|
Tunning the FortiGate option 'tcp-window-type' under the 'config firewall profile-protocol-options' could help to get better performance.
The option 'tcp-window-type' has different values that could be assigned as per the network, shown below:
config firewall profile-protocol-options
edit proxy_option_name
config HTTP
set tcp-window-type ?
auto-tuning <----- Allow system to auto-tune TCP window size (default).
system <----- Uses system default TCP window size for this protocol.
static <----- Manually specify TCP window size.
dynamic <----- Vary TCP window size based on available memory and within limits of tcp-window-minimum and tcp-window-maximum.
end
The default value is 'auto-tuning'. The Admin can change it to 'dynamic' where the FortiGate will adjust the value of the TCP window based on the FortiGate available memory and within the set values of tcp-window-minimum and tcp-window-maximum as below:
config firewall profile-protocol-options
edit proxy_option_name
config HTTP
set tcp-window-type dynamic
set tcp-window-minimum 131072 (default value) <-----
set tcp-window-maximum 8388608 (default value) <-----
end
Note:
These two settings are not visible as long as the 'tcp-window-type' option is set to 'auto-tuning'.
The admin can set the profile-protocol-options to include additional ports for the HTTP profile besides port 80, like port 443, as below:
config firewall profile-protocol-options
edit "default"
config http
set ports 80 443
|
