CoreXL

In This Section: Enabling and Disabling CoreXL Default Configuration of CoreXL Configuring IPv4 and IPv6 CoreXL Firewall instances CoreXL Unsupported Features Configuring Affinity Settings Performance Tuning CoreXL Commands

CoreXL is a performance-enhancing technology for Security Gateways on multi-core platforms. CoreXL makes it possible for the CPU cores to perform multiple tasks concurrently. This enhances the Security Gateway performance.

CoreXL provides almost linear scalability of performance, according to the number of processing cores on a single machine. The increase in performance does not require changes to management or to network topology.

On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy of the Firewall kernel, or CoreXL Firewall instance, runs on one CPU core. These CoreXL Firewall instances handle traffic concurrently, and each CoreXL Firewall instance is a complete and independent Firewall inspection kernel. When CoreXL is enabled, all the Firewall kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

CoreXL Firewall instances work with SecureXL instances.