Autoscaling Metrics and Configuration Parameters
Configure one or more firewall metrics as autoscaling triggers for non-mesh Prisma
AIRS firewalls. You set the scale-out threshold; the platform auto-computes the scale-in
threshold.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- Prisma AIRS license
- Access to Strata Cloud Manager
|
Configure one or more of the following firewall metrics as autoscaling triggers. You set
the scale-out threshold; the platform auto-computes the scale-in threshold.
| Metrics | Description |
|---|
| CPU Utilization | Dataplane CPU utilization percentage |
| Session Utilization | Session table utilization percentage |
| Session Throughput | Total session throughput in kilobits per second |
| Active Sessions | Total number of active sessions |
| Connections Per Second | New connections established per second |
| Packet Buffer Utilization | Dataplane packet buffer utilization percentage |
| SSL Proxy Utilization | SSL decryption session utilization percentage |
| GlobalProtect Active Tunnels | GlobalProtect gateway active tunnel count |
| GlobalProtect Tunnel Utilization | GlobalProtect gateway tunnel utilization percentage |
By default, above metrics are emitted by each firewall instance to the cloud monitoring
service at the configured Update Interval. Only the metrics you explicitly configure in
Strata Cloud Manager are used to trigger scaling actions.
Configuration Parameters
| Parameter | Description |
|---|
| Min Instances | Minimum number of firewall instances to maintain at all times
(scale-in floor). |
| Max Instances | Maximum number of instances the autoscaler may launch (scale-out
ceiling). |
| Update Interval | How often (in minutes) each firewall publishes metrics to the
cloud monitoring service. |
| Metric Threshold | The scale-out trigger value per metric. The scale-in threshold is
auto-computed by the platform — you do not need to configure
it. |
