02-05-2014 09:35
The firewall kernel is replicated multiple times, each kernel instance runs on one processing core and each instance is an independent firewall. These instances don't share FW-Lock. Thus, concurrency is achieved. An additional component called the dispatcher receives packets and forwards them to the kernel instances (The dispatcher usually executes on a dedicated core).
1/ Spread the interface interrupts (IRQ) over the available CPU's
Checkpoint -Spreading Interface IRQ over CPU.pdf (150761)
2/ Activate COREXL on high loaded Virtual Systems (VS) to increase performance of them.
Checkpoint CORE XL.pdf (313716)