Nyob zoo cov npoj yaig! Niaj hnub no kuv xav tham txog ib lub ntsiab lus tseem ceeb rau ntau tus thawj coj saib xyuas, "CPU thiab RAM Optimization". Nws tsis yog qhov tsis yooj yim rau lub rooj vag thiab / lossis kev tswj hwm tus neeg rau zaub mov kom haus ntau yam ntawm cov peev txheej no, thiab ib tus xav nkag siab qhov twg lawv "kua" thiab, yog tias ua tau, siv lawv ntau dua.
1. Kev tshuaj xyuas
Txhawm rau txheeb xyuas cov khoom thauj khoom, nws yog qhov tsim nyog los siv cov lus txib hauv qab no, uas tau nkag mus rau hauv cov kws tshaj lij hom:
sab saum toj qhia tag nrho cov txheej txheem, tus nqi ntawm CPU thiab RAM cov kev pab cuam noj nyob rau hauv feem pua, uptime, txheej txheem tseem ceeb thiab hauv lub sijhawm tiag tiagΠΈ
cpwd_admin npe Check Point WatchDog Daemon, uas qhia tag nrho cov appline modules, lawv PID, xwm txheej, thiab cov lej khiav
cpstat -f cpu os Kev siv CPU, lawv tus lej thiab faib cov sijhawm ua haujlwm hauv feem pua
cpstat -f nco os siv virtual RAM, ntau npaum li cas nquag, RAM dawb thiab ntau dua
Cov lus hais kom raug yog tias tag nrho cov lus txib cpstat tuaj yeem saib tau siv cov khoom siv hluav taws xob cpview ua. Txhawm rau ua qhov no, koj tsuas yog yuav tsum nkag mus rau cpview hais kom ua los ntawm txhua hom hauv SSH kev sib kho.
ps xwv ib daim ntawv teev ntev ntawm tag nrho cov txheej txheem, lawv tus ID, nyob hauv virtual nco thiab nco hauv RAM, CPU
Lwm variation ntawm cov lus txib:
ps-f ua qhia cov txheej txheem kim tshaj plaws
fw ctl affinity -l -a Kev faib tawm ntawm cov cores rau qhov sib txawv ntawm firewall, uas yog, CoreXL thev naus laus zis
fwv ctl Kev txheeb xyuas RAM thiab cov ntsuas dav dav ntawm kev sib txuas, ncuav qab zib, NAT
dawb -m RAM tsis
Pab neeg no tsim nyog saib xyuas tshwj xeeb. netsat thiab nws variations. Piv txwv li, netstat - ib tuaj yeem pab daws qhov teeb meem ntawm kev saib xyuas cov ntawv teev cia. Qhov parameter, RX poob pob ntawv (RX-DRP) hauv cov zis ntawm cov lus txib no zoo li loj hlob ntawm nws tus kheej vim yog poob ntawm cov txheej txheem tsis raug cai (IPv6, Bad / Unintended VLAN cim npe, thiab lwm yam). Txawm li cas los xij, yog tias tee tshwm sim rau lwm qhov laj thawj, ces koj yuav tsum siv qhov no pib tshawb xyuas vim li cas qhov kev sib txuas network no tau tso cov pob ntawv. Paub qhov ua rau, kev ua haujlwm ntawm appline kuj tuaj yeem ua kom zoo.
Yog tias Kev Saib Xyuas Hniav tau qhib, koj tuaj yeem saib cov ntsuas ntsuas no hauv SmartConsole los ntawm txhaj rau ntawm ib qho khoom thiab xaiv Cov Ntaub Ntawv & Daim Ntawv Tso Cai.
Nws tsis pom zoo kom ua kom Cov Saib Xyuas Hniav tsis tu ncua, tab sis nws yog qhov ua tau rau ib hnub rau kev sim.
Ntxiv mus, koj tuaj yeem ntxiv ntau qhov kev ntsuas rau kev saib xyuas, ib qho ntawm lawv muaj txiaj ntsig zoo - Bytes Throughput (appline bandwidth).
Yog tias muaj qee qhov kev saib xyuas, piv txwv li, dawb , uas yog raws li SNMP, nws kuj tsim nyog los txheeb xyuas cov teeb meem no.
2. RAM "xws" dhau sijhawm
Feem ntau cov lus nug tshwm sim tias dhau sij hawm, lub rooj vag lossis kev tswj hwm server pib haus ntau thiab ntau RAM. Kuv xav kom koj rov hais dua: qhov no yog zaj dab neeg ib txwm rau Linux zoo li tshuab.
