Upload
zztop2764
View
121
Download
11
Embed Size (px)
Citation preview
!
Performance Analysis Revision C
Jan 2016
Proprietary and Confidential NOTE: This document is confidential in nature and should NOT be distributed outside Palo Alto Networks! However, it is left to individual discretion, and where appropriate and under a Non-Disclosure Agreement can be discussed and provided to partners and customers.
Revision C ©2016, Palo Alto Networks, Inc. www.paloaltonetworks.com
!
Revision X ©2016, Palo Alto Networks, Inc. www.paloaltonetworks.com
Contents
Introduction 3 ...........................................................................................................................................................................................................................................
Test Methodology 3 ..................................................................................................................................................................................................................................
Test Equipment 3 .................................................................................................................................................................................................................................Traffic Profile 3 ....................................................................................................................................................................................................................................Firewall Configuration 3 ..................................................................................................................................................................................................................
Performance Overview 4 .......................................................................................................................................................................................................................
PA-7050 (Single NPC) 4 .............................................................................................................................................................................................................................................................PA-7050 - Fully Loaded (6 NPCs) 5 .............................................................................................................................................................................................................................................................PA-5060 7 .............................................................................................................................................................................................................................................PA-5050 8 ..............................................................................................................................................................................................................................................PA-5020 9 ..............................................................................................................................................................................................................................................PA-4060 11 ...........................................................................................................................................................................................................................................PA-4050 13 ...........................................................................................................................................................................................................................................PA-4020 15 ...........................................................................................................................................................................................................................................PA-3050 17 ..........................................................................................................................................................................................................................................PA-3020 19 ............................................................................................................................................................................................................................................PA-2050 20 .........................................................................................................................................................................................................................................PA-2020 21 ............................................................................................................................................................................................................................................PA-500 23 ..............................................................................................................................................................................................................................................PA-200 25 ............................................................................................................................................................................................................................................
Revision History 26.................................................................................................................................................................................................................................
©2016, Palo Alto Networks, Inc. [! ]2
Introduction This document provides PAN-OS 6.0.0 performance analysis results for the following hardware platforms:
• PA-7050 • PA-5060 • PA-5050 • PA-5020 • PA-4060 • PA-4050 • PA-4020 • PA-3050 • PA-3020 • PA-2050 • PA-2020 • PA-500 • PA-200
The product performance capabilities are measured using HTTP traffic since HTTP is one of the most common genuine applications and the performance results are more realistic for meaningful reference.
This document and its content are dynamic in nature with intention to have it updated on regular basis with new and updated testing methodologies so please make sure you are referring to the most recent document.
Test Methodology
Test Equipment - Hardware: Spirent 3100B Avalanche Commander appliance - Software: version 4.10
