{"id":67,"date":"2018-06-11T13:21:05","date_gmt":"2018-06-11T13:21:05","guid":{"rendered":"https:\/\/www.firewallshop.es\/blog\/?p=67"},"modified":"2018-11-14T16:53:37","modified_gmt":"2018-11-14T16:53:37","slug":"mejora-de-prestaciones-en-vpn-con-fortigatefortiwifi","status":"publish","type":"post","link":"https:\/\/www.firewallshop.es\/blog\/2018\/06\/11\/mejora-de-prestaciones-en-vpn-con-fortigatefortiwifi\/","title":{"rendered":"Mejora de prestaciones en VPN con FortiGate\/FortiWiFi"},"content":{"rendered":"<p>El comando \u00abget hardware status\u00bb nos permite ver las caracter\u00edsticas del hardware de nuestro FortiGate\/FortiWifi.<\/p>\n<p>&nbsp;<\/p>\n<p>Ejecutemos este comando en un FortiGate 30E:<\/p>\n<p>&nbsp;<\/p>\n<p>Model name: FortiGate-30E<br \/>\nASIC version: not available<br \/>\nCPU: ARMv7<br \/>\nNumber of CPUs: 2<br \/>\nRAM: 1009 MB<br \/>\nMTD Flash: 128 MB \/dev\/mtd<br \/>\nHard disk: not available<br \/>\nUSB Flash: not available<br \/>\nNetwork Card chipset: Marvell MUX Gigabit Ethernet driver (rev.)<br \/>\nNetwork Card chipset: Marvell NETA Gigabit Ethernet driver 00000010 (rev.)<\/p>\n<p>&nbsp;<\/p>\n<p>Ahora en un FortiGate 50E:<\/p>\n<p>&nbsp;<\/p>\n<p>Model name: FortiGate-50E<br \/>\nASIC version: not available<br \/>\nCPU: ARMv7<br \/>\nNumber of CPUs: 2<br \/>\nRAM: 2024 MB<br \/>\nMTD Flash: 128 MB \/dev\/mtd<br \/>\nHard disk: not available<br \/>\nUSB Flash: not available<br \/>\nNetwork Card chipset: Marvell MUX Gigabit Ethernet driver (rev.)<br \/>\nNetwork Card chipset: Marvell NETA Gigabit Ethernet driver 00000010 (rev.)<\/p>\n<p>&nbsp;<\/p>\n<p>Vemos que ambos equipos son muy similares, diferenci\u00e1ndose en la cantidad de memoria RAM.<\/p>\n<p>&nbsp;<\/p>\n<p>Ejecutemos ahora ese mismo comando en un FortiGate 60E:<\/p>\n<p>&nbsp;<\/p>\n<p>Model name: FortiGate-60E<br \/>\nASIC version: SOC3<br \/>\nASIC SRAM: 64M<br \/>\nCPU: ARMv7<br \/>\nNumber of CPUs: 4<br \/>\nRAM: 1866 MB<br \/>\nEMMC: 3662 MB(MLC) \/dev\/mmcblk0<br \/>\nHard disk: not available<br \/>\nUSB Flash: not available<br \/>\nNetwork Card chipset: FortiASIC NP6LITE Adapter (rev.)<\/p>\n<p>&nbsp;<\/p>\n<p>Aqu\u00ed ya aparecen cosas interesantes. Para empezar el equipo cuenta con un ASIC (Application-Specific Integrated Circuit) SoC (System-on-a-Chip) de tercera generaci\u00f3n, algo con lo que no contaba ni el 30E ni el 50E y que permite mejorar notablemente el rendimiento general del equipo.\u00a0M\u00e1s informaci\u00f3n <a href=\"https:\/\/www.fortinet.com\/corporate\/about-us\/newsroom\/press-releases\/2016\/fortinet-s-next-generation-system-on-a-chip.html\">aqu\u00ed<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p>Por otro lado vemos que tambi\u00e9n cuenta con hardware espec\u00edfico, tambi\u00e9n basado en ASIC, a nivel de networking, concretamente con un procesador NP6Lite que permite descargar a la CPU de ciertas tareas que consumen muchos recursos, proporcionando una mejora en el throughput del sistema. Una de esas tareas es la de encriptado\/desencriptado en t\u00faneles VPN IPSEC. M\u00e1s informaci\u00f3n <a href=\"http:\/\/help.fortinet.com\/fos50hlp\/54\/Content\/FortiOS\/fortigate-hardware-acceleration-52\/NP6.htm\">aqu\u00ed<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p>Llegamos con esto a donde pretend\u00edamos. Si se va a utilizar el sistema para la creaci\u00f3n de VPNs merece la pena invertir un poco m\u00e1s e ir a un sistema como el FortiGate 60E que es el modelo m\u00e1s econ\u00f3mico con hardware espec\u00edficamente dise\u00f1ado para acelerar los procesos relacionados con la encriptaci\u00f3n en t\u00faneles.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>El comando \u00abget hardware status\u00bb nos permite ver las caracter\u00edsticas del hardware de nuestro FortiGate\/FortiWifi. &nbsp; Ejecutemos este comando en un FortiGate 30E: &nbsp; Model name: FortiGate-30E ASIC version: not available CPU: ARMv7 Number of CPUs: 2 RAM: 1009 MB MTD Flash: 128 MB \/dev\/mtd Hard disk: not available USB Flash: not available Network Card [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":77,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"_links":{"self":[{"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/posts\/67"}],"collection":[{"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/comments?post=67"}],"version-history":[{"count":6,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/posts\/67\/revisions"}],"predecessor-version":[{"id":74,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/posts\/67\/revisions\/74"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/media\/77"}],"wp:attachment":[{"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/media?parent=67"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/categories?post=67"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.firewallshop.es\/blog\/wp-json\/wp\/v2\/tags?post=67"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}