ProxySG & Advanced Secure Gateway

 View Only
  • 1.  Bandwidth Gain

    Posted Apr 29, 2021 07:05 AM
    Hi All,

    On a pair of SG's running in explicit mode using SGOS 6.7.5.10, we are seeing significant bandwidth gain the in the traffic mix and history statistics, indicating caching is effective. The thing is that caching is disabled for all content in the policy, so I can't really explain what we are seeing and wondered if anyone had come across this.

    Regards
    Paul Riddington


  • 2.  RE: Bandwidth Gain

    Broadcom Employee
    Posted May 03, 2021 05:55 PM
    Hi Paul,

    Without knowing much more, a couple thoughts.

    First, what is meant by caching is disabled? "Do Not Cache" will tell the ProxySG not to add a site to cache, but it will not stop ProxySG from pulling from cache. "Bypass cache" will prevent a site from being served from cache.

    The other thought I have is does the end customer have a Cachepulse subscription? I could see a rule where everything is set to "Do Not Cache" but Cachepulse is updating the most common sites, and if there is no "bypass cache" rule in place, nothing to stop the ProxySG from pulling from cache.

    Just throwing that out as a possibility.

    Hope that helps!



  • 3.  RE: Bandwidth Gain

    Posted May 04, 2021 04:45 AM
    Hi Jacob,

    Thanks for your reply.

    We are using "do not cache" in the web content layer which means not caching response content and also deleting any existing cache entries as per The differences between cache(no) and bypass_cache(yes).

    Actually, we discovered this issue had nothing to do with caching anyway. At the weekend, we found that a client application was seemingly making 10's of 1000's of requests to the SG which were all failing authentication. So the proxy service was intercepting them, but going no further because of the failing auth, hence the amount of client side traffic only. We further discovered that that this was an auth loop, so each time a client made the request and failed auth, it just kept trying over and over and over. We added the 2 destinations involved to the auth bypass list, and the problem was solved.

    Regards
    Paul


  • 4.  RE: Bandwidth Gain

    Broadcom Employee
    Posted May 07, 2021 10:45 AM
    Edited by Jacob Miles May 07, 2021 10:45 AM
    Hi Paul,

    That is interesting. I wouldn't of thought of that. I guess that makes sense if all the ProxySG is doing is computing a ratio between client side and server side traffic volume. I'll definitely keep that as something to look at in the future

    Thanks for sharing!


  • 5.  RE: Bandwidth Gain

    Posted May 07, 2021 03:47 PM
    You are welcome, I guess this is what the community is for :)

    Regards
    Paul


  • 6.  RE: Bandwidth Gain

    Posted Jun 08, 2021 01:46 PM

    What does the gain bandwidth product of an opamp tell us?

    My understanding of it is this : It is basically the product of open-loop open-circuit voltage gain in V/V and the frequency at which the gain is measure on the -20dB/decade line . Also this value is identical to the unity gain bandwidth.

    What I don't understand is what insight this value gives to the closed loop feedback operation of the opamp. Does it give some upper limit on speed of the circuit, in loose terms ?( I understand that it must but I can't seem to understand how to derive a transient response relationship in closed loop) Any help is appreciated ( or links to relevant material ).