27
Performance Analysis Revision C Jan 2016 Proprietary and Confidential NOTE: This document is confidential in nature and should NOT be distributed outside Palo Alto Networks! However, it is left to individual discretion, and where appropriate and under a Non-Disclosure Agreement can be discussed and provided to partners and customers. Revision C ©2016, Palo Alto Networks, Inc. www.paloaltonetworks.com

Palo alto networks performance

Embed Size (px)

Citation preview

Page 1: Palo alto networks performance

!

Performance Analysis Revision C

Jan 2016

Proprietary and Confidential NOTE: This document is confidential in nature and should NOT be distributed outside Palo Alto Networks! However, it is left to individual discretion, and where appropriate and under a Non-Disclosure Agreement can be discussed and provided to partners and customers.

Revision C ©2016, Palo Alto Networks, Inc. www.paloaltonetworks.com

Page 2: Palo alto networks performance

!

Revision X ©2016, Palo Alto Networks, Inc. www.paloaltonetworks.com

Page 3: Palo alto networks performance

Contents

Introduction 3 ...........................................................................................................................................................................................................................................

Test Methodology 3 ..................................................................................................................................................................................................................................

Test Equipment 3 .................................................................................................................................................................................................................................Traffic Profile 3 ....................................................................................................................................................................................................................................Firewall Configuration 3 ..................................................................................................................................................................................................................

Performance Overview 4 .......................................................................................................................................................................................................................

PA-7050 (Single NPC) 4 .............................................................................................................................................................................................................................................................PA-7050 - Fully Loaded (6 NPCs) 5 .............................................................................................................................................................................................................................................................PA-5060 7 .............................................................................................................................................................................................................................................PA-5050 8 ..............................................................................................................................................................................................................................................PA-5020 9 ..............................................................................................................................................................................................................................................PA-4060 11 ...........................................................................................................................................................................................................................................PA-4050 13 ...........................................................................................................................................................................................................................................PA-4020 15 ...........................................................................................................................................................................................................................................PA-3050 17 ..........................................................................................................................................................................................................................................PA-3020 19 ............................................................................................................................................................................................................................................PA-2050 20 .........................................................................................................................................................................................................................................PA-2020 21 ............................................................................................................................................................................................................................................PA-500 23 ..............................................................................................................................................................................................................................................PA-200 25 ............................................................................................................................................................................................................................................

Revision History 26.................................................................................................................................................................................................................................

©2016, Palo Alto Networks, Inc. [! ]2

Page 4: Palo alto networks performance

Introduction This document provides PAN-OS 6.0.0 performance analysis results for the following hardware platforms:

• PA-7050 • PA-5060 • PA-5050 • PA-5020 • PA-4060 • PA-4050 • PA-4020 • PA-3050 • PA-3020 • PA-2050 • PA-2020 • PA-500 • PA-200

The product performance capabilities are measured using HTTP traffic since HTTP is one of the most common genuine applications and the performance results are more realistic for meaningful reference.

This document and its content are dynamic in nature with intention to have it updated on regular basis with new and updated testing methodologies so please make sure you are referring to the most recent document.

Test Methodology

Test Equipment - Hardware: Spirent 3100B Avalanche Commander appliance - Software: version 4.10

Traffic Profile - The content type of HTTP message header is set to “text/html”. - Various transaction sizes (4KB, 16KB, 64KB, 1MB) are used for both HTTP and SSL throughput testing. - RSA keys with 1024 bit key length are used for SSL performance tests.

Firewall Configuration - Palo Alto Networks firewall interfaces are configured in vwire mode - Logging is enabled at session end in all tests

©2016, Palo Alto Networks, Inc. [! ]3

Page 5: Palo alto networks performance

Performance Overview The following tables list performance results from tests running various transaction sizes and with different firewall configurations.