Saib ntawm cov lus txib tso zis dawb -m ΠΈ cpstat -f nco os ntawm appline los ntawm hom kws tshaj lij, koj tuaj yeem suav thiab saib tag nrho cov tsis muaj feem cuam tshuam nrog RAM.
Raws li lub cim xeeb muaj nyob rau ntawm lub rooj vag thaum lub sijhawm Cim xeeb dawb + Buffers Nco + Cached Nco = +-1.5 GB, feem ntau.
Raws li CP hais, dhau sij hawm lub rooj vag / tswj server tau txais kev ua kom zoo thiab siv ntau thiab ntau lub cim xeeb, txog li 80% kev siv, thiab nres. Koj tuaj yeem reboot lub cuab yeej thiab tom qab ntawd qhov ntsuas yuav rov pib dua. 1.5 GB ntawm RAM dawb yog twv yuav raug hu txaus rau lub rooj vag los ua txhua yam haujlwm, thiab kev tswj hwm tsis tshua muaj peev xwm ncav cuag cov txiaj ntsig zoo li no.
Tsis tas li ntawd, qhov tso zis ntawm cov lus txib yuav qhia tias koj muaj pes tsawg nco tsawg (RAM hauv qhov chaw neeg siv) thiab nco siab (RAM hauv qhov chaw kernel) siv.
Cov txheej txheem Kernel (nrog rau cov haujlwm nquag xws li Check Point kernel modules) tsuas yog siv lub cim xeeb tsawg. Txawm li cas los xij, cov txheej txheem neeg siv tuaj yeem siv ob qho tib si qis thiab siab nco. Ntxiv mus, Tsawg nco yog kwv yees li sib npaug Tag Nrho Nco.
Koj tsuas yog yuav tsum txhawj xeeb yog tias muaj qhov yuam kev hauv cov cav "modules reboot lossis cov txheej txheem raug tua kom rov qab nco vim OOM (Tawm ntawm lub cim xeeb)". Tom qab ntawd koj yuav tsum reboot lub rooj vag thiab hu rau kev txhawb nqa yog tias qhov reboot tsis pab.
Cov lus piav qhia tag nrho tuaj yeem pom hauv ΠΈ .
3. Kev ua kom zoo
Hauv qab no yog cov lus nug thiab lus teb txog CPU thiab RAM optimization. Koj yuav tsum teb lawv ncaj ncees rau koj tus kheej thiab mloog cov lus pom zoo.
3.1. Puas yog tus upline xaiv raug? Puas muaj qhov kev sim ua haujlwm?
Txawm hais tias muaj peev xwm sizing, lub network tuaj yeem loj hlob tuaj, thiab cov cuab yeej no tsuas yog tsis tuaj yeem tiv nrog lub nra. Qhov kev xaiv thib ob, yog tias tsis muaj qhov loj me li ntawd.
3.2. Puas yog HTTPS tshuaj xyuas tau qhib? Yog tias muaj, lub tshuab puas tau teeb tsa raws li Txoj Cai Zoo?
Xa mus rau yog tias koj yog peb cov neeg siv khoom, lossis rau .
Qhov kev txiav txim ntawm cov cai hauv HTTPS txoj cai tshuaj xyuas ua lub luag haujlwm tseem ceeb hauv kev ua kom zoo rau kev qhib HTTPS qhov chaw.
Pom zoo txiav txim ntawm cov cai:
- Bypass cov cai nrog pawg / URLs
- tshuaj xyuas cov cai nrog pawg / URLs
- Tshawb xyuas cov cai rau tag nrho lwm pawg
Los ntawm kev sib piv nrog firewall txoj cai, Check Point nrhiav cov pob ntawv sib tw los ntawm sab saum toj mus rau hauv qab, yog li cov kev cai hla dhau qhov zoo tshaj plaws muab tso rau saum toj, vim tias lub rooj vag yuav tsis nkim cov peev txheej ntawm kev khiav los ntawm txhua txoj cai yog tias pob ntawv no yuav tsum tau hla.
3.3 Cov khoom siv chaw nyob puas siv tau?
Cov khoom uas muaj ntau qhov chaw nyob, xws li network 192.168.0.0-192.168.5.0, siv ntau RAM ntau dua 5 cov khoom siv network. Feem ntau, nws raug suav hais tias yog kev coj ua zoo los tshem tawm cov khoom siv tsis siv hauv SmartConsole, txij li txhua lub sijhawm tau teeb tsa txoj cai, lub rooj vag thiab kev tswj hwm server siv cov peev txheej thiab, qhov tseem ceeb tshaj, lub sijhawm los txheeb xyuas thiab siv txoj cai.
