{"id":39415,"date":"2019-10-31T22:32:08","date_gmt":"2019-10-31T19:32:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/check-point-optimizatsiya-cpu-i-ram\/"},"modified":"2019-10-31T22:32:08","modified_gmt":"2019-10-31T19:32:08","slug":"check-point-optimizatsiya-cpu-i-ram","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/check-point-optimizatsiya-cpu-i-ram","title":{"rendered":"Check Point: CPU un RAM optimiz\u0101cija","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Check
\nSveiki, kol\u0113\u0123i! \u0160odien es v\u0113l\u0113tos apspriest \u013coti aktu\u0101lu t\u0113mu, kas interes\u0113 daudzu Check Point administratoru \u2014 \u201eCPU un RAM optimiz\u0101cija\u201d. Bie\u017ei ir gad\u012bjumi, kad v\u0101rti un\/vai vad\u012bbas serveris pat\u0113r\u0113 negaid\u012bti daudz \u0161o resursu, un es v\u0113l\u0113tos saprast, kur tie \"iet\", un, ja iesp\u0113jams, racion\u0101l\u0101k tos izmantot. <\/p>\n

1. Anal\u012bze<\/h3>\n

\nLai analiz\u0113tu procesora noslogojumu, ir lietder\u012bgi izmantot \u0161\u0101das komandas, kuras tiek ievad\u012btas ekspertu re\u017e\u012bm\u0101:
\n<\/a><\/noindex>
\ntop<\/b> par\u0101da visus procesus, CPU un RAM pat\u0113r\u0113to resursu daudzumu procentos, uptime, procesa priorit\u0101ti un cits<\/a><\/noindex> re\u0101l\u0101 laik\u0101<\/i>un <\/p>\n

\"Check
\n
\ncpwd_admin list<\/b> Check Point WatchDog Daemon, kas par\u0101da visus apar\u0101tprogramma modu\u013cus, to PID, st\u0101vokli un palai\u0161anas reizes<\/i><\/p>\n

\"Check
\n
\ncpstat -f cpu os<\/b> CPU izmanto\u0161ana, to daudzums un procesora laika sadal\u012bjums procentos<\/i><\/p>\n

\"Check
\n
\ncpstat -f memory os<\/b> virtu\u0101l\u0101s RAM izmanto\u0161ana, cik visp\u0101r ir akt\u012bv\u0101s, br\u012bv\u0101s RAM un citas<\/i><\/p>\n

\"Check
\n
\nPareizs nov\u0113rojums b\u016btu, ka visas cpstat komandas var apskat\u012bt, izmantojot r\u012bku cpview<\/b>. Lai to izdar\u012btu, vienk\u0101r\u0161i j\u0101pievieno komanda cpview no jebkura re\u017e\u012bma SSH sesij\u0101.<\/p>\n

\"Check
\n\"Check
\n
\nps auxwf<\/b> gar\u0161 saraksts ar visiem procesiem, to ID, ie\u0146emto virtu\u0101lo atmi\u0146u un atmi\u0146u RAM, CPU<\/i><\/p>\n

\"Check
\n
\nCita \u0161\u012bs komandas vari\u0101cija: <\/p>\n

ps -aF<\/b> par\u0101d\u012bs visresursu pat\u0113r\u0113jo\u0161o procesu<\/i><\/p>\n

\"Check
\n
\nfw ctl affinity -l -a<\/b> kodola sadal\u012bjums starp da\u017e\u0101d\u0101m ugunsm\u016bra instanc\u0113m, t.i., CoreXL tehnolo\u0123ija<\/i><\/p>\n

\"Check
\n
\n fw ctl pstat<\/b> RAM anal\u012bze un kop\u0113jie savienojumu r\u0101d\u012bt\u0101ji, cookie, NAT<\/i><\/p>\n