Traffic Profile - The content type of HTTP message header is set to “text/html”. - Various transaction sizes (4KB, 16KB, 64KB, 1MB) are used for both HTTP and SSL throughput testing. - RSA keys with 1024 bit key length are used for SSL performance tests.
Firewall Configuration - Palo Alto Networks firewall interfaces are configured in vwire mode - Logging is enabled at session end in all tests
©2016, Palo Alto Networks, Inc. [! ]3
Performance Overview The following tables list performance results from tests running various transaction sizes and with different firewall configurations.
PA-7050 (Single NPC) App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Inspection, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 694776 2,798
16384 691572 9,817
65536 215100 19,774
1048576 13566 19,677
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 682770 2,798
16384 557874 9,814
65536 214908 19,773
1048576 13566 19,677
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 686460 2,799
16384 562488 9,814
65536 215064 19,770
1048576 13560 19,682
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 462618 2,797
16384 260472 6,535
65536 103722 8,968
1048576 6348 9,224
©2016, Palo Alto Networks, Inc. [! ]4
SSL Forward Proxy, App-ID
PA-7050 - Fully Loaded (6 NPCs) Note: The performance results shown below for the PA-7050 - fully loaded chassis are the Single NPC numbers (shown above) multiplied by 6. Performance testing for up to 3 NPCs has been completed and linear scalability for the pA-7050 has been tested and confirmed. A 3rd party performance validation document performed by Network Test also validates the linear scaling ability of the PA-7050.This document is available on the intranet per the following link: https://intranet.paloaltonetworks.com/docs/DOC-11833
App-ID Override
App-ID
App-ID, All threats (DSRI)
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 94704 790
16384 82818 2,083
65536 29904 2,643
1048576 4824 5,319
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 81696 572
16384 65778 1,374
65536 29886 2,316
1048576 3330 4,988
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4168656 16,788
16384 4149432 58,902
65536 1290600 118,644
1048576 81396 118,062
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4096620 16,788
16384 3347244 58,884
65536 1289448 118,638
1048576 81396 118,062
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4118760 16,794
©2016, Palo Alto Networks, Inc. [! ]5
App-ID, All threats
SSL Inbound Inspection, App-ID
SSL Forward Proxy, App-ID
16384 3374928 58,884
65536 1290384 118,620
1048576 81360 118,092
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2775708 16,782
16384 1562832 39,210
65536 622332 53,808
1048576 38088 55,344
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 568224 4,740
16384 496908 12,498
65536 179424 15,858
1048576 28944 31,914
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 490176 3,432
16384 394668 8,244
65536 179316 13,896
1048576 19980 29,928
©2016, Palo Alto Networks, Inc. [! ]6
PA-5060
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Inspection, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 65,319 2,238
16384 64,228 7,716
65536 31,252 17,606
1048576 2,140 19,153
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 48,134 1,421
16384 46,434 4,956
65536 31,326 16,798
1048576 2,140 19,157
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 43,324 1,393
16384 34,317 4,329
65536 19,604 10,585
1048576 1,636 13,941
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 27,857 919
16384 18,422 2,217
65536 8,863 4,511
1048576 777 6,677
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4,414 253
16384 3,185 636
65536 2,305 1,594
©2016, Palo Alto Networks, Inc. [! ]7
SSL Forward Proxy, App-ID
PA-5050
App-ID Override
App-ID
App-ID, All threats (DSRI)
1048576 278 5,216
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 3,497 216
16384 2,790 511
65536 1,301 767
1048576 150 1,340
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 41674 1,702
16384 36783 5,409
65536 17124 9,498
1048576 1103 9,609
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 23647 963
16384 23377 3,358
65536 15850 9,213
1048576 1103 9,609
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 22142 930
16384 19392 2,828
65536 11974 6,561
1048576 1103 9,599
©2016, Palo Alto Networks, Inc. [! ]8
App-ID, All threats
SSL Inbound Inspection, App-ID
SSL Forward Proxy, App-ID
PA-5020
App-ID Override
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 14585 606
16384 9778 1,383
65536 5000 2,707
1048576 417 3,889
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 3345 179
16384 2814 480
65536 1741 1011
1048576 201 1,763
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2866 168
16384 2159 358
65536 897 638
1048576 97 878
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 27294 1,114
16384 27436 3,988
65536 10524 5,926
1048576 663 5,916
©2016, Palo Alto Networks, Inc. [! ]9
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Inspection, App-ID
SSL Forward Proxy, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 21,438 875
16384 18,120 2,634
65536 10,255 5,775
1048576 649 5,789
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 20,846 851
16384 18,279 2,657
65536 10,542 5,935
1048576 663 5,916
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 13,949 569
16384 9,210 1,372
65536 4,646 2,625
1048576 427 3,826
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 3,279 182
16384 2,761 481
65536 1,720 1,028
1048576 198 1,814
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,815 168
16384 2,103 358
65536 1,065 650
1048576 95 898
©2016, Palo Alto Networks, Inc. [! ]10
PA-4060
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Decryption, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 30,790 784
16384 30,429 2,628
65536 16,788 5,948
1048576 1,130 9,373
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 15,277 401
16384 14,602 1,351
65536 14,463 5,358
1048576 1,130 9,350
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 14,237 389
16384 11,161 1,152
65536 6,115 2,632
1048576 624 4,304
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 8,834 248
16384 5,251 482
65536 2,449 947
1048576 213 1,411
©2016, Palo Alto Networks, Inc. [! ]11
SSL Forward Proxy, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,983 100
16384 1,643 261
65536 1,024 552
1048576 124 948
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,612 93
16384 1,228 197
65536 626 357
1048576 59 518
©2016, Palo Alto Networks, Inc. [! ]12
PA-4050
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Decryption, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 30,790 786
16384 30,429 2,627
65536 16,788 4,934
1048576 1,130 5,776
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 15,277 390
16384 14,602 1,299
65536 14,463 5,177
1048576 1,130 5,515
