VM-Series on Google Cloud Platform Performance and Capacity
Expand all | Collapse all
End-of-Life (EoL)
VM-Series on Google Cloud Platform Performance and Capacity
Many factors—such as the shared tenancy
of a public cloud environment, GCP instance size, and the number
of cores—can impact performance. The performance and capacities
listed below have been generated using the indicated GCP instance size,
support for DPDK, and the following test conditions:
The VM-Series is deployed on GCP as a firewall between
clients and servers in the same availability zone and region. Throughput
is measured based on bidirectional traffic sent and received by
the VM-Series.
Firewall throughput and IPsec VPN are measured with App-ID™
and User-ID™ technology features enabled, utilizing 64 KB HTTP transactions.
Threat Prevention throughput is measured with App-ID, User-ID,
IPS, antivirus, and anti-spyware features enabled, utilizing 64
KB HTTP transactions.
IPsec VPN performance is tested between two VM-Series instances
in the same VPC, availability zone, and region. Performance will
depend on GCP instance type and network topology—that is, whether
connecting on-premises hardware to VM-Series on GCP; from VM-Series
in a GCP VPC to a GCP VPN Gateway in another VPC; or VM-Series to
VM-Series between regions.
Connections per second are measured with 1 byte HTTP transactions.
We recommend additional testing within your environment to ensure
your performance and capacity requirements are met. For a complete
listing of all VM-Series features and capacities, please see
compare VM-Series firewalls.
| Model | VM-50 / VM-50 Lite* | VM-100 | VM-300 | VM-500 | VM-700 |
|---|
| GCP instance size tested (recommended) | N/A | n1-standard-4** | n1-standard-4 | n1-standard-8 | n1-standard-16 |
| Firewall throughput (App-ID enabled) | N/A | 2 Gbps | 2.4 Gbps | 3 Gbps | 8 Gbps |
| Threat Prevention throughput | N/A | 0.76 Gbps | 1 Gbps | 2.1 Gbps | 5 Gbps |
| IPsec VPN throughput | N/A | In Progress | In Progress | In Progress | In Progress |
| Licensing options | VM-Series ELA or BYOL | VM-Series ELA or BYOL | VM-Series ELA, PAYGO, or BYOL | VM-Series ELA or BYOL | VM-Series ELA or BYOL |
*The VM-50 and VM-50 Lite are not supported on Google Cloud Platform.
**VM-100 can run on the n1-standard-2, but this size only offers
2 NICs, so n1-standard-4 is recommended.