\"Check
\n
\nfree -m<\/b> RAM buferis<\/i><\/p>\n

\"Check
\n
\nIev\u0113r\u012bbas cien\u012bga ir komanda netsat <\/b>un t\u0101s vari\u0101cijas. Piem\u0113ram, netstat -i<\/b> var pal\u012bdz\u0113t risin\u0101t buferu uzraudz\u012bbas uzdevumu. Parametrs, RX dropped packets (RX-DRP) \u0161\u012bs komandas izvad\u0113 parasti pieaug pats no sevis, jo tiek dropoti nelikum\u012bgi protokoli (IPv6, slikti \/ nepareizi VLAN tagi un citi). Tom\u0113r, ja dropi notiek cita iemesla d\u0113\u013c, tad ieteicams izmantot \u0161o no raksta<\/a><\/noindex>, lai uzs\u0101ktu izmekl\u0113\u0161anu un saprastu, k\u0101p\u0113c \u0161is t\u012bkla interfeiss tiek atsij\u0101ts. Uzzinot iemeslu, aparat\u016bras darbu var ar\u012b optimiz\u0113t.<\/p>\n

\"Check
\n
\nJa ir iesl\u0113gts Monitoring blade, tad \u0161os r\u0101d\u012bt\u0101jus var skat\u012bt grafiski SmartConsole, noklik\u0161\u0137inot uz objekta un izv\u0113loties punktu \u201eDevice & License Information\u201d. <\/p>\n

Past\u0101v\u012bgi aktiviz\u0113t Monitoring blade nav ieteicams, bet vienu dienu testiem noteikti var.<\/p>\n

\"Check
\n
\nTurkl\u0101t var pievienot vair\u0101k parametrus uzraudz\u012bbai, no kuriem viens ir \u013coti noder\u012bgs \u2014 Bytes Throughput (aparat\u016bras caurlaidsp\u0113ja).<\/p>\n

\"Check
\n
\nJa ir k\u0101da cita uzraudz\u012bbas sist\u0113ma, piem\u0113ram, bezmaksas Zabbix<\/a><\/noindex>, kas balst\u012bta uz SNMP, t\u0101 ar\u012b der\u0113s probl\u0113mu konstat\u0113\u0161anai.<\/p>\n

2. \u201cAtmi\u0146as nopl\u016bde\u201d laika gait\u0101<\/h3>\n

\nBie\u017ei rodas jaut\u0101jums, k\u0101p\u0113c laika gait\u0101 v\u0101rteja vai p\u0101rvald\u012bbas serveris s\u0101k aizvien vair\u0101k pat\u0113r\u0113t RAM. Gribu nomierin\u0101t: tas ir norm\u0101li Linux l\u012bdz\u012bg\u0101m sist\u0113m\u0101m. <\/p>\n

Apskatot komandu izvadus free -m<\/b> un cpstat -f memory os<\/b> no ekspertu re\u017e\u012bma, var saskait\u012bt un apskat\u012bt visus parametrus, kas attiecas uz RAM.<\/p>\n

Pa\u0161reiz pieejam\u0101 atmi\u0146a v\u0101rtej\u0101 Br\u012bva atmi\u0146a<\/b> + Buferu atmi\u0146a<\/b> + Ke\u0161atmi\u0146a<\/b> = +-1.5 GB<\/b>, k\u0101 parasti.<\/p>\n

K\u0101 saka SR, laika gait\u0101 v\u0101rteja\/p\u0101rvald\u012bbas serveris optimiz\u0113jas un izmanto aizvien vair\u0101k atmi\u0146as, sasniedzot aptuveni 80% izmanto\u0161anu, un apst\u0101jas. J\u016bs varat restart\u0113t ier\u012bci, un tad r\u0101d\u012bt\u0101ji tiks atjaunoti. 1.5 GB br\u012bvas RAM v\u0101rtejai noteikti pietiek visu uzdevumu izpildei, un p\u0101rvald\u012bba reti sasniedz t\u0101das robe\u017eas.<\/p>\n

Ar\u012b min\u0113to komandu izvadus par\u0101d\u012bs, cik jums ir Zema atmi\u0146a<\/b> (operat\u012bv\u0101 atmi\u0146a user space) un Augsta atmi\u0146a<\/b> (operat\u012bv\u0101 atmi\u0146a kernel space) izmantota.<\/p>\n

