Skip to content

Commit ad8b171

Browse files
Merge pull request #185960 from vhorne/fw-preview
link performance to preview content
2 parents f3485ad + 1afea6f commit ad8b171

File tree

2 files changed

+12
-26
lines changed

2 files changed

+12
-26
lines changed

articles/firewall/firewall-performance.md

Lines changed: 7 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: firewall
55
author: vhorne
66
ms.service: firewall
77
ms.topic: conceptual
8-
ms.date: 01/11/2022
8+
ms.date: 01/24/2022
99
ms.author: victorh
1010
---
1111

@@ -17,16 +17,16 @@ Azure Firewall has two versions: Standard and Premium.
1717

1818
- Azure Firewall Standard
1919

20-
Azure Firewall Standard has been generally available since September 2018. It's cloud native, highly available, with built-in auto scaling firewall-as-a-service. You can centrally govern and log all your traffic flows using a DevOps approach. The service supports both application and network level-filtering rules, and is integrated with the Microsoft Threat Intelligence feed for filtering known malicious IP addresses and domains.
20+
Azure Firewall Standard has been generally available since September 2018. It is cloud native, highly available, with built-in auto scaling firewall-as-a-service. You can centrally govern and log all your traffic flows using a DevOps approach. The service supports both application and network level-filtering rules, and is integrated with the Microsoft Threat Intelligence feed for filtering known malicious IP addresses and domains.
2121
- Azure Firewall Premium
2222

23-
Azure Firewall Premium is a next generation firewall with capabilities that are required for highly sensitive and regulated environments. The features that might affect the performance of the Firewall are TLS inspection and IDPS (Intrusion Detection and Prevention).
23+
Azure Firewall Premium is a next generation firewall. It has capabilities that are required for highly sensitive and regulated environments. The features that might affect the performance of the Firewall are TLS (Transport Layer Security) inspection and IDPS (Intrusion Detection and Prevention).
2424

2525
For more information about Azure Firewall, see [What is Azure Firewall?](overview.md)
2626

2727
## Performance testing
2828

29-
Before deploying Azure Firewall, the performance needs to be tested and evaluated to ensure it meets your expectations. Not only should Azure Firewall handle the current traffic on a network, but it should also be ready for potential traffic growth. It's recommended to evaluate on a test network and not in a production environment. The testing should attempt to replicate the production environment as close as possible. This includes the network topology, and emulating the actual characteristics of the expected traffic through the firewall.
29+
Before deploying Azure Firewall, the performance needs to be tested and evaluated to ensure it meets your expectations. Not only should Azure Firewall handle the current traffic on a network, but it should also be ready for potential traffic growth. It is recommended to evaluate on a test network and not in a production environment. The testing should attempt to replicate the production environment as close as possible. This includes the network topology, and emulating the actual characteristics of the expected traffic through the firewall.
3030

3131
## Performance data
3232

@@ -44,7 +44,7 @@ The following set of performance results demonstrates the maximal Azure Firewall
4444
> [!NOTE]
4545
> IPS (Intrusion Prevention System) takes place when one or more signatures are configured to *Alert and Deny* mode.
4646
47-
Azure Firewall Premium’s new performance boost functionality is now in public preview and provides you with enhancements to the overall firewall performance as shown below:
47+
Azure Firewall Premium’s new performance boost functionality is now in public preview and provides you with the following enhancements to the overall firewall performance:
4848

4949

5050
|Firewall use case |Without performance boost (Gbps) |With performance boost (Gbps) |
@@ -55,29 +55,11 @@ Azure Firewall Premium’s new performance boost functionality is now in public
5555

5656
Performance values are calculated with Azure Firewall at full scale and with Premium performance boost enabled. Actual performance may vary depending on your rule complexity and network configuration. These metrics are updated periodically as performance continuously evolves with each release.
5757

58-
## How to configure Premium performance boost (preview)
58+
## Configure Premium performance boost (preview)
5959

6060
As more applications are moved to the cloud, the network element performance becomes a bottleneck. As a result, Premium performance boost (preview) for Azure Firewall Premium is available to allow more scalability for those deployments.
6161

62-
To enable the Azure Firewall Premium performance boost, run the following Azure PowerShell commands. This feature is applied at the **subscription** level for all Firewalls (VNet Firewalls and SecureHub Firewalls). Currently, Azure Firewall Premium Performance boost is not recommended SecureHub Firewalls. Check back here for the latest updates as we work to change this recommendation. Also, this setting does not have any effect on standard Firewalls.
63-
64-
After you run the Azure PowerShell commands, an update operation needs to be run on the Azure Firewall for the feature to immediately take effect. This update operation can be a rule change (least intrusive), a setting configuration, or a Stop/Start operation. Otherwise, the firewall/s will update with the feature within several days.
65-
66-
Run the following Azure PowerShell to configure the Azure Firewall Premium performance boost:
67-
68-
```azurepowershell
69-
Connect-AzAccount
70-
71-
Select-AzSubscription -Subscription "subscription_id or subscription_name"
72-
73-
Register-AzProviderFeature -FeatureName AFWEnableAccelnet -ProviderNamespace Microsoft.Network
74-
```
75-
76-
Run the following Azure PowerShell to turn it off:
77-
78-
```azurepowershell
79-
Unregister-AzProviderFeature -FeatureName AFWEnableAccelnet -ProviderNamespace Microsoft.Network
80-
```
62+
To enable the Azure Firewall Premium performance boost, see [Azure Firewall preview features](firewall-preview.md#azure-firewall-premium-performance-boost-preview).
8163

8264

8365

articles/firewall/firewall-preview.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,14 +5,18 @@ services: firewall
55
author: vhorne
66
ms.service: firewall
77
ms.topic: conceptual
8-
ms.date: 01/21/2022
8+
ms.date: 01/24/2022
99
ms.author: victorh
1010
---
1111

1212
# Azure Firewall preview features
1313

1414
The following Azure Firewall preview features are available publicly for you to deploy and test. Some of the preview features are available on the Azure portal, and some are only visible using a feature flag.
1515

16+
> [!IMPORTANT]
17+
> These features are currently in PREVIEW.
18+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
19+
1620
## Feature flags
1721

1822
As new features are released to preview, some of them will be behind a feature flag. To enable the functionality in your environment, you must enable the feature flag on your subscription. These features are applied at the subscription level for all firewalls (VNet firewalls and SecureHub firewalls).

0 commit comments

Comments
 (0)