3.4. Txoj Cai Tiv Thaiv Kev Nyab Xeeb tau teeb tsa li cas?
Ua ntej tshaj plaws, Check Point pom zoo kom txav IPS mus rau ib qho profile cais thiab tsim cov cai sib cais rau cov hniav no.
Piv txwv li, tus thawj coj xav tias ntu DMZ tsuas yog yuav tsum tau tiv thaiv nrog IPS. Yog li ntawd, txhawm rau kom lub rooj vag tsis txhob nkim cov peev txheej ntawm kev ua cov pob khoom los ntawm lwm cov hniav, nws yog ib qho tsim nyog los tsim txoj cai tshwj xeeb rau ntu no nrog rau qhov profile uas tsuas yog IPS tau qhib.
Hais txog kev teeb tsa profiles, nws raug pom zoo kom teeb tsa raws li kev coj ua zoo tshaj plaws hauv qhov no (nqe 17β20).
3.5. Muaj pes tsawg tus kos npe hauv Nthuav hom hauv IPS nqis?
Nws raug nquahu kom ua haujlwm hnyav rau kev kos npe hauv qhov kev txiav txim siab tias kos npe tsis siv yuav tsum raug kaw (piv txwv li, kos npe rau kev ua haujlwm ntawm Adobe cov khoom yuav tsum tau siv ntau lub zog, thiab yog tias tus neeg siv khoom tsis muaj cov khoom zoo li no, nws ua rau kev txiav txim siab tsis ua haujlwm. kos npe). Tom qab ntawd muab Tiv Thaiv es tsis txhob ntes qhov twg ua tau, vim tias lub rooj vag siv cov peev txheej ntawm kev ua tiav tag nrho cov kev sib txuas hauv Nthuav hom, hauv Kev Tiv Thaiv hom nws tam sim ntawd poob qhov kev sib txuas thiab tsis nkim peev txheej ntawm kev ua tiav ntawm pob ntawv.
3.6. Cov ntaub ntawv dab tsi raug ua tiav los ntawm Kev Nyuaj Siab Emulation, Kev Nyuaj Siab Extraction, Anti-Virus blades?
Nws ua rau tsis muaj kev nkag siab zoo rau emulate thiab txheeb xyuas cov ntaub ntawv txuas ntxiv uas koj cov neeg siv tsis rub lossis koj xav txog qhov tsis tsim nyog ntawm koj lub network (piv txwv li, bat, exe cov ntaub ntawv tuaj yeem raug thaiv yooj yim siv Cov Ntsiab Lus Ceeb Toom Hniav ntawm qib firewall, yog li cov ntaub ntawv rooj vag yuav yog. siv tsawg). Ntxiv mus, nyob rau hauv qhov teeb meem Kev Nyuaj Siab Emulation, koj tuaj yeem xaiv Ib puag ncig (kev ua haujlwm system) los ua raws li kev hem thawj hauv sandbox thiab teeb tsa ib puag ncig Windows 7 thaum txhua tus neeg siv ua haujlwm nrog 10th version, nws kuj tsis muaj txiaj ntsig.
3.7. Puas yog firewall thiab Application txheej cov cai muab tso rau raws li kev coj ua zoo tshaj?
Yog hais tias ib txoj cai muaj ntau hits (kev sib tw), ces nws yog pom zoo kom muab lawv nyob rau hauv lub sab saum toj, thiab cov kev cai nrog ib tug me me hits - nyob rau hauv lub qab heev. Qhov tseem ceeb tshaj plaws yog kom paub tseeb tias lawv tsis sib tshuam thiab tsis sib tshooj. Pom zoo firewall txoj cai architecture:
Kev piav qhia:
Thawj Txoj Cai - cov kev cai nrog cov kev sib tw feem ntau tau muab tso rau ntawm no
Noise Rule - ib txoj cai rau kev tso tsheb khiav tsis zoo xws li NetBIOS
Txoj Cai Stealth - txwv tsis pub hu xov tooj rau lub rooj vag thiab kev tswj hwm rau txhua tus, tshwj tsis yog rau cov peev txheej uas tau teev tseg hauv Kev lees paub rau Gateway Txoj Cai
Txoj Cai Ntxuav, Kawg thiab Tso Dej feem ntau yog muab tso rau hauv ib txoj cai txwv tsis pub txhua yam uas tsis tau tso cai ua ntej
Cov ntaub ntawv zoo tshaj plaws tau piav qhia hauv .
