FortiController-5902D fast path architecture
The FortiController-5902D NP6 network processors and integrated switch fabric (ISF) provide hardware acceleration by offloading load balancing from the primary FortiController-5902D CPU. Network processors are especially useful for accelerating load balancing of TCP and UDP sessions.
The first packet of every new session is received by the primary FortiController-5902D and the primary FortiController-5902D uses its load balancing schedule to select the worker that will process the new session. This information is passed back to an NP6 network processor and all subsequent packets of the same sessions are offloaded to an NP6 network processor which sends the packet directly to a subordinate unit. Load balancing is effectively offloaded from the primary unit to the NP6 network processors resulting in a faster and more stable active-active cluster.
Traffic accepted by the FortiController-5902D F1 to F4 interfaces is that is processed by the primary FortiController-5902D is also be offloaded to the NP6 processors.
Individual FortiController-5902D interfaces are not mapped to NP6 processors. Instead an Aggregator connects the all fabric interfaces to the ISF and no special mapping is required for fastpath offloading.
NP6 content clustering mode interface mapping
FortiController-5902Ds run in content clustering mode and load balance sessions to FortiGate 5001D workers. Use the following command to enable content clustering:
config system elbc
set mode content-cluster
set inter-chassis-support enable
end
You can use the following get command to display the content clustering FortiController-5902D NP6 configuration. The output shows that all ports are mapped to all NP6 processors. You can also use the diagnose npu np6 port-list command to display this information.
get hardware npu np6 port-list
Chip XAUI Ports Max Cross-chip
Speed offloading
------ ---- ---------- ------ ----------
all 0-3 f1 40000M Yes
all 0-3 f2 40000M Yes
all 0-3 f3 40000M Yes
all 0-3 f4 40000M Yes
all 0-3 np6_0_4 10000M Yes
all 0-3 np6_0_5 10000M Yes
all 0-3 elbc-ctrl/1-2 40000M Yes
all 0-3 elbc-ctrl/3 40000M Yes
all 0-3 elbc-ctrl/4 40000M Yes
all 0-3 elbc-ctrl/5 40000M Yes
all 0-3 elbc-ctrl/6 40000M Yes
all 0-3 elbc-ctrl/7 40000M Yes
all 0-3 elbc-ctrl/8 40000M Yes
all 0-3 elbc-ctrl/9 40000M Yes
all 0-3 elbc-ctrl/10 40000M Yes
all 0-3 elbc-ctrl/11 40000M Yes
all 0-3 elbc-ctrl/12 40000M Yes
all 0-3 elbc-ctrl/13 40000M Yes
all 0-3 elbc-ctrl/14 40000M Yes
------ ---- ---------- ------ ----------
NP6 default interface mapping
You can use the following command to display the default FortiController-5902D NP6 configuration.
diagnose npu np6 port-list
Chip XAUI Ports Max Cross-chip
Speed offloading
------ ---- ---------- ------ ----------
all 0-3 f1 40000M Yes
all 0-3 f2 40000M Yes
all 0-3 f3 40000M Yes
all 0-3 f4 40000M Yes
all 0-3 np6_0_4 10000M Yes
all 0-3 np6_0_5 10000M Yes
all 0-3 fabric1/2 40000M Yes
all 0-3 fabric3 40000M Yes
all 0-3 fabric4 40000M Yes
all 0-3 fabric5 40000M Yes
all 0-3 fabric6 40000M Yes
all 0-3 fabric7 40000M Yes
all 0-3 fabric8 40000M Yes
all 0-3 fabric9 40000M Yes
all 0-3 fabric10 40000M Yes
all 0-3 fabric11 40000M Yes
all 0-3 fabric12 40000M Yes
all 0-3 fabric13 40000M Yes
all 0-3 fabric14 40000M Yes