Monitoring Accelerated Connections with the "fwaccel" Command

Important - The statistics for connections (packets and bytes) the 100G Ports accelerate, are updated every 60 seconds. You cannot change this interval.

Viewing the Accelerated Connections

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Log in to the Expert mode.

3

Run:

fwaccel conns -l"

In the output, refer to these columns:

  • Flags

    • The flag "H" means "Hardware" - the connection is accelerated in hardware

    • If the connection is processed on the Host Appliance, then the last flag appears as a period "."

  • LS Pkts

    • This counter shows the number of packets in the connection that the 100G Ports accelerate

Example output:

Source          SPort Destination     DPort PR Flags                TCP state        C2S i/f S2C i/f Inst PPAK ID Policy ID (FW/UP)        CPU LS Pkts     Host Pkts   Host Bytes  Last Seen  Duration   TTL/Timeout
--------------- ----- --------------- ----- -- -------------------- ---------------- ------- ------- ---- ------- -----------------        --- ----------- ----------- ----------- ---------- ---------- -----------
      1.1.1.100  3333       2.2.2.200  1234  6 ...................H      Established   17/16   16/17    3       0 2758591385/1641440335    3           345          3        226B        15s        15s   3575/3590
      2.2.2.200  1234       1.1.1.100  3333  6 ..........L........H      Established   17/16   16/17    3       0 2758591385/1641440335    3           345          3        226B        15s        15s   3575/3590

Viewing the Statistics Summary for Accelerated Connections

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

fwaccel stats -s

3

In the output, refer to these rows:

  • Accelerated conns/Total conns

  • LightSpeed conns/Total conns

  • Accelerated pkts/Total pkts

  • LightSpeed pkts/Total pkts

  • F2Fed pkts/Total pkts

Note - The numbers for "Total pkts" in these rows are accumulative for all installed and enabled 100G Cards and 100G Ports.

Example output:

Accelerated conns/Total conns : 1/25 (4%)
LightSpeed conns/Total conns : 24/25 (96%)
Accelerated pkts/Total pkts   : 2503/106368396 (0%)
LightSpeed pkts/Total pkts   : 106240973/106368396 (99%)
F2Fed pkts/Total pkts         : 124920/106368396 (0%)
F2V pkts/Total pkts              : 0/106368396 (0%)
CPASXL pkts/Total pkts           : 0/106368396 (0%)
PSLXL pkts/Total pkts            : 0/106368396 (0%)
CPAS pipeline pkts/Total pkts    : 0/106368396 (0%)
PSL pipeline pkts/Total pkts     : 0/106368396 (0%)
QOS inbound pkts/Total pkts      : 0/106368396 (0%)
QOS outbound pkts/Total pkts     : 0/106368396 (0%)
Corrected pkts/Total pkts        : 0/106368396 (0%)

Viewing the Statistics for Accelerated Connections

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

fwaccel stats

3

In the output, refer to this section:

LightSpeed Accelerated Path

Note - The numbers in these rows are accumulative for all installed and enabled 100G Cards and 100G Ports.

Example output in the R81.10 Jumbo Hotfix Accumulator (for brevity, only the applicable section is shown):

Name                          Value         Name                          Value
----------------------------  ------------  ----------------------------  ------------

LightSpeed Accelerated Path
--------------------------------------------------------------------------------------
hw accel inbound bytes          6799422272    hw accel packets                 106240973
hw accel outbound bytes         6799422272    hw accel conns                           0
hw accel total conns                     0    hw accel tcp conns                       0
hw accel non-tcp conns                   0

Example output in the R81.20 Jumbo Hotfix Accumulator (for brevity, only the applicable section is shown):

Name                          Value         Name                          Value
----------------------------  ------------  ----------------------------  ------------

LightSpeed Accelerated Path
--------------------------------------------------------------------------------------
hw accel inbound bytes          6799422272    hw accel packets                 106240973
hw accel outbound bytes         6799422272    C hw accel conns                         0
hw accel total conns                     0    C hw accel tcp conns                     0
C hw accel non-tcp conns                 0

Viewing Connections Not Accelerated in Hardware

You can see which connections are not accelerated in hardware and why.

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

fwaccel conns -z

Example output:

Source         SPort Destination     DPort PR C2S i/f S2C i/f Flags      Flags EX    Not LS Accelerated Reason
-------------- ----- --------------- ----- -- ------- ------- ---------- ----------  -------------------------
   192.168.1.3 54920      172.20.4.5  5201  6   16/17   17/16 0x00000000 0x00004000 Flag (PXSXL medpath)
   192.168.1.3 54894      172.20.4.5  5201  6   16/17   17/16 0x00000000 0x00000000 Flag (Threshold)

Idx Interface
--- ---------
  0 lo
  1 Mgmt
  3 eth3-01
  7 eth3-04
 16 eth1-01
 17 eth1-02

Total number of connections: 2
Total number of links: 0