[j-nsp] SRX gui

Ben Dale bdale at comlinx.com.au
Tue Mar 6 06:07:05 EST 2012


Hi David,

> Just curious about your experiences with the SRX J-Web GUI.

Woeful, just like everyone else's.  You've got to wonder whether the monumental failure that the SRX GUI is, is one of the major reasons why the SSG Product line is still available.

> We have been testing the SRX-210 for a couple of years and have noticed that
> the GUI is very slow to load and configure compared to an SSG5.
> We're running the SRX at OS 11.4R1.6; the SSG5 at 6.2.0r5.


I can assure you that J-Web in 11.4 is an order of magnitude faster than it was in the early 10.0 releases!  I hit a doozy of a bug in 10.0r2 where if you configured https management on the box, the traffic FROM the webserver to your browser was rate-limited massively.  Downloading just the 520KB .gif image on the login screen would take nearly 20 seconds!

In Junos 11.2 the EmbedThis web server that runs on the SRX Branch/J-Series systems was upgraded to use "PHP Mode" instead of "CGI-Mode" - this again gave a noticeable performance increase.  

The command:

set system services web-management module-mode

switched on this functionality, but I notice that in 11.4, this command is hidden (and doesn't seem to change the version of the web server according to the HTTP headers), so it may be on by default now.

I just tried this on an SRX210 (original model) and didn't notice much difference, but give it a try and see how you go.

> Is it just the GUI on the SRX 210 that is slow? Does it run faster on the
> bigger hardware?


It's not great on any hardware, but the SRX210 in particular has some serious performance issues with the J-Web - Juniper have now discontinued this model and replaced it with the SRX210-HE, which uses the same beefier insides as the SRX220.  

I have noticed a reasonable performance boost when using the newer model, but it still can't hold a candle to an SSG for rapid policy configuration.

Cheers,

Ben

On 06/03/2012, at 10:58 AM, David Klein wrote:

> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> We've tried it with IE8, IE9, and Firefox. Is there a specific browser or
> applet we need in order for it to run fast?
> 
> 
> 
> If there is something that we need to do in order to make it run faster,
> please let me know.
> 
> 
> 
> Thanks!
> 
> 
> 
> -David Klein
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 




More information about the juniper-nsp mailing list