Optimizing FortiGate-VMX performance
FortiGate-VMX takes advantage of VMware NSX Distributed Virtual Filtering (DvFilter) and FortiOS-optimized Softirq technology to distribute processing across multiple guest CPU cores.
As the FortiGate-VM instance processes traffic from multiple clients, DvFilter takes advantage of multithreading to distribute firewall processing to multiple CPU cores. The same CPU core processes all of the firewall traffic from the same client. As more clients send traffic to the FortiGate-VMX instance, their traffic is distributed to more CPU cores.
In addition, FortiOS-optimized Softirg distributes UTM/NGFW processing to CPU cores with available CPU resources. So if a CPU is busy processing a client's firewall traffic, Softirg could send that client's UTM/NGFW processing to a different, less busy, CPU core. The result is processing is evenly distributed among all of the guest CPU cores available to the FortiGate-VMX instance.
FortiGate-VMX DvFilter support