PacketMMAP and DPDK Drivers on VM-Series Firewalls

PacketMMAP and DPDK drivers on VM-Series firewall deployments.
The PacketMMAP and Data Plane Development Kit (DPDK) drivers listed in these tables are the VM-Series firewall drivers. The firewalls use their own drivers to communicate with the drivers on the host. You should install host-driver versions that are equal to or later than the driver versions on your VM-Series firewall.
To choose host drivers for SR-IOV:
  • KVM—On your KVM host, install a physical function (PF) driver version that is equal to or later than the virtual function (VF) native driver version listed below.
  • ESXi—Refer to the VMware Compatibility Matrix and install the latest driver for the firmware version (PF=i40e, VF=i40evf).
For more on communication between VF drivers on the VM-Series firewall, and PF drivers on the host (the hypervisor), see PacketMMAP and DPDK Drivers on VM-Series Firewalls in the VM-Series Deployment Guide.

PacketMMAP Driver Versions

VM-Series uses its virtual function (VF) drivers to communicate with the host's physical function (PF) drivers during SR-IOV. For example, i40e is a PF driver, and i40evf is a VF driver.
PAN-OS Version
Driver Filename
Virtual Firewall Native Drivers (Linux Versioning)
Comment
8.1
bnx2x
1.713.36-0
igb
5.2.15
igbvf
2.0.2
9.0
bnx2x
1.713.36-0
i40/i40e
1.3.49
i40evf
1.2.25
igb
5.2.15
igbvf
2.0.2
ixgbe
4.2.0.4.1
ixgbevf
2.14.2
9.0.3-xfr
bnx2x
1.713.36-0
i40e
2.3.2
i40evf
3.2.2
Compatible with i40en host driver.
igb
5.4.0
igbvf
2.4.0
ixgbe
5.1.0
ixgbevf
4.1.0
9.1.0
bnx2x
1.713.36-0
i40e
2.3.2
i40evf
3.2.2
Compatible with i40en host driver.
igb
5.4.0
igbvf
2.4.0
ixgbe
5.1.0
The minimum version for multiple queues is 4.2.5
ixgbevf
4.1.0
10.0
bnx2x
1.713.36-0
i40e
2.3.2
i40evf
3.2.2
Compatible with i40en host driver.
igb
5.4.0
igbvf
2.4.0
ixgbe
5.1.0
The minimum version for multiple queues is 4.2.5
ixgbevf
4.1.0
mlnx-en
4.6

DPDK Driver Versions

When the firewall is in DPDK mode, it uses DPDK drivers. Please check the official DPDK release notes for more information.
By default DPDK is enabled on VM-Series firewalls on KVM if one of the following NIC drivers is used:
  • Virtual Driver: virtio and VMXNET3
  • NIC Drivers: ixgbe, ixgbevf, i40e, i40evf, and mlnx-en
Find the SR-IOV version from the DPDK website.
See VM-Series for KVM for PAN-OS versions that support DPDK, DPDK with SR-IOV, or DPDK with Virtio.
PAN-OS Version
DPDK Version
Comment
8.1
16.07
9.0
16.07
9.0 XFR
18.11
9.1
18.11
10.0
18.11.2

Recommended For You