R75.

40VS VSX
Memory Resource Control

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd.
Course Timetables

Day 1 Day 2 Day 3

9:00 Course Introduction VSX Clustering VSX Conversion

10:00 RC & QoS

vsx_utill
R75.40VS VSX Gaia VS CTX & New Features
11:00
Introduction (Conversion, SNMP, JF)
12:00 Mgmt. Implementation L2 VS

13:00 Lunch Break

14:00
VSX Networking GW Implementation
15:00
Meeting with Check Point
R&D
16:00
VSX CoreXL Affinity &
Debug & Troubleshooting
Memory RC
17:00

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 2
Memory Resource control overview

Memory Resource control (fw vsx mstat) gives the user

overview information about:
Memory consumption of the system
Memory consumption per virtual device

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 3
Overview cont.
The memory consumption per VS is a sum of the following:

Kernel Space
SIM (SecureXL) memory per VS allocations.

Dispatcher memory per VS allocations.

User Space
Accumulations of clean pages (private) and dirty pages (private) per process for all processes per VS

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 4
Overview cont.

Global info given about system:

Total amount of physical memory

Free memory
Total amount of swap memory
Free swap memory
Swap rate (total number of kilobytes the system paged in
from disk per second)

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 5
VSX Memory Resource Control Usage

fw vsx mstat - Displays total memory consumption per virtual system

Flags
-vs - displays memory status for specific VSIDs
sort - sorts the virtual systems by their memory size
unit - change the displayed memory unit
swap - updates the swap-in sample rate in minutes

fw vsx mstat debug - Displays memory consumption debug info per VS.

fw vsx mstat enable - Enables this feature, requires a reboot.

fw vsx mstat disable - Disables this feature, affected immediately.

fw vsx mstat status - Displays feature status, (enabled/disabled).

fw vsx mstat help - Displays help.

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 6
Monitoring Memory Resources

[Expert@GIZA42G204:0]# fw vsx mstat sort all

VSX Memory Status
=================
Memory Total: 997.22 MB
Memory Free: 232.52 MB
Swap Total: 2047.34 MB
Swap Free: 2047.16 MB
Swap-in rate: 0.00 MB
VSID | Memory Consumption
======+====================
0| 133.49 MB
8| 92.41 MB
3| 43.81 MB
2| 42.47 MB
1| 42.47 MB

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 7
VSX Memory Resource Control Examples

fw vsx mstat unit B -vs 2-7 sort 3

VSX Memory Status
=================
Memory Total: 1045659648 Bytes
Memory Free: 242528256 Bytes
Swap Total: 2146787328 Bytes
Swap Free: 2146607104 Bytes
Swap-in rate: 0 Bytes
VSID | Memory Consumption
======+====================
3 | 45741252 Bytes
2 | 44537028 Bytes
6 | 44360900 Bytes

fw vsx mstat debug

VSX Memory Status
=================
Memory Total: 1021152.00 KB
Memory Free: 235680.00 KB
Swap Total: 2096472.00 KB
Swap Free: 2096296.00 KB
Swap-in rate: 0.47 KB
VSID | Private_Clean | Private_Dirty | DispatcherGConn | DispatcherHTab | SecureXL
======+====================+====================+====================+====================+====================
0 | 13336.00 KB | 121856.00 KB | 0.00 KB | 0.00 KB | 2850.00 KB
1 | 968.00 KB | 39724.00 KB | 0.00 KB | 0.00 KB | 2833.54 KB
2 | 968.00 KB | 39692.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB
3 | 776.00 KB | 41060.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB
4 | 968.00 KB | 39512.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB
5 | 776.00 KB | 39600.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB
6 | 976.00 KB | 39512.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB
7 | 784.00 KB | 39516.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB
8 | 3008.00 KB | 88592.00 KB | 0.00 KB | 0.00 KB | 2833.19 KB

[Restricted] ONLY for designated groups and individuals 2012 Check Point Software Technologies Ltd. 8