Memory is used by distributed firewall internal data structures, and can be configured for CPU, RAM and connections per second.
Each ESXi host is configured with the following threshold parameters for DFW resource utilization:
The memory is used by distributed firewall internal data structures, which include filters, rules, containers, connection states, discovered IPs, and drop flows. These parameters can be manipulated using the following API call:
PUT /api/4.0/firewall/stats/thresholds. See the NSX API Guide for more information.