Technical data

Optimizing VSX
Check Point VSX Administration Guide NGX R67 | 153
[Expert@rescon:0]# fw vsx resctrl stat
Virtual Systems CPU Usage Statistics
====================================
Number of CPUs/Hyper-threading: 4
Monitoring active time: 14s
ID Name |Weight| 1sec 10sec 1min 1hr 24hr*
========================+======+==================================
0 VSX2 | N/A | 0.11 0.06 0.08 0.07 0.01
1 VSX2_vs1 | 10 | 15.80 21.57 21.75 22.28 1.94
2 VSX2_vsw | N/A | 0.00 0.00 0.00 0.00 0.00
3 VSX2_vs2 | 10 | 16.91 22.57 22.77 23.09 2.01
========================+======+==================================
Total VS CPU Usage | 32.82 44.20 44.60 45.44 3.96
===============================+==================================
System CPU Usage | 99 99 99 99 89
Notes: - Monitoring has been active for less than 24 hours.
Statistics are calculated only for monitoring active time.
- The displayed statistics are the average usage on all
CPUs.
Notes
 For systems with more than one CPU, the time displayed is an average among all CPUs. To view usage
for each Virtual System per CPU, run the command vsx resctrl -u stat.
 The VSX gateway itself, Virtual Switches and Virtual Routers are not assigned weights because they
always receive the highest priority
 Total VS CPU Usage represents the total CPU utilization for all virtual devices, including Virtual
Routers, Virtual Switches and the VSX gateway
 System CPU Usage reports the total CPU utilization for the entire machine
QoS Enforcement
Overview
QoS Enforcement for VSX provides the ability to control the network quality of service in the VSX network
environment. QoS is based on the Differentiated Services architecture and allows assigning different
transmission characteristics to different classes of service.
Differentiated Services is a computer networking architecture that specifies a simple, scalable and coarse-
grained mechanism for classifying, managing network traffic and providing quality of service (QoS)
guarantees on modern IP networks. Differential services can, for example, be used to provide low-latency,
guaranteed service (GS) to critical network traffic such as voice or video while providing simple best-effort
traffic guarantees to non-critical services such as web traffic or file transfers.
The major characteristics that are controllable by QoS are latency and bandwidth allocation. QoS is
designed to provide QoS functionality with minimal impact on performance. QoS works seamlessly with
Check Point Performance Pack.
The VSX network usually includes various types of traffic such as:
 Real-time traffic (e.g. VoIP) which requires low bandwidth, and is sensitive to latency (delays) and drops
 Traffic which is sensitive to latency but not to occasional drops
 High-volume, low-priority traffic which has a low sensitivity to latency and drops
 Other traffic which requires its own share of the bandwidth