Support Center > Search Results > SecureKnowledge Details
Manual affinity for 'ted' and 'temain' processes can not be set and is lost after each policy installation
Symptoms
  • Affinity of 'ted' process is not updated by the "tecli set affinity <number_of_instances> <number_of_ted_cpus>" command - output of "tecli show affinity" command shows that 'ted' process is affined to all CPU cores.

  • Affinity of 'temain' process changes to default after each policy installation, although it was configured manually using one of the following commands:

    • tecli set affinity
    • fw ctl affinity -s -n temain
  • Example for 'temain' process:

    • The desired manual configuration - the 'temain' process is affined to CPU cores 3 and 4:

      [Expert@HostName:0]# cat $FWDIR/conf/fwaffinity.conf | grep temain
      n temain 2 3
      
      [Expert@HostName:0]# tecli show affinity
      3,4
      
      [Expert@HostName:0]# fw ctl affinity -l -a -r
      CPU 0:  eth0 eth3 eth4
      CPU 1:
      CPU 2:
      CPU 3:  temain
      CPU 4:  temain
      CPU 5:  fw_2
      CPU 6:  fw_1
      CPU 7:  fw_0
      All:    in.geod in.msd in.acapd usrchkd mpdaemon fwd vpnd rad cprid cpd
      
    • The configuration after policy installation - the 'temain' process is affined to all CPU cores:

      [Expert@HostName:0]# tecli show affinity
      0,1,2,3,4,5,6,7
      
      [Expert@HostName:0]# fw ctl affinity -l -a -r
      CPU 0:
      CPU 1:
      CPU 2:  eth0 eth3
      CPU 3:  eth4
      CPU 4:
      CPU 5:  fw_2
      CPU 6:  fw_1
      CPU 7:  fw_0
      All:    in.geod in.msd in.acapd usrchkd temain mpdaemon fwd vpnd rad cprid cpd
      
    • After restart of Check Point services with "cpstop;cpstart" commands - the 'temain' process is affined to CPU cores 3 and 4.

      [Expert@HostName:0]# tecli show affinity
      3,4
      
      [Expert@HostName:0]# fw ctl affinity -l -a -r
      CPU 0:
      CPU 1:
      CPU 2:  eth0 eth3
      CPU 3:  eth4
              temain
      CPU 4:  temain
      CPU 5:  fw_2
      CPU 6:  fw_1
      CPU 7:  fw_0
      All:    in.geod in.msd in.acapd usrchkd mpdaemon fwd vpnd rad cprid cpd
      
    • After setting the SIM Affinity to automatic mode - interfaces are affined to CPU core 0:

      [Expert@HostName:0]# sim affinity -a
      [Expert@HostName:0]# fw ctl affinity -l -a -r
      CPU 0:  eth0 eth3 eth4
      CPU 1:
      CPU 2:
      CPU 3:  temain
      CPU 4:  temain
      CPU 5:  fw_2
      CPU 6:  fw_1
      CPU 7:  fw_0
      All:    in.geod in.msd in.acapd usrchkd mpdaemon fwd vpnd rad cprid cpd
      
Solution
Note: To view this solution you need to Sign In .