproxy 383854440 2012-03-22 11:21 sfcontrol
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrianRobison over 13 years ago in reply to William Warren

I would talk to your reseller9if you ahve one) about activating the local content filter database. There's also tuning that can be done to ips if you are using it as well.

I tried this last night, word for word. Given that this unit is an older 425a with 2GB RAM, I told it to copy to disk.
Impressions:
I was able to start browsing the Internet about a minute after issuing this command.
Right after issuing the command, I issued the "ls -l /var/chroot-http/var/pattern/sfcontrol" command, and the file was already at ~383MB, so it either copied it down really quickly or it was already there.
Question: is there a command that will tell you where the CF database lives, now that I've taken this step?
Truth be told, the Internet seems a little snappier, but not by a large amount.

I used these steps:
1) enable SSH for both loginuser && root in the Management > System Settings > Shell Access
2) ssh to ASG and login with loginuser
3) su root
4) cc set http sc_local_db disk
5) /var/mdw/scripts/httpproxy restart
6) ls -l /var/chroot-http/var/pattern/sfcontrol

bluffw:/home/login # ls -l /var/chroot-http/var/pattern/sfcontrol
total 375232
-rw------- 1 httpproxy httpproxy 383854440 2012-03-22 11:21 sfcontrol
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data