A firewall has 8 CPU cores and the correct license. CoreXL is enabled. How could you set kernel
instance #3 to run on processing core #5?
A.
Edit the file fwaffinity.conf and add the line “k3 cpuid 5”
B.
This is not possible CoreXL is best left to manage the Kernel to CPU core mappings. It is only
when a daemon is bound to a dedicated core that CoreXL will ignore that CPU core when
mapping Kernel instances to CPU cores.
C.
fw ctl affinity -s -k 3 5
D.
Run fwaffinity_apply –t 3 -k 5 and then check that the settings have taken affect with the
command fw ctl multik stat.
Explanation:
[Expert@firewall]# fw ctl affinity –help
Invalid parametr: –help
Usage:
Set target (interface or process) affinity:
fw ctl affinity -s { [ … ] | all }
cpuid – The cpu’s number, starting with 0
List affinity (specific target or all):
fw ctl affinity -l [ | [-r] [-a] ] [-v]
-a – All, list also targets without specific affinity.
-r – Reverse, list targets ordered by cpu.
-v – Verbose, print more info.
-q – Quiet, suppress errors.
proc_selection: { -p | -n | -k | -i | -d}
(in case of virtual device, no identifier is needed, current context will be used)
-p – Process ID.
-n – CP daemon name (e.g. fwd).
-k – Kernel instance number.
-i – Interface name.