Questions about the FastPath Feature

Hi Sophos-Team,

I searched for the topic, but I haven't found a thread for it. Therefore I'd like to start a discussion/knowledge collection about the new fastpath feature.

My XG shows the following console output:

console> system firewall-acceleration show 

Firewall Acceleration is Enabled. Fastpath Load Failed.

Is this related to the new fast path feature?

What could be the reason for the failure?

Is the fast path feature available to SW appliances / virtual machines / home users etc.?

Thanks and Best Regards

Dom

Parents
  • Hi Dom Nik,

          Thanks for your feedback. Please find the answer inline.

    Is this related to the new fast-path feature?

    Yes, This issue already identified and tracked using Jira id NC-51957 which is fixed in upcoming next v18 release.

    What could be the reason for the failure?

    Your XG firewall ethernet driver is not supported fast-path feature.Please share ethtool -i <your interface name> output.

    Is the fast path feature available to SW appliances / virtual machines/home users etc.?

    It depends on the ethernet interface driver.

  • Hi Apurv,

    I'm using the virtio-net drivers:

    SFVH_SO01_SFOS 18.0.0 EAP3-Refresh1# ethtool -i Port1
    driver: virtio_net_nm
    version: 1.0.0
    firmware-version:
    expansion-rom-version:
    bus-info: 0000:00:12.0
    supports-statistics: no
    supports-test: no
    supports-eeprom-access: no
    supports-register-dump: no
    supports-priv-flags: no

    Please let me know if there is a better solution for KVM. :-)

    Thanks and Best Regards

    Dom

Reply
  • Hi Apurv,

    I'm using the virtio-net drivers:

    SFVH_SO01_SFOS 18.0.0 EAP3-Refresh1# ethtool -i Port1
    driver: virtio_net_nm
    version: 1.0.0
    firmware-version:
    expansion-rom-version:
    bus-info: 0000:00:12.0
    supports-statistics: no
    supports-test: no
    supports-eeprom-access: no
    supports-register-dump: no
    supports-priv-flags: no

    Please let me know if there is a better solution for KVM. :-)

    Thanks and Best Regards

    Dom

Children