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 14,237 388
16384 11,161 1,148
65536 6,115 2,605
1048576 624 4,269
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 8,834 249
16384 5,251 534
65536 2,449 1,019
1048576 213 1,414
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,983 100
16384 1,643 261
65536 1,024 552
©2016, Palo Alto Networks, Inc. [! ]13
SSL Forward Proxy, App-ID
1048576 124 945
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,612 94
16384 1,228 197
65536 626 357
1048576 59 519
©2016, Palo Alto Networks, Inc. [! ]14
PA-4020
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Decryption, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 30,790 605
16384 30,429 2,137
65536 16,788 4,861
1048576 1,130 5,776
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 15,277 419
16384 14,602 1,414
65536 14,463 4,527
1048576 1,130 5,511
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 14,237 435
16384 11,161 1,071
65536 6,115 2,628
1048576 624 4,276
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 8,834 265
16384 5,251 550
65536 2,449 1,029
1048576 213 1,413
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,983 104
16384 1,643 272
65536 1,024 567
©2016, Palo Alto Networks, Inc. [! ]15
SSL Forward Proxy, App-ID
1048576 124 948
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,612 94
16384 1,228 204
65536 626 356
1048576 59 519
©2016, Palo Alto Networks, Inc. [! ]16
PA-3050
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Decryption, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 15,259 578
16384 15,276 2,029
65536 9,137 5,022
1048576 577 5,022
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 10,260 427
16384 10,248 1,501
65536 9,139 5,024
1048576 577 5,021
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 9,608 401
16384 8,670 1,269
65536 6,276 3,505
1048576 577 5,021
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4,006 170
16384 1,567 224
65536 1,567 867
1048576 233 2,060
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,240 67
16384 1,069 182
©2016, Palo Alto Networks, Inc. [! ]17
SSL Forward Proxy, App-ID
65536 698 412
1048576 90 806
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,045 62
16384 804 136
65536 419 255
1048576 40 380
©2016, Palo Alto Networks, Inc. [! ]18
PA-3020
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Inspection, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 8,218 347
16384 8,591 1,218
65536 4,550 2,501
1048576 287 2,501
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 8,591 347
16384 8,591 1,218
65536 4,550 2,501
1048576 287 2,501
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 8,591 347
16384 8,590 1,218
65536 4,550 2,501
1048576 287 2,501
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4,331 172
16384 1,567 224
65536 1,568 863
1048576 232 1,876
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,252 67
16384 1,073 173
65536 711 407
©2016, Palo Alto Networks, Inc. [! ]19
SSL Forward Proxy, App-ID
PA-2050
App-ID Override
App-ID
App-ID, All threats (DSRI)
1048576 89 813
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,423 62
16384 815 135
65536 424 255
1048576 40 379
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 7,063 320
16384 6,992 1,110
65536 3,131 1,707
1048576 204 1,764
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,930 97
16384 1,931 339
65536 1,920 1,307
1048576 203 1,771
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,972 88
16384 1,728 258
65536 1,185 611
1048576 160 1,108
©2016, Palo Alto Networks, Inc. [! ]20
App-ID, All threats
SSL Inbound Decryption, App-ID
SSL Forward Proxy, App-ID
PA-2020
App-ID Override
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,276 58
16384 803 124
65536 395 228
1048576 34 307
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 319 18
16384 265 44
65536 163 97
1048576 19 174
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 263 16
16384 197 34
65536 100 60
1048576 9 86
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 4,195 171
16384 4,206 601
65536 1,721 949
1048576 109 951
©2016, Palo Alto Networks, Inc. [! ]21
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Inspection, App-ID
SSL Forward Proxy, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,097 97
16384 2,097 340
65536 1,721 946
1048576 109 951
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,928 88
16384 1,646 258
65536 1,058 610
1048576 106 947
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,306 58
16384 820 124
65536 391 225
1048576 33 307
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 321 18
16384 269 44
65536 167 96
1048576 19 174
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 267 16
16384 199 34
65536 100 61
1048576 9 86
©2016, Palo Alto Networks, Inc. [! ]22
PA-500
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Decryption, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,125 87
16384 2,125 304
65536 1,724 949
1048576 109 951
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,125 87
16384 2,125 304
65536 1,724 949
1048576 109 951
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,115 87
16384 2,103 304
65536 1,718 904
1048576 109 951
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 1,091 40
16384 632 89
65536 246 136
1048576 19 165
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 398 21
16384 341 53
65536 214 121
©2016, Palo Alto Networks, Inc. [! ]23
SSL Forward Proxy, App-ID
1048576 26 227
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 371 19
16384 376 41
65536 131 77
1048576 12 115
©2016, Palo Alto Networks, Inc. [! ]24
PA-200
App-ID Override
App-ID
App-ID, All threats (DSRI)
App-ID, All threats
SSL Inbound Decryption, App-ID
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,123 86
16384 2,123 303
65536 2,123 1,169
1048576 179 1,563
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,123 84
16384 1,884 259
65536 1,252 678
1048576 166 1,457
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 2,095 81
16384 1,801 247
65536 1,179 637
1048576 154 1,339
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 833 33
16384 398 57
65536 156 85
1048576 12 103
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 240 13
16384 202 33
65536 128 75
©2016, Palo Alto Networks, Inc. [! ]25
SSL Forward Proxy, App-ID
Revision History
1048576 16 143
Transac0onSize(Bytes)
Transac0onspersecond Bandwidth(Mbps)
4096 200 12
16384 153 27
65536 81 49
1048576 8 74
Date Revision Comment
Feb, 2014
Aug, 2014
Jan, 2016
A
B
C
First release of this document. Added 5050, 5020, 3020, 2020 platforms. Removed the fields Bandwidth In and Bandwidth Out.
Changed Units from Kbps to Mbps, added platforms 4020, 4050, and PA-7050(Single NPC).
©2016, Palo Alto Networks, Inc. [! ]26