Technical data

Optimizing VSX
Check Point VSX Administration Guide NGX R67 | 158
 Statistics values are reset after each query.
 Statistics should be presented periodically with intervals less than 1 minute.
 It is recommended to use the watch command to periodically present the statistics.
QoS Policy File
The QoS policy file is qos_policy.C, located in the $FWDIR/database directory. The QoS policy file is
created when the cpqos command is run for the first time. The QoS policy file should not be edited
manually. Use cpqos class add/del to create entries. To maintain multiple QoS policies, rename
qos_policy.C or copy it to another directory, and copy it back to $FWDIR/database/qos_policy.C
when the policy needs to be enforced.
QoS Default Configuration
Default QoS configuration is set to "uninstall" (e.g. not enforced). Calling cpqos install or cpqos
uninstall sets the default configuration after boot
Sample Differentiated Services Implementation
This section presents a sample differentiated services implementation. It includes examples for
configuration, monitoring and statistics.
Sample Traffic Types
Traffic Type
Meaning...
Diamond
Real-time traffic (e.g. VOIP) which requires little bandwidth and is
sensitive to latency and drops. This traffic is usually assigned to the EF
(Expedited-Forwarding) PHB (Per Hop Behavior).
Platinum
Real-time traffic with low bandwidth requirements that is less sensitive to
latency and drops than Diamond.
Gold
Traffic which is sensitive to drops
Silver
Traffic which is less sensitive to drops than Gold.
Bronze
Various types of traffic which require resource allocation. This traffic is
usually assigned to the Best-Effort PHB.
Copper
High-volume traffic with a tendency to consume bandwidth
Configuration Guidelines
Your QoS policy should apply these guidelines:
 Diamond and Platinum classes should be defined as LLQ so they will have a lower latency then other
classes
 Diamond should receive a higher priority than Platinum so it have even less latency and drops
 Gold should receive a higher priority than Silver so it will have fewer drops
 Copper resource consumption should be limited to about 10% of the available resource during periods
of congestion
 Other traffic should receive about 45% of bandwidth when the traffic load is high
Configuration Examples
1. The following examples of the cpqos class add command creates classes for traffic of various types:
cpqos class add Diamond type llq prio 1 dscp 46