Kernel procesi (ieskaitot akt\u012bvos modu\u013cus, piem\u0113ram, Check Point kernel modu\u013cus) izmanto tikai zemo atmi\u0146u. Tom\u0113r lietot\u0101ja procesi var izmantot gan zemo, gan augsto atmi\u0146u. Turkl\u0101t zema atmi\u0146a aptuveni ir Kop\u0113j\u0101 atmi\u0146a<\/b>.<\/p>\n

J\u0101uztraucas tikai tad, ja \u017eurn\u0101los par\u0101d\u0101s k\u013c\u016bdas \u201emodu\u013cu restart\u0113\u0161ana vai procesu nogalin\u0101\u0161ana, lai atjaunotu atmi\u0146u d\u0113\u013c OOM (Out of memory)\"<\/b>. Tad j\u0101restart\u0113 v\u0101rteja un j\u0101sazin\u0101s ar atbalsta dienestu, ja restart\u0113\u0161ana nepal\u012bdz.<\/p>\n

Pilnu aprakstu var atrast sk99547 <\/a><\/noindex>un sk99593<\/a><\/noindex>.<\/p>\n

3. Optimiz\u0101cija<\/h3>\n

\nZem\u0101k ir jaut\u0101jumi un atbildes par CPU un RAM optimiz\u0101ciju. Uz tiem nepiecie\u0161ams god\u012bgi atbild\u0113t pa\u0161am sev un iev\u0113rot ieteikumus.<\/p>\n

3.1. Vai apl\u0101n\u0113 bija pareizi izv\u0113l\u0113ts? Vai bija pilotprojekts?<\/h4>\n

\nNeskatoties uz pareizu devumu, t\u012bkls var\u0113ja vienk\u0101r\u0161i augt, un \u0161\u012b aparat\u016bra vienk\u0101r\u0161i nesp\u0113j tikt gal\u0101 ar slodzi. Otrais variants, ja k\u0101 t\u0101ds devums nemaz netika veikts.<\/p>\n

3.2. Vai ir iesl\u0113gta HTTPS inspekcija? Ja j\u0101, vai tehnolo\u0123ija ir iestat\u012bta saska\u0146\u0101 ar lab\u0101kaj\u0101m praks\u0113m? <\/h4>\n

\nSazinieties ar rakstu<\/a><\/noindex>, ja j\u016bs esat m\u016bsu klients, vai ar sk108202<\/a><\/noindex>.<\/p>\n

Noteikumu sec\u012bba HTTPS inspekcijas politik\u0101 ir \u013coti svar\u012bga, optimiz\u0113jot HTTPS viet\u0146u atv\u0113r\u0161anu.<\/p>\n

Ieteicam\u0101 noteikumu sec\u012bba:<\/p>\n

    \n
  1. Bypass noteikumi ar kategorij\u0101m\/URL<\/li>\n
  2. Inspect noteikumi ar kategorij\u0101m\/URL<\/li>\n
  3. Inspect noteikumi p\u0101r\u0113j\u0101m kategorij\u0101m<\/li>\n<\/ol>\n

    \n\"Check
    \n
    \nT\u0101pat k\u0101 ugunsm\u016bra politik\u0101, Check Point mekl\u0113 saska\u0146o\u0161anu pa pakotn\u0113m no aug\u0161as uz leju, t\u0101p\u0113c bypass noteikumi lab\u0101k j\u0101novieto aug\u0161pus\u0113, jo v\u0101rteja net\u0113r\u0113s resursus, p\u0101rbaudot visus noteikumus, ja \u0161\u012b pakotne j\u0101laiz.<\/p>\n

    3.3 Vai tiek izmantoti address-range objekti?<\/h4>\n

    \nAddress-range objekti, piem\u0113ram, t\u012bkls 192.168.0.0-192.168.5.0, pat\u0113r\u0113 b\u016btiski vair\u0101k RAM nek\u0101 5 t\u012bkla objekti. Kopum\u0101 uzskata par labu praksi izdz\u0113st neizmantotos objektus SmartConsole, jo katru reizi, kad tiek iestat\u012bta politika, v\u0101rteja un p\u0101rvald\u012bbas serveris t\u0113r\u0113 resursus un, pats galvenais, laiku, lai verific\u0113tu un piem\u0113rotu politiku.<\/p>\n

