fwboot corexl

Description

Configures and monitors the CoreXLClosed Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores..

Note - The settings are saved in the $FWDIR/boot/boot.conf file.

Warning - To avoid issues, do not edit the $FWDIR/boot/boot.conf file manually. Edit the file only with this command.

Syntax to show CoreXL configuration

[Expert@HostName:0]# $FWDIR/boot/fwboot corexl

      core_count

      curr_instance4_count

      curr_instance6_count

      def_instance4_count

      def_instance6_count

      eligible

      installed

      max_instance4_count

      max_instances4_32bit

      max_instances4_64bit

      max_instance6_count

      max_instances_count

      max_instances_32bit

      max_instances_64bit

      min_instance_count

      unsupported_features

Syntax to configure CoreXL

Important:

[Expert@HostName:0]# $FWDIR/boot/fwboot corexl

      def_by_allowed [n]

      default

      [-v] disable

      [-v] enable [n] [-6 k]

      vmalloc_recalculate

Parameters

Parameter

Description

No Parameters

Shows the built-in help with available parameters.

core_count

Returns the number of CPU cores on this computer.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl core_count
[Expert@MyGW:0]# echo $?
4
[Expert@MyGW:0]#
[Expert@MyGW:0]# cat /proc/cpuinfo | grep processor
processor : 0
processor : 1
processor : 2
processor : 3
[Expert@MyGW:0]#

curr_instance4_count

Returns the current configured number of IPv4 CoreXL Firewall instances.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl curr_instance4_count
[Expert@MyGW:0]# echo $?
3
[Expert@MyGW:0]#
[Expert@MyGW:0]# fw ctl multik stat
ID | Active  | CPU    | Connections | Peak
----------------------------------------------
 0 | Yes     | 3      |          11 |       18
 1 | Yes     | 2      |          12 |       18
 2 | Yes     | 1      |          13 |       18
[Expert@MyGW:0]#

curr_instance6_count

Returns the current configured number of IPv6 CoreXL Firewall instances.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl curr_instance6_count
[Expert@MyGW:0]# echo $?
2
[Expert@MyGW:0]#
[Expert@MyGW:0]# fw6 ctl multik stat
ID | Active  | CPU    | Connections | Peak
----------------------------------------------
 0 | Yes     | 3      |          11 |       18
 1 | Yes     | 2      |          12 |       18
[Expert@MyGW:0]#

def_by_allowed [n]

Sets the default configuration for CoreXL according to the specified allowed number of CPU cores.

default

Sets the default configuration for CoreXL.

def_instance4_count

Returns the default number of IPv4 CoreXL Firewall instances for this Security Gateway.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl def_instance4_count
[Expert@MyGW:0]# echo $?
3
[Expert@MyGW:0]#

def_instance6_count

Returns the default number of IPv4 CoreXL Firewall instances for this Security Gateway.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl def_instance6_count
[Expert@MyGW:0]# echo $?
2
[Expert@MyGW:0]#

[-v] disable

Disables CoreXL.

  • -v - Leaves the high memory (vmalloc) unchanged.

See the cp_conf corexl command.

eligible

Returns whether CoreXL can be enabled on this Security Gateway.

  • 0 - CoreXL cannot be enabled

  • 1 - CoreXL can be enabled

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl eligible
[Expert@MyGW:0]# echo $?
1
[Expert@MyGW:0]#

[-v] enable [n] [-6 k]

Enables CoreXL with 'n' IPv4 Firewall instances and optionally 'k' IPv6 Firewall instances.

  • -v - Leaves the high memory (vmalloc) unchanged.

  • n - Denotes the number of IPv4 CoreXL Firewall instances.

  • k - Denotes the number of IPv6 CoreXL Firewall instances.

See the cp_conf corexl command.

installed

Returns whether CoreXL is installed (enabled) on this Security Gateway.

  • 0 - CoreXL is not enabled

  • 1 - CoreXL is enabled

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl installed
[Expert@MyGW:0]# echo $?
1
[Expert@MyGW:0]#

max_instance4_count

Returns the maximal allowed number of IPv4 CoreXL Firewall instances for this Security Gateway.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instance4_count
[Expert@MyGW:0]# echo $?
4
[Expert@MyGW:0]#

max_instances4_32bit

Returns the maximal allowed number of IPv4 CoreXL Firewall instances for a Security Gateway that runs GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. with 32-bit kernel.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instances4_32bit
[Expert@MyGW:0]# echo $?
14
[Expert@MyGW:0]#

max_instances4_64bit

Returns the maximal allowed number of IPv4 CoreXL Firewall instances for a Security Gateway that runs Gaia with 64-bit kernel.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instances4_64bit
[Expert@MyGW:0]# echo $?
38
[Expert@MyGW:0]#

max_instance6_count

Returns the maximal allowed number of IPv6 CoreXL Firewall instances for this Security Gateway.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instance6_count
[Expert@MyGW:0]# echo $?
3
[Expert@MyGW:0]#

max_instances_count

Returns the total maximal allowed number of CoreXL Firewall instances (IPv4 and IPv6) for this Security Gateway.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instances_count
[Expert@MyGW:0]# echo $?
40
[Expert@MyGW:0]#

max_instances_32bit

Returns the total maximal allowed number of CoreXL Firewall instances for a Security Gateway that runs Gaia with 32-bit kernel.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instances_32bit
[Expert@MyGW:0]# echo $?
16
[Expert@MyGW:0]#

max_instances_64bit

Returns the total maximal allowed number of CoreXL Firewall instances for a Security Gateway that runs Gaia with 64-bit kernel.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl max_instances_64bit
[Expert@MyGW:0]# echo $?
40
[Expert@MyGW:0]#

min_instance_count

Returns the minimal allowed number of IPv4 CoreXL Firewall instances.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl min_instance_count
[Expert@MyGW:0]# echo $?
2
[Expert@MyGW:0]#

vmalloc_recalculate

Updates the value of the vmalloc parameter in the /boot/grub/grub.conf file.

unsupported_features

Returns 1 if at least one feature is configured, which CoreXL does not support.

[Expert@MyGW:0]# $FWDIR/boot/fwboot corexl unsupported_features
corexl unsupported feature: QoS is configured.
[Expert@MyGW:0]# echo $?
1
[Expert@MyGW:0]#