10-1
This page lists the VM-Series performance and capacity requirements on Google Cloud
Platform (GCP).
Many factors—such as the shared tenancy of a public cloud environment, GCP
instance size, and the number of cores—can impact performance. The performance and
capacities listed below have been generated using the indicated GCP instance size,
support for DPDK, and the following test conditions:
The VM-Series is deployed on GCP as a firewall between clients and servers in the
same availability zone and region. Throughput is measured based on bidirectional
traffic sent and received by the VM-Series.
Firewall throughput and IPsec VPN are measured with App-ID™ and User-ID™
technology features enabled, utilizing 64 KB HTTP transactions.
Threat Prevention throughput is measured with App-ID, User-ID, IPS, antivirus,
and anti-spyware features enabled, utilizing 64 KB HTTP transactions.
IPsec VPN performance is tested between two VM-Series instances in the same VPC,
availability zone, and region. Performance will depend on GCP instance type and
network topology—that is, whether connecting on-premises hardware to VM-Series
on GCP; from VM-Series in a GCP VPC to a GCP VPN Gateway in another VPC; or
VM-Series to VM-Series between regions.
We recommend additional testing within your environment to ensure your performance and
capacity requirements are met. For a complete listing of all VM-Series features and
capacities, please see
compare VM-Series firewalls.
| Model | VM-50 / VM-50 Lite* | VM-100 | VM-300 | VM-500 | VM-700 |
|---|
| GCP instance size tested (recommended) | N/A | n1-standard-4** | n1-standard-4 | n1-standard-8 | n1-standard-16 |
| Firewall throughput (App-ID enabled) | N/A | 2.4 Gbps | 4.5 Gbps | 9 Gbps | 18 Gbps |
| Threat Prevention throughput | N/A | 1.2 Gbps | 2 Gbps | 4.3 Gbps | 10 Gbps |
| IPsec VPN throughput*** | N/A | 1.1 Gbps | 1.7 Gbps | 4 Gbps | 6.7 Gbps |
| Licensing options | VM-Series ELA or BYOL | VM-Series ELA or BYOL | VM-Series ELA, PAYGO, or BYOL | VM-Series ELA or BYOL | VM-Series ELA or BYOL |
*The VM-50 and VM-50 Lite are not supported on Google Cloud Platform.
**VM-100 can run on the n1-standard-2, but this size only offers 2 NICs, so n1-standard-4
is recommended.
*** With multiple VPN tunnels to maximize performance - VM-100 with 1 tunnel, VM-300 with
2 tunnels, VM-500 with 6 tunnels, and VM-700 with 12 tunnels.
