Great Circle Associates Firewalls
(June 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: SNG and performance...
From: "Urban A. Haas" <uhaas @ urbantechnology . com>
Organization: Urban Technology, Inc.
Date: Mon, 02 Jun 1997 13:39:19 -0500
To: csubasi @ garanti . com . tr
Cc: Root Admin-KSoft <root @ sibernet . com . tr>, Firewall Mailing List <firewalls @ GreatCircle . COM>
References: <Pine . LNX . 3 . 96 . 970529145114 . 8862A-100000 @ diderot> <338E2B0D . 62A3 @ garanti . com . tr>

Cihan Subasi wrote:
> 
> Root Admin-KSoft wrote:
> >
> > On Thu, 29 May 1997, Cihan Subasi wrote:
> >
> > > Anybody experienced SNG slowing down the traffic with 50+ users?
> > > I checked the line utilization and SNG, and seems like SNG is the
> >   Depends on your config. For example do you use NAT? SOCKS? or PROXY?
> >   how about your filter definitions?
> >
> 
>         I use both SOCKS and PROXY (telnet and ftp)

The proxy users are causing this. Proxy users are running local
processes on the
firewall (for each proxy user, a telnet or ftp session [process] is
running on the firewall).

SOCKS is more efficient than proxy [processes are not created for each
session] and you should 
be able to increase the number ofusers going through the firewall at
once. NAT/Filters is even 
more efficient yet, but you would need to be at v2 of the firewall code
to have that option.

If you are at v1, your best bet is to have all of your users use SOCKS
instead of proxies. Or,
you can get more firewalls, upgrade the CPU, etc.


> 
> >   Regards,
> >   Kerem ERSOY
> >
> > > bottleneck but could it be the hardware causing this problem I believe
> > > memory is enough for 100 + user (we have 128Meg on it)....

-- 
Urban A. Haas
CEO - Urban Technology, Inc.
E-mail: uhaas @
 urbantechnology .
 com (mailto:uhaas @
 urbantechnology .
 com)
Phone: (612) 938-2610

Indexed By Date Previous: Re: ISP Connection
From: Scott Lupfer - Colorado Springs <scott . lupfer @ ssds . com>
Next: Re: ISP Connection
From: Larry Kwiat <kwiat @ gov . yk . ca>
Indexed By Thread Previous: RE: ISP Connection
From: "Paquette, Trevor" <TrevorPaquette @ mcc . net>
Next: RE: Does Raptor WebNOT Block Legitimate Sites?
From: Tim Thayer <ss1011 @ bbtnet . com>

Google
 
Search Internet Search www.greatcircle.com