    3.4. K\u0101 ir iestat\u012bta Threat Prevention politika? <\/h4>\n

    \nPirmaj\u0101 viet\u0101, Check Point iesaka izdal\u012bt IPS atsevi\u0161\u0137\u0101 profil\u0101 un izveidot atsevi\u0161\u0137us noteikumus \u0161im bleydu. <\/p>\n

    Piem\u0113ram, administrators uzskata, ka DMZ segments j\u0101aizsarg\u0101 tikai ar IPS. T\u0101d\u0113\u013c, lai v\u0101rteja net\u0113r\u0113tu resursus citu bleydu pakot\u0146u apstr\u0101d\u0113, ir nepiecie\u0161ams izveidot noteikumu tie\u0161i \u0161im segmentam ar profilu, kur\u0101 iek\u013cauts tikai IPS.<\/p>\n

    Attiec\u012bb\u0101 uz profilu iestat\u012bjumiem, ieteicams to iestat\u012bt p\u0113c lab\u0101kaj\u0101m praks\u0113m \u0161aj\u0101 dokument\u0101<\/a><\/noindex>(lappuses 17-20).<\/p>\n

    3.5. IPS iestat\u012bjumos cik daudz parakstu ir re\u017e\u012bm\u0101 Detect? <\/h4>\n

    \nIeteicams r\u016bp\u012bgi p\u0101rstr\u0101d\u0101t parakstus ar to domu, ka j\u0101izsl\u0113dz neizmantotie (piem\u0113ram, paraksti Adobe produktu izmanto\u0161anai prasa daudz apr\u0113\u0137inu jaudas, un, ja klientam t\u0101di produkti nav, parakstus ir j\u0113ga izsl\u0113gt). Turpm\u0101k iestatiet Prevent viet\u0101 Detect tur, kur tas iesp\u0113jams, jo v\u0101rteja t\u0113r\u0113 resursus uz visu savienojumu re\u017e\u012bm\u0101 Detect, bet re\u017e\u012bm\u0101 Prevent t\u0101 t\u016bl\u012bt noraida savienojumu un net\u0113r\u0113 resursus uz pilnu pakotnes apstr\u0101di.<\/p>\n

    3.6. Kurus failus apstr\u0101d\u0101 Threat Emulation, Threat Extraction, Anti-Virus bleydi?<\/h4>\n

    \nNav\u0113rt\u0113\u0161ana un anal\u012bze par papla\u0161in\u0101jumiem nav j\u0113gas, ja lietot\u0101ji tos nenolasa, vai ja uzskat\u0101t tos par nevajadz\u012bgiem sav\u0101 t\u012bkl\u0101 (piem\u0113ram, bat un exe failus viegli var blo\u0137\u0113t ar Content Awareness funkciju ugunsm\u016br\u012b, t\u0101p\u0113c v\u0101rtejas resursi tiks t\u0113r\u0113ti maz\u0101k). Turkl\u0101t Threat Emulation iestat\u012bjumos var izv\u0113l\u0113ties vidi (oper\u0113t\u0101jsist\u0113mu), lai apemul\u0113tu draudus smilt\u012bs, un iestat\u012bt Windows 7 vidi, kad visi lietot\u0101ji str\u0101d\u0101 ar 10. versiju, ar\u012b nav j\u0113gas.<\/p>\n

    3.7. Vai ugunsm\u016bra noteikumi un Application l\u012bme\u0146a noteikumi ir sak\u0101rtoti atbilsto\u0161i lab\u0101kaj\u0101m praks\u0113m? <\/h4>\n

    \nJa noteikumam ir daudz hitu (saskan\u012bbu), ieteicams tos novietot vis\u0101tr\u0101k, bet noteikumus ar nelielu hitu skaitu \u2014 visvair\u0101k. Galvenais ir nodro\u0161in\u0101t, lai tie nep\u0101rkl\u0101jas un viens otru nenov\u0113rstu. Ieteicam\u0101 ugunsm\u016bra politikas arhitekt\u016bra:<\/p>\n

