|
*La siguiente tabla recomienda el espacio en disco y de RAM requeridos del sistema donde se instalada Firewall Analyzer. El espacio de disco y de RAM dependen del número de dispositivos que enviaran información al Firewall Analyzer, el número de registros recibidos por segundo o por día que deberán ser registrados por el Firewall Analyzer.
| Log Records Rate o Volume |
Tamaño RAM |
Espacio de disco duro requerido
por mes para archivar bitácoras |
| 50/sec o 1.5 GB/día |
512 MB |
30 GB |
| 100/sec o 3 GB/día |
1 GB |
90 GB |
| 300/sec o 9 GB/día |
2 GB |
270 GB |
| 500/sec o 15 GB/día |
2 GB |
450 GB |
| 1000/sec o 30 GB/día |
3 GB |
900 GB |
| 2000/sec o 60 GB/día |
4 GB |
1.8 TB |
Requisitos de CPU
- Se debe dedicar un equipo para procesar más de 200 logs por segundo.
- Se requiere doble procesador para procesar más de 500 logs por segundo.
- Se requiere cuadruple procesador para procesar más de 1000 logs por segundo.
Requisitos de RAM
- Number of firewalls handled by the Firewall Analyzer will increase the requirement of the above RAM values. So it is better to have RAM value higher than the suggested value in case of having more than 5 firewalls.
Instalación separada
- Firewall Analyzer server and MySQL database can be installed in separate machines, in case of higher log rate with low-end CPU machines.
Requerimientos de disco duro para más meses
- The above Hard Disk space requirement projected is for one month. If you need to archive the logs for more number of months, multiply the above requirements with the number of months based on your requirement.
Note: The Log Records Per Second is the total log records received per second by Firewall Analyzer from all the configured devices.
For better performance, we recommend replacing the existing MySQL parameters mentioned in startDB.bat/sh, available under <FirewallAnalyzerInicio>\bin directory, with the following MySQL parameters changes for the corresponding RAM Size. Apart from MySQL parameter changes, you can also tune MySQL table sizes based on RAM availabililty to improve MySQL performance.
| RAM Size |
MySQL Parameters For
Windows Installation |
MySQL Parameters For
Linux Installation |
| 512 MB |
Default configuration as given in startDB.bat |
Default configuration as given in startDB.sh |
| 1 GB |
--innodb_buffer_pool_size=300M
--key-buffer-size=150M
--max_heap_table_size=150M
--tmp_table_size=100M
--table-cache=512 |
--innodb_buffer_pool_size=300M
--key_buffer_size=150M
--max_heap_table_size=150M
--tmp_table_size=100M
--table-cache=512 |
| 2 GB |
--innodb_buffer_pool_size=900M
--key-buffer-size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512 |
--innodb_buffer_pool_size=900M
--key_buffer_size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512 |
| 3 GB |
--innodb_buffer_pool_size=900M
--key-buffer-size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512 |
--innodb_buffer_pool_size=1400M
--key_buffer_size=1000M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512 |
| 4 GB |
--innodb_buffer_pool_size=900M
--key-buffer-size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512 |
--innodb_buffer_pool_size=1800M
--key_buffer_size=1200M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512 |
In addition to MySQL parameter changes, one needs to change the "BATCH_SIZE" used for moving the data from and to report tables. To configure the BATCH_SIZE, follow the below mentioned steps,
1. Login to FWA Web-Client.
2. Type in the following URL, "http://<Name/IP of m/c in which FWA is installed>:8500/fw/dmConfig.do". 8500 is default web-server port.
3. This will show the current "BATCH_SIZE" configured by default.
4. Based on the RAM available in the machine, please configure the parameters and click on "Save Changes" button.
| RAM Size |
Batch Size Recommended |
| 1 GB |
Raw Table = 20000
Hourly Table = 30000 |
| 2 GB |
Raw Table = 30000
Hourly Table = 40000 |
| Above 2 GB |
Raw Table = 50000
Hourly Table = 40000 |
Firewall Analyzer can be installed and run on the following operating systems and versions:
- Windows™ NT/2000/2003/XP/Vista
- Linux - RedHat 8.0/9.0, Mandrake/Mandriva, SuSE, Fedora, CentOS
Note: If Firewall Analyzer is installed in SuSE Linux, then ensure that in the mysql-ds.xml file, present under <FirewallAnalyzer_Inicio>/server/default/deploy you replace localhost mentioned in the following line : <connection-url>jdbc:mysql://localhost:33336/firewall</connection-url> with the corresponding IP Address or DNS resolvable name of the current system where Firewall Analyzer is installed.
- Internet Explorer 5.5 and later
- Netscape 7.0 and later
- Mozilla 1.5 and later
- Firefox 1.0 and later
|
