Asic Offloading Question

[heyyo]

I have assumed that throughput will always be better when set auto-asic-offload is set to disable

However, this is not the case when we disabled it. Download time per second is 3-4 times slower when I disabled it.

Any reasons why this happens?

[smaruvala]

Hi,

- Can you check the session and confirm if the ASIC offload is occurring?

- You can set the filters and check the session if the session is offloaded.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-filters-to-clear-sessions-on-a-Forti...

- Check the "npu info" section as mentioned in the below document.

https://docs.fortinet.com/document/fortigate/7.4.1/hardware-acceleration/30072/checking-that-traffic...

Regards,

Shiva

[boazbo]

The option decides if the traffic is hardware-offloaded. Offload is enabled by default, and there is no reason to disable it except bugs. If you truly have higher throughput with offload disabled, open a TAC case on the support site. The sane expectation is the reverse - the FortiGate is expected to be able to have higher total throughput with offloaded traffic than with non-offloaded one.

[AEK]

Hello

auto-asic-offload enable: means special dedicated ASIC helps your CPU/kernel to do the job.

auto-asic-offload disable: CPU/kernel to do the job on his own

ASIC does it faster, So your assumption is wrong.