High CPU usage on SND cores when high number of interfaces are configured

Product

Security Gateways, VSX (Traditional)

Version

R80.40 (EOS), R81 (EOS), R81.10 (EOS), R81.20

Last Modified

2024-06-05

Symptoms

• SND (Secure Network Dispatcher) cores are highly utilized.
• A high number of interfaces (either physical or VLANs) are configured on the Security Gateway.
• The output of the "perf top -C SND CPU ID" command shows that the function responsible for elevated CPU usage is get_dev2ifn_hash.

Cause

With many interfaces, more usage is consumed in locating the proper route and relevant interface.

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R81.20 starting from Take 54
• Jumbo Hotfix Accumulator for R81.10 starting from Take 141
• Jumbo Hotfix Accumulator for R81 starting from Take 99

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions: Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.