PA-7050 (Single NPC) App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Inspection, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 694776 2,798

16384 691572 9,817

65536 215100 19,774

1048576 13566 19,677

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 682770 2,798

16384 557874 9,814

65536 214908 19,773

1048576 13566 19,677

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 686460 2,799

16384 562488 9,814

65536 215064 19,770

1048576 13560 19,682

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 462618 2,797

16384 260472 6,535

65536 103722 8,968

1048576 6348 9,224

©2016, Palo Alto Networks, Inc. [! ]4

Page 6: Palo alto networks performance

SSL Forward Proxy, App-ID

PA-7050 - Fully Loaded (6 NPCs) Note: The performance results shown below for the PA-7050 - fully loaded chassis are the Single NPC numbers (shown above) multiplied by 6. Performance testing for up to 3 NPCs has been completed and linear scalability for the pA-7050 has been tested and confirmed. A 3rd party performance validation document performed by Network Test also validates the linear scaling ability of the PA-7050.This document is available on the intranet per the following link: https://intranet.paloaltonetworks.com/docs/DOC-11833

App-ID Override

App-ID

App-ID, All threats (DSRI)

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 94704 790

16384 82818 2,083

65536 29904 2,643

1048576 4824 5,319

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 81696 572

16384 65778 1,374

65536 29886 2,316

1048576 3330 4,988

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4168656 16,788

16384 4149432 58,902

65536 1290600 118,644

1048576 81396 118,062

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4096620 16,788

16384 3347244 58,884

65536 1289448 118,638

1048576 81396 118,062

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4118760 16,794

©2016, Palo Alto Networks, Inc. [! ]5

Page 7: Palo alto networks performance

App-ID, All threats

SSL Inbound Inspection, App-ID

SSL Forward Proxy, App-ID

16384 3374928 58,884

65536 1290384 118,620

1048576 81360 118,092

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2775708 16,782

16384 1562832 39,210

65536 622332 53,808

1048576 38088 55,344

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 568224 4,740

16384 496908 12,498

65536 179424 15,858

1048576 28944 31,914

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 490176 3,432

16384 394668 8,244

65536 179316 13,896

1048576 19980 29,928

©2016, Palo Alto Networks, Inc. [! ]6

Page 8: Palo alto networks performance

PA-5060

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Inspection, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 65,319 2,238

16384 64,228 7,716

65536 31,252 17,606

1048576 2,140 19,153

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 48,134 1,421

16384 46,434 4,956

65536 31,326 16,798

1048576 2,140 19,157

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 43,324 1,393

16384 34,317 4,329

65536 19,604 10,585

1048576 1,636 13,941

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 27,857 919

16384 18,422 2,217

65536 8,863 4,511

1048576 777 6,677

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4,414 253

16384 3,185 636

65536 2,305 1,594

©2016, Palo Alto Networks, Inc. [! ]7

Page 9: Palo alto networks performance

SSL Forward Proxy, App-ID

PA-5050

App-ID Override

App-ID

App-ID, All threats (DSRI)

1048576 278 5,216

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 3,497 216

16384 2,790 511

65536 1,301 767

1048576 150 1,340

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 41674 1,702

16384 36783 5,409

65536 17124 9,498

1048576 1103 9,609

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 23647 963

16384 23377 3,358

65536 15850 9,213

1048576 1103 9,609

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 22142 930

16384 19392 2,828

65536 11974 6,561

1048576 1103 9,599

©2016, Palo Alto Networks, Inc. [! ]8

Page 10: Palo alto networks performance

App-ID, All threats

SSL Inbound Inspection, App-ID

SSL Forward Proxy, App-ID

PA-5020

App-ID Override

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 14585 606

16384 9778 1,383

65536 5000 2,707

1048576 417 3,889

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 3345 179

16384 2814 480

65536 1741 1011

1048576 201 1,763

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2866 168

16384 2159 358

65536 897 638

1048576 97 878

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 27294 1,114

16384 27436 3,988

65536 10524 5,926

1048576 663 5,916

©2016, Palo Alto Networks, Inc. [! ]9

Page 11: Palo alto networks performance

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Inspection, App-ID

SSL Forward Proxy, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 21,438 875

