How does a PA-5000 balance sessions between dataplanes?

How does a PA-5000 balance sessions between dataplanes?

13924
Created On 09/25/18 19:22 PM - Last Modified 07/29/19 17:51 PM


Resolution

The PA-5000 series uses an internal architecture that contains multiple dataplanes for packet processing and traffic handling.  

Both the PA-5020 and PA-5050 contain two dataplanes, while the PA-5060 contains three.  

 

In these devices, dataplane zero, or dp0 for short, functions as the master dataplane and determines which dataplane will be used as the session owner that is responsible for processing and inspection.  

 

Certain types of traffic will always be owned by dp0, which includes ICMP, GRE, EtherIP, IPsec VPN tunnels that are terminating on the device, and predict sessions.  

 

All other types of traffic will be load balanced internally using an algorithm that is weighted using dataplane session load. For these reasons, per-dataplane session utilization can vary, and this behavior is expected.



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClWlCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language