FTD 2130 Performace optimization using fastpath

[Chess Norris]

Hello,

A customer are having some issues with performances when the CPU of there FTD 2130 sometimes reach 90% and start dropping traffic due to occasionally high amount of traffic. This is mostly internal traffic within a Kubernetes cluster. 

If we were to fastpath this traffic, how much performance should we expect to gain by this? The datasheet from Cisco say the throughput is 5.4 Gbps with or without IPS, so maybe we will not gain so much performance? 

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html 

Thanks

/Chess

[Sheraz.Salim]

Cisco datasheet says the throughput is 5.4 Gbps with or without IPS Here , so it might not be a good idea to fastpath the traffic expecting significant performance improvement.

Fastpathing traffic can improve performance by offloading some of the processing work from the CPU to the hardware. However, the amount of performance gain you will see will depend on a number of factors, such as the type of traffic you are fastpathing, the amount of traffic, and the capabilities of your FTD 2130 appliance.

In some cases, fastpathing traffic can result in significant performance improvements. For example, if you are fastpathing a large amount of internal traffic within a Kubernetes cluster, you may see a noticeable improvement in performance.

However, in other cases, fastpathing traffic may not provide much benefit. For example, if you are already close to the maximum throughput of your FTD 2130 appliance, then fastpathing traffic is unlikely to make a significant difference.

Ultimately, the best way to determine whether or not fastpathing traffic will improve performance for your specific situation is to test it out. You can do this by setting up a test environment and measuring the performance of your FTD 2130 appliance with and without fastpathing traffic.