SRX Services Gateway
SRX Services Gateway

Firefly Perimeter packet transient latency

‎09-01-2014 08:43 AM

Hi all, 

 

I'm doing tests with Firefly Perimeter version 12.1-x46 and 12.1-x47 and experiencing very high transient latency of packets through the Firefly perimeter. 

 

The lab setup is server 1 <-> ge-0/0/1.0 vSRX ge-0/0/2.0 <-> server 2

 

When pinging between the servers the latency is above 10msec. I know that the firefly will treat the ICMP packages destined for itself with lower priority so I expect high latency there, the high latency I'm experiencing is for packets traversing the firefly perimeter. The virtualistation platform is ESXi 5.1 Update 2. When I connect the two servers on the same vSwitch the ping times drops below 0.1 msec.

 

Does anyone else experience this problem?

 

P.S I get the same results for 12.1-x46 and 12.1-x47. 

 

Regards,

 

Sotiris 

6 REPLIES 6
SRX Services Gateway

Re: Firefly Perimeter packet transient latency

‎09-11-2014 02:20 AM

Hi Sotiris,

 

did you find a solution to this anomaly. We are seeing the same issue during evaluation on the product in our Virtual enviroments (multiple enviroments). We have raised a question with our Juniper account team, but haven’t had any feedback so far.

 

Regards,

Chris 

SRX Services Gateway

Re: Firefly Perimeter packet transient latency

‎09-11-2014 03:08 AM

Hi Chris, 

 

Still investigating with JTAC if I have an update I will let you know.

Out of curiosity what is your virtualisation platform?

 

Regards,

 

Sotiris

SRX Services Gateway

Re: Firefly Perimeter packet transient latency

‎09-11-2014 03:26 AM

Hi Sotiris,

 

The enviroments we have tested in are:

 

Cisco UCS, VMware ESXi 5.5

also

Standalone Dell server, VMware ESXi 5.5

 

Same issues on both

 

I'll provide an update if we get anywhere with our Juniper contacts.

 

 

 

SRX Services Gateway

Re: Firefly Perimeter packet transient latency

‎09-11-2014 03:33 AM

Thanks Chris, 

 

I'm using ESXi 5.1 update 1. It looks like the problem is on the interface driver. 

 

Sotiris

SRX Services Gateway

Re: Firefly Perimeter packet transient latency

‎09-13-2014 08:57 PM

Pls use the vty command "set i386 ft_sleep disable" and have a try, hopefully you can get a big improvement.

 

But be aware that this vty cmd is only for demo but not persistent, it will disappeared once system reboot.

 

This feature is just an optimization to avoid occupy too much hypervisor CPU resource once system with light traffic.

 

Another workaround is just sending a continuous traffic bigger than 100pps(or bigger if no improvement), such as "ping XX -i 0.01", this will keep the flowd thread busy and handle traffic without sleep.

SRX Services Gateway

Re: Firefly Perimeter packet transient latency

‎09-25-2017 03:20 AM

Did you ever find a solution to this problem? I am experiencing exactly the same thing. I know it's a pretty outdated post, but any information would be helpful. 

 

This thing is not only affecting traffic that is routed through vSRX, but also when you try to ping the vSRX itself.