Customize Dataplane Cores

Use the CLI to customize the core division between the dataplane and the manage-ment plane in the VM-Series Firewall version 10.1 or later.
When a firewall is deployed with Software NGFW Credits, the memory profile and the total number of vCPUs determine how many cores are automatically assigned to the management plane and the dataplane. The default configurations perform well in most cases.
Customize dataplane cores is an optional feature that allows you to customize the number of dataplane cores in two ways:
  • During the initial deployment, use the
    init-cfg.txt
    file bootstrap parameter
    plugin‑op‑commands=set‑dp‑cores:<#-cores>
    . See init-cfg.txt File Components.
  • From a deployed firewall, use the VM-Series CLI command
    request plugins vm_series dp‑cores <#-cores>
    . This procedure is the task below.
Typically you increase the number of dataplane cores (which decreases the number of management plane cores) to improve performance. Dataplane core customization does not require a change to the deployment profile or additional credits because the total number of vCPUs remains the same.
  • Dataplane core customization is supported on firewalls licensed with a Software NGFW credit pool for 10.0.4 and above, and running PAN-OS 10.1 or later.
  • Dataplane core customization is not supported for:
    • NSX-T
    • Intelligent Traffic Offload
Follow these steps to customize the dataplane cores on the VM-Series firewall.
  1. Log in to the VM-Series firewall and view the number of cores.
    admin@PA-VM(active)>
    show plugins vm_series dp-cores
    Device current DP cores: 13 (Total cores: 18)
  2. Change the number of dataplane cores.
    Note that you must have at least one management plane core, and having too few cores also affects performance.
    In this example we increase the dataplanes to 14.
    admin@PA-VM(active)>
    request plugins vm_series dp-cores 14
    Device current DP cores: 14 (Total cores: 18)
  3. Reboot the VM-Series firewall.
    Select
    Device
    Setup
    Operations
    and
    Reboot Device
    .
  4. Use
    show plugins vm_series dp-cores
    to verify that the number of DP cores has changed.

Recommended For You