On some high-end models, the CPU core number is quite big. For example, the FortiGate 3600E has 88 CPU cores. For this model, single-process URL filter daemons may cause a performance bottleneck for the FortiGuard URL rating.
This feature enhances URL filter daemon performance with two extensions:
- Implementing a URL filter daemon as a multi-process daemon.
- Making CPU affinity configurable for a URL filter daemon. It is now possible to dedicate certain CPUs to run a URL filter daemon.
Other changes include higher scheduling priority for URL filter daemons and cache processing algorithm optimization.
config system global set url-filter-affinity <0xstring> (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx) set url-filter-count <integer,1-10> end
The lowest bitmask is CPU0. If the bitmask is 1, this means the process can run on this CPU core. For example,