16384 18,120 2,634

65536 10,255 5,775

1048576 649 5,789

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 20,846 851

16384 18,279 2,657

65536 10,542 5,935

1048576 663 5,916

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 13,949 569

16384 9,210 1,372

65536 4,646 2,625

1048576 427 3,826

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 3,279 182

16384 2,761 481

65536 1,720 1,028

1048576 198 1,814

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,815 168

16384 2,103 358

65536 1,065 650

1048576 95 898

©2016, Palo Alto Networks, Inc. [! ]10

Page 12: Palo alto networks performance

PA-4060

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Decryption, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 30,790 784

16384 30,429 2,628

65536 16,788 5,948

1048576 1,130 9,373

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 15,277 401

16384 14,602 1,351

65536 14,463 5,358

1048576 1,130 9,350

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 14,237 389

16384 11,161 1,152

65536 6,115 2,632

1048576 624 4,304

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 8,834 248

16384 5,251 482

65536 2,449 947

1048576 213 1,411

©2016, Palo Alto Networks, Inc. [! ]11

Page 13: Palo alto networks performance

SSL Forward Proxy, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,983 100

16384 1,643 261

65536 1,024 552

1048576 124 948

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,612 93

16384 1,228 197

65536 626 357

1048576 59 518

©2016, Palo Alto Networks, Inc. [! ]12

Page 14: Palo alto networks performance

PA-4050

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Decryption, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 30,790 786

16384 30,429 2,627

65536 16,788 4,934

1048576 1,130 5,776

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 15,277 390

16384 14,602 1,299

65536 14,463 5,177

1048576 1,130 5,515

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 14,237 388

16384 11,161 1,148

65536 6,115 2,605

1048576 624 4,269

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 8,834 249

16384 5,251 534

65536 2,449 1,019

1048576 213 1,414

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,983 100

16384 1,643 261

65536 1,024 552

©2016, Palo Alto Networks, Inc. [! ]13

Page 15: Palo alto networks performance

SSL Forward Proxy, App-ID

1048576 124 945

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,612 94

16384 1,228 197

65536 626 357

1048576 59 519

©2016, Palo Alto Networks, Inc. [! ]14

Page 16: Palo alto networks performance

PA-4020

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Decryption, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 30,790 605

16384 30,429 2,137

65536 16,788 4,861

1048576 1,130 5,776

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 15,277 419

16384 14,602 1,414

65536 14,463 4,527

1048576 1,130 5,511

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 14,237 435

16384 11,161 1,071

65536 6,115 2,628

1048576 624 4,276

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 8,834 265

16384 5,251 550

65536 2,449 1,029

1048576 213 1,413

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,983 104

16384 1,643 272

65536 1,024 567

©2016, Palo Alto Networks, Inc. [! ]15

Page 17: Palo alto networks performance

SSL Forward Proxy, App-ID

1048576 124 948

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,612 94

16384 1,228 204

65536 626 356

1048576 59 519

©2016, Palo Alto Networks, Inc. [! ]16

Page 18: Palo alto networks performance

PA-3050

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Decryption, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 15,259 578

16384 15,276 2,029

65536 9,137 5,022

1048576 577 5,022

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 10,260 427

16384 10,248 1,501

65536 9,139 5,024

1048576 577 5,021

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 9,608 401

16384 8,670 1,269

65536 6,276 3,505

1048576 577 5,021

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4,006 170

16384 1,567 224

65536 1,567 867

1048576 233 2,060

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,240 67

16384 1,069 182

©2016, Palo Alto Networks, Inc. [! ]17

Page 19: Palo alto networks performance

SSL Forward Proxy, App-ID

65536 698 412

1048576 90 806

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,045 62

16384 804 136

65536 419 255

1048576 40 380

©2016, Palo Alto Networks, Inc. [! ]18

Page 20: Palo alto networks performance

PA-3020

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Inspection, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 8,218 347

