connection_pipelining

Description

Controls the HyperFlow.

For more information, see the R82 Performance Tuning Administration Guide. > Section HyperFlow.

Syntax

Important:

  • You must run this command in the Expert mode.

  • In a Cluster, you must configure all the Cluster Members in the same way.

  • On Scalable Platforms (ElasticXL, Maestro, and Chassis), you must connect to the Gaia Portal of the applicable Security Group.

  • On Scalable Platforms, use the command "g_connection_pipelining" with the same parameters.

connection_pipelining

      advanced

            allow_accelerated_pipeline

            async

            default

            prevent_accelerated_pipeline

            sleep

            sync

            wake_up

      on

      off

      heaviest_conn

      pipelined

      status

Parameters

Parameter

Description

No Parameters

Shows the built-in help.

connection_pipelining

Must enter this command only on Security Gateways other than Scalable Platforms.

g_connection_pipelining

Must enter this command only on Scalable Platforms.

advanced

Shows the advanced options.

allow_accelerated_pipeline

Allows new connections to be opened as accelerated pipeline connections - the Security Gateway uses the new asynchronous parsers for connections.

This is the default.

Notes:

  • This command applies only to elephant connections that opened after you run this command.

  • When you run this command, the Security Gateway deletes all SecureXL Connection Templates with this command:

    fw tab -t cphwd_tmpl -x -y

  • This command does not require a reboot.

async

Configures the asynchronous flow mode (this is the default).

In this mode, CoreXL Firewall instances send jobs to the PPE.

Notes:

  • This command applies to existing elephant connections.

  • This command does not require a reboot.

default

Restores default settings

heaviest_conn

Shows the statistics for the heaviest connection with the maximum duration (number of packets and bytes).

off

Disables the feature.

Important - This change requires a reboot.

on

Enables the feature.

This is the default (on Check Point Appliances that meet the requirements).

Important - This change requires a reboot.

pipelined

Shows the accelerated elephant connections in the pipeline.

prevent_accelerated_pipeline

Prevents new connections from being opened as accelerated pipeline connections.

In this mode, the Security Gateway uses the legacy parsers for connections.

Notes:

  • Use this command only to troubleshoot issues with elephant connections.

  • This command applies only to elephant connections that opened after you run this command.

  • This command does not require a reboot.

  • When you run this command, the Security Gateway deletes all SecureXL Connection Templates with this command:

    fw tab -t cphwd_tmpl -x -y

sleep

Configures the Job Dispatcher (PPE) and Working Threads (WTs) to sleep.

Notes:

  • Use this command only to troubleshoot issues with elephant connections, if the issue persists after you configured the synchronous flow mode.

  • This command does not require a reboot.

status

Shows the status and configuration of the feature.

The output shows these lines with the applicable values:

  • Status of connection pipelining: <Status>

  • Flow mode: <Mode>

  • Status of PPE_MGR and PPE_WT: <Status>

  • Status of accelerated pipeline: <Status>

sync

Configures the synchronous flow mode.

In this mode, CoreXL Firewall instances do not send jobs to the PPE.

Notes:

  • Use this mode only to troubleshoot issues with elephant connections.

  • This command applies to existing elephant connections.

  • This command does not require a reboot.

wake_up

Wakes up the Job Dispatcher (PPE) and Working Threads (WTs) from sleep.

The PPE gets CPU cores available for allocation.

Note - The terms Parallel Processing Engine (PPE) and Dual Mode Job Dispatcher (DMD) are used interchangeably.

Example 1 - On a supported appliance

[Expert@MyGW:0]# connection_pipelining status

Status of connection pipelining:        On

Flow mode:                              Asynchronous

Status of PPE_MGR and PPE_WT:           Active

Status of accelerated pipeline:         Allowed

[Expert@MyGW:0]#

Example 2 - On a non-supported appliance

[Expert@MyGW:0]# connection_pipelining status

Status of connection pipelining:        Off. Appliances with CPU that does not support the AVX2 flag are not supported

[Expert@MyGW:0]#