    \"Check
    \n
    \nPaskaidrojumi: <\/p>\n

    First Rules \u2014 \u0161eit ievieto noteikumus ar visliel\u0101ko saskan\u012bbu
    \nNoise Rule \u2014 noteikums, kas atbr\u012bvojas no trauc\u0113jo\u0161\u0101 datu pl\u016bsmas, piem\u0113ram, NetBIOS
    \nStealth Rule \u2014 aizliedz piek\u013cuvi v\u0101rteju un p\u0101rvald\u012bbai visiem, iz\u0146emot tos avotus, kas nor\u0101d\u012bti Authentication to Gateway Rules noteikumos
    \nClean-Up, Last un Drop Rules parasti apvienojas vien\u0101 noteikum\u0101, lai aizliegtu visu, kas iepriek\u0161 nebija at\u013cauts<\/p>\n

    \u0160ie lab\u0101s prakses dati aprakst\u012bti sk106597<\/a><\/noindex>.<\/p>\n

    3.8. K\u0101di ir administr\u0101ciju veidojo\u0161o pakalpojumu iestat\u012bjumi? <\/h4>\n

    \nPiem\u0113ram, tiek izveidots noteikts TCP pakalpojums caur konkr\u0113tu portu, un ir j\u0113ga Advanced pakalpojumu iestat\u012bjumos atz\u012bm\u0113t, ka \u201cMatch for Any\u201d nav j\u0101sakr\u012bt. \u0160aj\u0101 gad\u012bjum\u0101 \u0161is pakalpojums b\u016bs konkr\u0113ti zem noteikuma, kur\u0101 tas figur\u0113, un neb\u016bs iesaist\u012bts noteikumos, kur pakalpojumu kolonn\u0101 nor\u0101d\u012bts Any.<\/p>\n

    \"Check
    \n
    \nRun\u0101jot par pakalpojumiem, ir v\u0113rts piemin\u0113t, ka da\u017ereiz ir nepiecie\u0161ams piel\u0101got laika ierobe\u017eojumus. \u0160is iestat\u012bjums \u013caus efekt\u012bv\u0101k pat\u0113r\u0113t v\u0101rtejas resursus, lai neuztur\u0113tu ilg\u0101k TCP\/UDP sesijas protokolos, kam nevajag lielu laika ierobe\u017eojumu. Piem\u0113ram, zem\u0101k redzamaj\u0101 att\u0113l\u0101 es p\u0101rvietoju domain-udp pakalpojuma laika ierobe\u017eojumu no 40 sekund\u0113m uz 30 sekund\u0113m.<\/p>\n

    \"Check
    \n<\/p>\n

    3.9. Vai tiek izmantots SecureXL un k\u0101ds ir pa\u0101trin\u0101juma procents? <\/h4>\n

    \nSecureXL darba kvalit\u0101ti var p\u0101rbaud\u012bt ar galvenaj\u0101m komand\u0101m ekspertu re\u017e\u012bm\u0101 uz v\u0101rtejas fwaccel stat<\/b> un fw accel stats -s<\/b>. T\u0101l\u0101k j\u0101saprot, k\u0101da veida datu pl\u016bsma tiek pa\u0101trin\u0101ta, k\u0101di veidnes (templates) var v\u0113l izveidot. <\/p>\n

    Noklus\u0113ti Drop Templates nav iesl\u0113gti, to iesl\u0113g\u0161ana labv\u0113l\u012bgi ietekm\u0113s SecureXL darb\u012bbu. Lai to izdar\u012btu, dodieties uz infrastrukt\u016bras iestat\u012bjumiem un apak\u0161sada\u013cu Optimizations:<\/p>\n

    \"Check
    \n
    \nT\u0101pat str\u0101d\u0101jot ar klasteri, CPU optimiz\u0113\u0161anai varat atsl\u0113gt nenoz\u012bm\u012bgu pakalpojumu sinhroniz\u0101ciju, piem\u0113ram, UDP DNS, ICMP un citus. Lai to izdar\u012btu, jums vajadz\u0113tu doties uz pakalpojumu iestat\u012bjumiem \u2192 Advanced \u2192 Synchronize connections of State Synchronization is enabled on the cluster.<\/p>\n

