Memory Resources for Each Virtual Device

Use the "fw vsx mstat" command to show the memory that each Virtual DeviceClosed Logical object that emulates the functionality of a type of physical network object. Virtual Device can be on of these: Virtual Router, Virtual System, or Virtual Switch. uses. Use the -vs parameter to show only some of the Virtual Devices.

You can also use these parameters for more data:

  • unit- Change the memory measurement unit shown in the command output.

  • sort- Sort the results according to the Virtual Devices that use the most memory and limit the display to the specified number of results.

Syntax

fw vsx mstat [-vs <VSID>] [unit <Unit>] [sort <Number>]

Note - On Security Groups, you must run this command in Gaia gClishClosed The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group..

Parameters

Parameter

Description

-vs

Shows the memory usage of the specified Virtual Devices.

<VSID>

The ID of the Virtual Device.

To show multiple devices:

  • Put a space between each VSID: -vs 1 3 5

  • List a range of VSIDs: -vs 1-4

Note - You can combine VSID ranges together with specific VSIDs.

unit

Change the memory measurement unit shown in the command output.

<Measure>

The memory measurement unit. The default value is megabytes.

The values are:

  • B - bytes

  • K, KB - kilobytes

  • M, MB - megabytes (default)

  • G, GB - gigabytes

sort

Sort the results according to the Virtual Devices that use the most memory.

<Number>

Enter the maximum number of Virtual Devices to be shown.
Only those Virtual Devices that use the most memory are shown.
Use allto show all Virtual Devices.

Example (both commands will show the same results)

fw vsx mstat -vs 0 1 3 5-8 unit MB sort 5

fw vsx mstat sort 5

Example output

VSX Memory Status
=================
Memory Total: 997.22 MB
Memory Free: 232.56 MB
Swap Total: 2047.34 MB
Swap Free: 2047.16 MB
Swap-in rate: 0.00 MB
 VSID | Memory Consumption
======+====================
    0 | 133.50 MB
    8 | 92.41 MB
    3 | 43.81 MB
    6 | 42.47 MB
    1 | 42.47 MB

Configuring Swap-in Sample Rate

The swap-in rate measures how much memory per second that the system swaps-in from disk. You can configure how often the system calculates the swap-in rate. For example, a sample rate of 5 means that the system calculates the swap-in rate every five minutes.

Syntax

fw vsx mstat swap <minutes>

Note - On Security Groups, you must run this command in GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. gClish.

Parameters

Parameter

Description

swap

Configures the swap-in sample rate for the system.

<minutes>

Number of minutes that the system measures memory swaps to determine the swap-in rate. Only integers are valid values.

The default swap-in sample rate is 10.

Example

fw vsx mstat swap 5

Swap-in sample rate was changed successfully to 5 minutes.

Comments

  • Swap-in sample rate is a system wide Linux setting. When you change the value for memory monitoring, all the swap-in rates are calculated according to the new value.

  • When you enable the monitoring memory resources feature, the swap-in rate setting is saved. When you disable the feature, the system restores the saved setting.

Using Debug Mode

Use the debug parameter to show more data about the memory that the VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0. uses. You cannot use the -vs, unitand sort parameters in debug mode. The memory is shown in kilobytes.

Syntax

fw vsx mstat debug

Note - On Security Groups, you must run this command in Gaia gClish.

Output example

VSX Memory Status
=================
Memory Total: 1021152.00 KB
Memory Free: 324788.00 KB
Swap Total: 2096472.00 KB
Swap Free: 2096404.00 KB
Swap-in rate: 375.34 KB
 
 VSID |      Private_Clean |      Private_Dirty |    DispatcherGConn
======+====================+====================+====================+
    0 |        13544.00 KB |       144268.00 KB |            0.00 KB |
    1 |         1740.00 KB |        46276.00 KB |            0.00 KB |
    2 |         1720.00 KB |        46868.00 KB |            0.00 KB |
    3 |         1720.00 KB |        46644.00 KB |            0.00 KB |
    4 |         1712.00 KB |        45144.00 KB |            0.00 KB |
    5 |         1712.00 KB |        45836.00 KB |            0.00 KB |
    6 |         1720.00 KB |        45000.00 KB |            0.00 KB |
    7 |         1720.00 KB |        45044.00 KB |            0.00 KB |

Comments

By default the debug parameter shows these memory fields:

Monitoring VSX Memory Resources (vsxmstat)

Use the vsxmstat command to enable memory monitoring for the VSXClosed Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Gateway. This command shows an overview of the memory that the system and each Virtual Device is using. These are the global memory resources that are shown:

Parameter

Description

Memory Total

Total physical memory on the VSX Gateway

Memory Free

Available physical memory

Swap Total

Total of swap memory

Swap Free

Available swap memory

Swap-in rate

Total memory swaps per second

The Virtual Devices are listed according to the VSIDs. Run the "vsx stat -v" command in the Expert mode to show the VSID for the Virtual Devices.

Managing 'vsxmstat'

Use the vsxmstat command to enable or disable memory information collection on the VSX Gateway.