16384 8,591 1,218

65536 4,550 2,501

1048576 287 2,501

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 8,591 347

16384 8,591 1,218

65536 4,550 2,501

1048576 287 2,501

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 8,591 347

16384 8,590 1,218

65536 4,550 2,501

1048576 287 2,501

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4,331 172

16384 1,567 224

65536 1,568 863

1048576 232 1,876

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,252 67

16384 1,073 173

65536 711 407

©2016, Palo Alto Networks, Inc. [! ]19

Page 21: Palo alto networks performance

SSL Forward Proxy, App-ID

PA-2050

App-ID Override

App-ID

App-ID, All threats (DSRI)

1048576 89 813

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,423 62

16384 815 135

65536 424 255

1048576 40 379

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 7,063 320

16384 6,992 1,110

65536 3,131 1,707

1048576 204 1,764

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,930 97

16384 1,931 339

65536 1,920 1,307

1048576 203 1,771

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,972 88

16384 1,728 258

65536 1,185 611

1048576 160 1,108

©2016, Palo Alto Networks, Inc. [! ]20

Page 22: Palo alto networks performance

App-ID, All threats

SSL Inbound Decryption, App-ID

SSL Forward Proxy, App-ID

PA-2020

App-ID Override

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,276 58

16384 803 124

65536 395 228

1048576 34 307

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 319 18

16384 265 44

65536 163 97

1048576 19 174

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 263 16

16384 197 34

65536 100 60

1048576 9 86

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 4,195 171

16384 4,206 601

65536 1,721 949

1048576 109 951

©2016, Palo Alto Networks, Inc. [! ]21

Page 23: Palo alto networks performance

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Inspection, App-ID

SSL Forward Proxy, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,097 97

16384 2,097 340

65536 1,721 946

1048576 109 951

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,928 88

16384 1,646 258

65536 1,058 610

1048576 106 947

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,306 58

16384 820 124

65536 391 225

1048576 33 307

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 321 18

16384 269 44

65536 167 96

1048576 19 174

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 267 16

16384 199 34

65536 100 61

1048576 9 86

©2016, Palo Alto Networks, Inc. [! ]22

Page 24: Palo alto networks performance

PA-500

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Decryption, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,125 87

16384 2,125 304

65536 1,724 949

1048576 109 951

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,125 87

16384 2,125 304

65536 1,724 949

1048576 109 951

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,115 87

16384 2,103 304

65536 1,718 904

1048576 109 951

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 1,091 40

16384 632 89

65536 246 136

1048576 19 165

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 398 21

16384 341 53

65536 214 121

©2016, Palo Alto Networks, Inc. [! ]23

Page 25: Palo alto networks performance

SSL Forward Proxy, App-ID

1048576 26 227

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 371 19

16384 376 41

65536 131 77

1048576 12 115

©2016, Palo Alto Networks, Inc. [! ]24

Page 26: Palo alto networks performance

PA-200

App-ID Override

App-ID

App-ID, All threats (DSRI)

App-ID, All threats

SSL Inbound Decryption, App-ID

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,123 86

16384 2,123 303

65536 2,123 1,169

1048576 179 1,563

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,123 84

16384 1,884 259

65536 1,252 678

1048576 166 1,457

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 2,095 81

16384 1,801 247

65536 1,179 637

1048576 154 1,339

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 833 33

16384 398 57

65536 156 85

1048576 12 103

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 240 13

16384 202 33

65536 128 75

©2016, Palo Alto Networks, Inc. [! ]25

Page 27: Palo alto networks performance

SSL Forward Proxy, App-ID

Revision History

1048576 16 143

Transac0onSize(Bytes)

Transac0onspersecond Bandwidth(Mbps)

4096 200 12

16384 153 27

65536 81 49

1048576 8 74

Date Revision Comment

Feb, 2014

Aug, 2014

Jan, 2016

A

B

C

First release of this document. Added 5050, 5020, 3020, 2020 platforms. Removed the fields Bandwidth In and Bandwidth Out.

Changed Units from Kbps to Mbps, added platforms 4020, 4050, and PA-7050(Single NPC).

©2016, Palo Alto Networks, Inc. [! ]26