taskset_us_all

Description

The script $FWDIR/bin/taskset_us_all configures the affinity The assignment of a specified CoreXL Firewall instance, VSX Virtual System, interface, user space process, or IRQ to one or more specified CPU cores. of all running User Space processes to CPU cores.

You can enter the required CPU cores either as a list of CPU core IDs, or as a CPU bitmask.
You can configure the affinity User Space processes to CPU cores that run as CoreXL Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall instances, as CoreXL SND, or all CPU cores.
You can configure a list of User Space processes that this script must ignore.
The script creates this log file: $FWDIR/log/taskset_us_all.elg

Note - You must run this command from the Expert mode.

Related Information

Syntax

[Expert@HostName:0]# taskset_us_all

--help}

{-i | --instance} [<IDs of Instances>]

{-l | --list} <IDs of CPU Cores>

[--ignore_default]

[--ignore_exe "<ProcessName1>|<ProcessName2>|...|<ProcessNameN>"

{-m | --mask} <CPU BitMask>

{-s | --snd} [--no_zero]

On a Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., you must run: g_all taskset_us_all <parameters>

Parameters

Parameter

Type

Description

No Parameters

N / A

Shows the syntax to call the built-in help.

--help

Optional

Shows the built-in help with available parameters.

{-i | --instance} [<IDs of Instances>]

Optional

Cnfigures the CPU affinity only to CPU cores that run as CoreXL Firewall Instances.

Example for the CoreXL Firewall Instances 0, 2, and 5:

--instance 0,2,5

Notes:

Mutually exclusive with the parameter '-s | --snd'.
Not supported in VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode.

{-l | --list} <IDs of CPU Cores>

[--ignore_default]

[--ignore_exe "<ProcessName1>|<ProcessName2>|...|<ProcessNameN>"]

Mandatory

Configures the script to use the argument as a list of CPU core IDs.

Examples for CPU cores from 0 to 3:

Comma-separated list:

--list 0,1,2,3
Range of consecutive IDs:

--list 0-3
Range and specific ID:

--list 0-2,3

Notes:

The optional sub-parameter '--ignore_default' configures the script to ignore a predefined list of Check Point executable files.

There are specific Check Point executable files, whose CPU affinity you must not change.

If you change the CPU affinity of these specific processes, the performance of the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. decreases.

The predefined list of Check Point executable files to ignore:

fwk, dmd_run, usim_x86, usim_wd_agent, usim_launcher
The optional sub-parameter '--ignore_exe "<ProcessName1>|<ProcessName2>|...|<ProcessNameN>"' configures the script to ignore the specified executable files.

Example:

--ignore_exe "bash|fwk|clishd"

To configure a constant list of ignored executable files, edit the $FWDIR/bin/taskset_us_all script and configure the value of the variable 'ignore_list=""'.

{-m | --mask} <CPU BitMask>

Mandatory

Configures the script to use the argument as a bitmask of CPU cores IDs.

Example bitmask for CPU core IDs from 0 to 3 on a Security Gateway with 16 CPU cores:

0x0000000000000001 (for CPU 0) +

0x0000000000000010 (for CPU 1) +

0x0000000000000100 (for CPU 2) +

0x0000000000001000 (for CPU 3) =

------------------

0x0000000000001111

Example bitmask for CPU core IDs 5, 7, 9, and 15 on a Security Gateway with 16 CPU cores:

0x0000000000100000 (for CPU 5) +

0x0000000010000000 (for CPU 7) +

0x0000001000000000 (for CPU 9) +

0x1000000000000000 (for CPU 15) =

------------------

0x1000001010100000

{-s | --snd} [--no_zero]

Optional

Configures the CPU affinity only to CPU cores that run as CoreXL SND.

Notes:

Mutually exclusive with the parameter '-i | --instance'.
The optional sub-parameter '--no_zero' configures the script to ignore the CPU Core 0.