    \"Check
    \n
    \nVisas lab\u0101k\u0101s prakses ir aprakst\u012btas     sk98348<\/a><\/noindex>.<\/p>\n

    3.10. K\u0101 tiek izmantots CoreXL? <\/h4>\n

    \nTehnolo\u0123ija CoreXL, kas \u013cauj izmantot vair\u0101kus CPU ugunsm\u016bra instanc\u0113m (ugunsm\u016bra modu\u013ciem), noteikti pal\u012bdz optimiz\u0113t ier\u012bces darb\u012bbu. Vispirms komanda fw ctl affinity -l -a <\/b>par\u0101d\u012bs izmantot\u0101s ugunsm\u016bra instances un procesorus, kas pie\u0161\u0137irti nepiecie\u0161amajam SND (modulim, kas sadala satiksmi starp ugunsm\u016bra strukt\u016br\u0101m). Ja visi procesori netiek izmantoti, tos var pievienot ar komandu cpconfig <\/b>uz ier\u012bces.
    \nT\u0101pat ir laba ideja instal\u0113t     hotfix <\/a><\/noindex>\u0101r\u0113ji defin\u0113tu Multi-Queue. Multi-Queue risina probl\u0113mu, kad procesors ar SND tiek izmantots daudz\u0101s procentos, bet ugunsm\u016bra instances uz citiem procesoriem ir neakt\u012bvas. T\u0101d\u0113j\u0101di SND var\u0113tu izveidot vair\u0101kas rindas vienai NIC un noteikt da\u017e\u0101dus priorit\u0101tes l\u012bme\u0146us da\u017e\u0101dam satiksmes apjomam l\u012bme\u0146a kodol\u0101. T\u0101d\u0113j\u0101di CPU kodoli tiks izmantoti efekt\u012bv\u0101k. Metodikas ir aprakst\u012btas ar\u012b sk98348<\/a><\/noindex>.<\/p>\n

    Nosl\u0113gum\u0101 v\u0113l\u0113tos teikt, ka tas nav viss lab\u0101ko praksi saraksts ugunsm\u016bra optimiz\u0101cijai Check Point, bet tie ir vispopul\u0101r\u0101kie. Ja v\u0113laties pas\u016bt\u012bt auditu sav\u0101m dro\u0161\u012bbas politik\u0101m vai risin\u0101t probl\u0113mu saist\u012bb\u0101 ar Check Point, l\u016bdzu, sazinieties ar sales@tssolution.ru. <\/p>\n

    Paldies par uzman\u012bbu!
    \n
    Avots:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 Check Point \u0442\u0435\u043c\u0443 \u00ab\u041e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f CPU \u0438 RAM\u00bb. \u041d\u0435\u0440\u0435\u0434\u043a\u0438 \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u0448\u043b\u044e\u0437 \u0438\/\u0438\u043b\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u043c\u0435\u043d\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u044d\u0442\u0438\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u0438 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u0443\u0434\u0430 \u043e\u043d\u0438 \u201c\u0443\u0442\u0435\u043a\u0430\u044e\u0442\u201d, \u0438 \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0433\u0440\u0430\u043c\u043e\u0442\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445. 1. \u0410\u043d\u0430\u043b\u0438\u0437 \u0414\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":39416,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-39415","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Check Point: CPU un RAM optimiz\u0101cija | ProHoster","description":"Sveiki, kol\u0113\u0123i!","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/check-point-optimizatsiya-cpu-i-ram","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Check Point: \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f CPU \u0438 RAM | ProHoster","og:description":"\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435, \u043a\u043e\u043b\u043b\u0435\u0433\u0438!","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/check-point-optimizatsiya-cpu-i-ram","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:32:08+00:00","article:modified_time":"2019-10-31T19:32:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39415","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 01:55:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:50:24","updated":"2026-01-24 01:55:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/39415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=39415"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/39415\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/39416"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=39415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=39415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=39415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}