dynamic_split

Description

On Check Point Appliances, R80.40 added the ability to change the number of CoreXLClosed Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall and SND instances without reboot (Dynamic Split).

Important:

  • By default, this feature is disabled.

  • We do not recommend manual configuration of CoreXL Firewall and SND instances, because such configuration disables the CoreXL Dynamic Split.

    To enable the CoreXL Dynamic Split again, you must disable it and enable it.

  • For CoreXL Dynamic Split requirements, see sk164155.

The dynamic_split command controls the Dynamic Split of CoreXL Firewall and SND instances on the local Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., or Cluster MemberClosed Security Gateway that is part of a cluster..

For more information, see R80.40 Performance Tuning Administration Guide - Chapter CoreXL.

Syntax

dynamic_split

      -o disable

      -o enable

      -o start

      -o stop

Important:

Parameters

Parameter

Description

No Parameters

Shows the applicable built-in help.

-o disable

Disables the CoreXL Dynamic Split.

Important:

  • When you disable this feature, the CoreXL configuration returns to the default.

  • After you disable this feature, the Security Gateway requires a reboot.

    The command shows the applicable message.

-o enable

Enables the CoreXL Dynamic Split.

Important:

  • After you enable this feature, the Security Gateway requires a reboot.

    The command shows the applicable message.

  • After the boot, you can stop and start this feature without reboot.

-o start

Starts the CoreXL Dynamic Split after it was stopped.

Important:

  • When you start this feature, the Security Gateway continues to change the CoreXL split configuration automatically based on the CPU utilization.

  • This change survives the reboot.

-o stop

Stops the CoreXL Dynamic Split.

Important:

  • When you stop this feature, the Security Gateway uses the last CoreXL split configuration.

  • This change survives the reboot.