SR-IOV and DPDK Drivers on VM-Series Firewalls

SR-IOV and DPDK drivers on VM-Series firewall deployments.
The Single Root I/O Virtualization (SR-IOV) and Data Plane Development Kit (DPDK) drivers listed in these tables are the VM-Series firewall drivers. The firewalls use their own drivers to communicate with the drivers on the host. You should install host-driver versions that are equal to or later than the driver versions on your VM-Series firewall.

SR-IOV Driver Versions

SR-IOV Access Mode is supported on VM-Series firewalls on KVM only.
PAN-OS Version
Driver Filename
Virtual Firewall Native Drivers
Comment
9.0
i40/i40e
1.3.49
i40evf
1.2.25
ixgbe
4.2.0.4.1
ixgbevf
2.14.2
9.0.3-xfr
i40e
2.3.2
The VM-Series driver works with the ESXi i40e 2.0.7 driver.
i40evf
3.2.2
ixgbe
5.1.0
ixgbevf
4.1.0
9.1.0
i40e
2.3.2
The VM-Series driver works with the ESXi i40e 2.0.7 driver.
i40evf
3.2.2
ixgbe
5.1.0
The minimum version for multiple queues is 4.2.5
ixgbevf
4.1.0

DPDK Driver Versions

When the firewall is in DPDK mode, it uses DPDK drivers. Review the official DPDK release notes for more information.
By default, DPDK is enabled on VM-Series firewalls on KVM if one of the following NIC drivers is used:
  • Virtual Driver: virtio
  • NIC Drivers: ixgbe, ixgbevf, i40e, i40evf
For KVM platforms, DPDK-virtio only works with PAN-OS 9.1 and later.
PAN-OS Version
DPDK Version
Comment
8.1
16.07
9.0
16.07
9.0 XFR
18.11
9.1
18.11

Recommended For You