3.8. Dab tsi yog qhov chaw rau cov kev pabcuam tsim los ntawm cov thawj coj?
Piv txwv li, qee qhov kev pabcuam TCP tau tsim nyob rau ntawm qhov chaw nres nkoj tshwj xeeb, thiab nws ua rau kev txiav txim siab "Match for Any" hauv Advanced settings of the service. Nyob rau hauv rooj plaub no, qhov kev pabcuam no yuav poob tshwj xeeb raws li txoj cai uas nws tshwm sim, thiab yuav tsis koom nrog cov cai uas Ib qho twg nyob hauv Cov Kev Pabcuam.
Hais txog cov kev pabcuam, nws tsim nyog hais tias qee zaum nws yog qhov tsim nyog los tweak sijhawm. Qhov kev teeb tsa no yuav tso cai rau koj siv lub rooj vag cov peev txheej tau ntse dua, yog li tsis txhob khaws TCP / UDP ntxiv sijhawm rau cov txheej txheem uas tsis xav tau lub sijhawm loj. Piv txwv li, nyob rau hauv lub screenshot hauv qab no, kuv hloov lub sij hawm domain-udp kev pab cuam los ntawm 40 vib nas this mus rau 30 vib nas this.
3.9. SecureXL puas siv thiab qhov feem pua ββββntawm acceleration yog dab tsi?
Koj tuaj yeem tshawb xyuas qhov zoo ntawm SecureXL nrog cov lus txib tseem ceeb hauv hom kws tshaj lij ntawm lub rooj vag fwv stat ΠΈ fw accelstats -s. Tom ntej no, koj yuav tsum txiav txim siab seb hom tsheb khiav ceev npaum li cas, cov qauv twg (templates) koj tuaj yeem tsim ntau dua.
Los ntawm lub neej ntawd, Drop Templates tsis tau qhib, ua rau lawv yuav muaj txiaj ntsig zoo rau kev ua haujlwm ntawm SecureXL. Txhawm rau ua qhov no, mus rau qhov chaw teeb tsa rooj vag thiab Optimizations tab:
Tsis tas li ntawd, thaum ua haujlwm nrog pawg, txhawm rau txhim kho CPU, koj tuaj yeem lov tes taw synchronization ntawm cov kev pabcuam tsis tseem ceeb, xws li UDP DNS, ICMP, thiab lwm yam. Txhawm rau ua qhov no, mus rau qhov chaw pabcuam β Advanced β Synchronize kev sib txuas ntawm Lub Xeev Synchronization tau qhib rau ntawm pawg.
Tag nrho cov kev coj ua zoo tshaj plaws tau piav qhia hauv .
3.10. CoreXl siv li cas?
CoreXL thev naus laus zis, uas tso cai rau koj siv ntau lub CPUs rau qhov xwm txheej firewall (firewall modules), nws yuav pab kom ua tau zoo ntawm cov cuab yeej ua haujlwm. Pab neeg ua ntej fw ctl affinity -l -a yuav qhia cov xwm txheej siv firewall thiab cov txheej txheem muab rau qhov xav tau SND (ib qho qauv uas faib cov tsheb khiav mus rau firewall). Yog tias tsis yog txhua tus processors koom nrog, lawv tuaj yeem ntxiv nrog cov lus txib cpconfig ua ntawm lub rooj vag.
Kuj yog ib zaj dab neeg zoo muab tso pab kom Multi-Queue. Multi-Queue daws qhov teeb meem thaum lub processor nrog SND siv los ntawm ntau feem pua, thiab firewall piv txwv ntawm lwm cov processors tsis ua haujlwm. Tom qab ntawd SND yuav tuaj yeem tsim ntau cov kab rau ib NIC thiab teeb tsa qhov tseem ceeb sib txawv rau cov tsheb sib txawv ntawm qib kernel. Yog li ntawd, CPU cores yuav siv tau ntau dua. Cov txheej txheem kuj tau piav qhia hauv .
Hauv kev xaus, kuv xav hais tias cov no nyob deb ntawm txhua qhov Kev Coj Ua Zoo Tshaj Plaws rau optimizing Check Point, tab sis nrov tshaj plaws. Yog tias koj xav thov kev txheeb xyuas koj txoj cai ruaj ntseg lossis daws qhov teeb meem Check Point, thov hu rau [email tiv thaiv].
Ua tsaug rau koj txoj kev paub!
Tau qhov twg los: www.hab.com