Syntax:

vsxmstat {enable_raw | disable_raw | status_raw}

Note - On Security Groups, you must run this command in Gaia gClish.

Parameters

Parameter

Description

enable_raw

Enables memory resource monitoring for perfanalyze use.

disable_raw

Disables memory resource monitoring for perfanalyze use.

status_raw

Shows if memory resource monitoring is enabled or disabled for perfanalyze use.

Example:

vsxmstat disable_raw

VSX memory resource control is disabled for perfanalyze use

Memory Resources for Each Virtual Device

Use vsxmstat to show memory usage for each Virtual Device. You can use the -vs parameter to show specified Virtual Devices only.

Use these parameters to show more data:

  • unit - Change the memory measurement unit shown in the command output.

  • sort - Sort the results according to the Virtual Devices that use the most memory. Limit the display to the specified number of results.

Syntax:

vsxmstat [-vs <vsid>] [unit <unit>] [sort <top>]

Note - On Security Groups, you must run this command in Gaia gClish.

Parameters

Parameter

Description

-vs

Shows the memory usage of the specified Virtual Devices.

<vsid>

Virtual Device identification.

To show multiple devices:

  • Put a space between each VSID: -vs 1 3 5

  • List a range of VSIDs: -vs 1-4

Note - You can combine VSID ranges together with specific VSIDs.

unit

Change the memory measurement unit shown in the command output.

<unit>

The memory measurement unit. The default value is megabytes.

Use with the unit parameter.

The values are:

  • B - bytes

  • K, KB- kilobytes

  • M, MB- megabytes (default)

  • G, GB- gigabytes

sort

Sort the results according to the Virtual Devices that use the most memory.

<top>

Maximum number of Virtual Devices to show. Only those Virtual Devices that use the most memory are shown.

Use with the sort parameter.

Use allto show all Virtual Devices.

Example - both commands will show the same results:

# vsxmstat -vs  0 1 3 5-8 unit MB sort 5
# vsxmstat sort 5

Example output:

VSX Memory Status
=================
Memory Total: 997.22 MB
Memory Free: 232.56 MB
Swap Total: 2047.34 MB
Swap Free: 2047.16 MB
Swap-in rate: 0.00 MB
 VSID | Memory Consumption
======+====================
    0 |          133.50 MB
    8 |           92.41 MB
    3 |           43.81 MB
    6 |           42.47 MB
    1 |           42.47 MB

Configuring Swap-in Sample Rate

The swap-in rate measures how much memory per second that the system swaps-in from the disk. You can configure how frequently the system calculates the swap-in rate. For example, a sample rate of 5 means that the system calculates the swap-in rate at five minute intervals.

Syntax:

vsxmstat swap <minutes>

Note - On Security Groups, you must run this command in Gaia gClish.

Parameters

Parameter

Description

<minutes>

The amount of time, in minutes, that the system measures memory swaps to determine the swap-in rate. Only integers are valid values. The default swap-in sample rate is 10.

Notes:

  • Swap-in sample rate is a system wide Linux setting. When you change the value for memory monitoring, all the swap-in rates are calculated according to the new value.

  • When you enable the monitoring memory resources feature, the swap-in rate setting is saved. When you disable the feature, the system restores the saved setting.

Example:

vsxmstat swap 5

Swap-in sample rate was changed successfully to 5 minutes.

Using Debug Mode

Use the debug command to show more data about the memory use of the VSX Gateway.
You cannot use the -vs, unit, and sort parameters in the debug mode.
The memory is shown in kilobytes.

Syntax:

vsxmstat debug

Note - On Security Groups, you must run this command in Gaia gClish.

Example output:

VSX Memory Status
=================
Memory Total: 1021152.00 KB
Memory Free: 324788.00 KB
Swap Total: 2096472.00 KB
Swap Free: 2096404.00 KB
Swap-in rate: 375.34 KB
 
 VSID |      Private_Clean |      Private_Dirty |    DispatcherGConn
======+====================+====================+====================+
    0 |        13544.00 KB |       144268.00 KB |            0.00 KB |
    1 |         1740.00 KB |        46276.00 KB |            0.00 KB |
    2 |         1720.00 KB |        46868.00 KB |            0.00 KB |
    3 |         1720.00 KB |        46644.00 KB |            0.00 KB |
    4 |         1712.00 KB |        45144.00 KB |            0.00 KB |
    5 |         1712.00 KB |        45836.00 KB |            0.00 KB |
    6 |         1720.00 KB |        45000.00 KB |            0.00 KB |
    7 |         1720.00 KB |        45044.00 KB |            0.00 KB |

By default the debug parameter shows these memory fields:

Field

Description

Private_Clean

Clean private pages (/proc/[pid]/smaps)

Private_Dirty

Dirty private pages (/proc/[pid]/smaps)

DispatcherHTab

Hash table for each Virtual System

DispatcherGConn

Global connections for each Virtual System

SecureXL

SecureXL memory each Virtual System uses