This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG Ram Requirements Growing

I have two sg115 appliances deployed.  One is the regular 115 and the other is the 115w.  I have noticed high base ram usage in utm9 recently.  I have for a while now been running sg on my vm as just a router when i noticed than even when in base form( no additional modules...only about 6 firewall rules and about 25 total devices here at the office) ram usage was nearly 25% of 8 gigabytes.  Two gigs of ram for a base install?  That's nuts.  So now anyone who is running anything below an sg115 will not be able to use http proxy as it wants a gig for itself.  This means the 105 and lower will begin to dig very very heavily into swap...remember this story with the utm 105-115?  I thought you did..:)  So now i have to adjust my recommendations.  The absolute minimum for SG is now 4 gigs.  If you want to run ANY modules you need to start at 8 gigabytes.  It goes up from there.  I sounded the warning on ram usage more than a year before the sg series launched with ram requirements near what i was saying.  Let's see if Sophos will listen and not want more than two years past the needed time to release devices with ram starting at 4 gigs and going up from there.



This thread was automatically locked due to age.
Parents
  • Hi William,

    I think your heading is a bit misleading. If you want features then code has to grow and don't compare the UTM to the XG which is missing a lot of features.

    Your facts about the basic ram size are good points especially on systems with minimal disk space.

    I can remember the discussion on the Astaro ubb about minimum ram size of 4gb preferably 8gb.

Reply
  • Hi William,

    I think your heading is a bit misleading. If you want features then code has to grow and don't compare the UTM to the XG which is missing a lot of features.

    Your facts about the basic ram size are good points especially on systems with minimal disk space.

    I can remember the discussion on the Astaro ubb about minimum ram size of 4gb preferably 8gb.

Children
  • Modified the Title...better?..:)

  • rfcat_vk said:

    Hi William,

    I think your heading is a bit misleading. If you want features then code has to grow and don't compare the UTM to the XG which is missing a lot of features.

    Your facts about the basic ram size are good points especially on systems with minimal disk space.

    I can remember the discussion on the Astaro ubb about minimum ram size of 4gb preferably 8gb.

     

    Actually it wasn't as misleading as it may have appeared.  you can add things without exploding the codebase.  Modern code..everywhere..is sloppy at best and downright crude at worst.  The amount of patches and security vulnerabilities shows it.  yes part of it is due to more scrutiny but the vast majority is poor code quality.  Many of the vulnerabilities we see today are the product of poor quality code.  Some code growth is acceptable..but the amount of explosion that is happening everywhere is not.

  • The code generation is an issue for most developers unless they write their compiler.

    The generated code needs to hand scanned and tightened before being released especially in the security area.