本文介绍CheckPoint防火墙采用的多种技术来提高性能，包括SecureXL安全加速技术、CoreXL多核加速技术和ClusterXL智能负载均衡技术。SecureXL通过专用硬件或软件设备卸载密集型安全操作实现加速；CoreXL利用多核处理器进行深度检查，实现高吞吐量；ClusterXL则在冗余网关间分配流量，确保业务连续性和高可用性。
From Checkpoint Sites:
“SecureXL: Security acceleration
Patented SecureXL is a technology interface that accelerates multiple, intensive security operations, including operations that are carried out by Check Point’s Stateful Inspection firewall. Using SecureXL, the firewall offloads operations to a performance-optimized software or hardware device, dramatically increasing throughput.
More details from this
post.
CoreXL: Multicore acceleration
As the first security technology to fully leverage general-purpose multi-core processors, CoreXL introduces advanced core-level load balancing that increases throughput for the deep inspection required to achieve intrusion prevention and high throughput on the firewall. With CoreXL, high performance and high security can be achieved simultaneously.
As the first security technology to fully leverage general-purpose multi-core processors, CoreXL introduces advanced core-level load balancing that increases throughput for the deep inspection required to achieve intrusion prevention and high throughput on the firewall. With CoreXL, high performance and high security can be achieved simultaneously.
Efficient Use Multiple CPU Cores—CoreXL
CoreXL is the first security technology to fully leverage general-purpose multi-core processors. It introduces advanced load balancing to boost throughput for the deep inspection required to achieve integrated IPS on the firewall. The increased processing capability in multiple cores allows networks to have high performance as well as a high level of security.
When CoreXL technology is activated, it immediately assigns one or more cores that are performing SecureXL acceleration to also act as
directors for traffic. The
other cores are designated to run instances of IPS and Firewall on each core.
For example, if an appliance contains two quad-core processors, two cores will perform SecureXL acceleration and direct traffic to the other six cores that run IPS and Firewall instances. The cores acting as directors have two main functions. First, it makes the initial security decisions whether this traffic can be accelerated by SecureXL. Second, it assigns traffic to a core to handle additional security inspection if needed.
ClusterXL: Smart Load Balancing
ClusterXL provides high availability and load sharing that keeps businesses running without interruption. ClusterXL distributes traffic between clusters of redundant gateways, combining the computing capacity of multiple machines to increase total throughput. In the event of a gateway or network failure, connections are seamlessly redirected to a designated backup, maintaining business continuity.
”
——-
SPLAT Pro – Dynamic Routing support, Multicast support, Radius
Authentication for SPLAT Admins.
Cluster XL Load Sharing – Allows Active | Active clustering out of the box. By default SPLAT only allows Active | Passive clustering. Active | Active (load sharing) mode needs a license.
CoreXL – SPLAT does not take advantage of multiple cores unless you add the CoreXL license, which is dependent upon the number of CPU’s / cores you are running.
SecureXL – Packet acceleration
Cluster XL Load Sharing – Allows Active | Active clustering out of the box. By default SPLAT only allows Active | Passive clustering. Active | Active (load sharing) mode needs a license.
CoreXL – SPLAT does not take advantage of multiple cores unless you add the CoreXL license, which is dependent upon the number of CPU’s / cores you are running.
SecureXL – Packet acceleration
扫一扫
44
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
