队长，听说唱吗？ Youtube

By switzerlandersing On Sep 11, 2025

%F0%9F%98%A1_%E0%A4%B2%_%E0%A4%90%E0%E0%A5%87%E0%A4%96%E0%A4%95%E0%A4%B0_%E0%A4%AF%E0%A4%(480p ...

%F0%9F%98%A1_%E0%A4%B2%_%E0%A4%90%E0%E0%A5%87%E0%A4%96%E0%A4%95%E0%A4%B0_%E0%A4%AF%E0%A4%(480p ... Decrypting encrypted traffic consumes next generation firewall (ngfw) cpu resources and can affect throughput. in general, the tighter the security (the more ssl traffic you decrypt combined with the more stringent your protocol settings), the more ngfw resources decryption consumes. Ssl decryption performance is highly variable, and they do not publish these numbers. palo does have internal documents on ssl performance based on ssl transaction sizes and concurrent connections for specific ciphers.

%E2%99%A5%EF%B8%8F%E2%99%A5%EF%B8%8F%F0%9F%92%AF_._...%C2%A0more Status Video New 2021 - YouTube

%E2%99%A5%EF%B8%8F%E2%99%A5%EF%B8%8F%F0%9F%92%AF_._...%C2%A0more Status Video New 2021 - YouTube In the last month 3 different customers came to me with the same issue when ssl decryption is enabled their https throughput/bandwidth decreases noticeably, one customer said it drops from 60mpbs to 10mbps if ssl decryption is enabled. They do have throughput figures internally that they can share on a case by case basis. having seen them myself, you don't get one figure, you get several pages of tables with different combinations of packet size and cipher strengths and the corresponding throughputs. The combination of the key exchange algorithm and the certificate authentication method affect throughput performance as shown in rsa and ecdsa benchmark tests. the performance cost of pfs trades off against the higher security that pfs achieves, but pfs may not be needed for all types of traffic. Hi, we're implementing ssl inbound inspection, but it seems to have a huge impact on the throughput. however, the dataplane cpu never gets above 6%, management cpu 11%.

%E5%AE%89%E5%8D%93%E6%B5%8B%E8%AF%95 - YouTube

%E5%AE%89%E5%8D%93%E6%B5%8B%E8%AF%95 - YouTube The combination of the key exchange algorithm and the certificate authentication method affect throughput performance as shown in rsa and ecdsa benchmark tests. the performance cost of pfs trades off against the higher security that pfs achieves, but pfs may not be needed for all types of traffic. Hi, we're implementing ssl inbound inspection, but it seems to have a huge impact on the throughput. however, the dataplane cpu never gets above 6%, management cpu 11%. We have tested with ssl decrypt disabled and performance is as expected however as soon ssl decrypt is enabled an significant performance decrease is notice. in the hope to resolve we have tested on the following versions however the issue is present on both versions. We have been testing ssl decryption on a single pc, when decryption policy is applied, internet connection speed is highly affected speedtest shows less than 1mb/s. when decryption policy is disabled, the speed is around 200mb/s. palo alto 3220, version 9.1.0. We recently conducted rigorous performance testing on palo alto networks next generation firewalls to validate throughput, connections per second (cps), and real world application handling under realistic traffic loads. I searched all the documents available for palo 5220 (performance datasheet, panos admin guide etc) but i cannot seem to find anywhere specified the ssl vpn throughput only the maximum number of ssl vpn tunnels.