10.2
This page lists the VM-Series performance and capacity requirements on Microsoft
Azure.
Many factors, such as the virtual machine size on Microsoft Azure, maximum
packets per second supported, and the number of cores used, can affect VM-Series
performance. In addition to those noted, the performance and capacities listed in the
following table have been generated under controlled lab conditions, using the
recommended Azure virtual machine size, and configured with Azure Accelerated Networking
using SR-IOV and DPDK under the following test conditions:
Firewall throughput is measured with App-ID™ technology features enabled
utilizing 64 KB HTTP 1.1 transactions
Threat Prevention throughput is measured with App-ID, IPS, antivirus, and
anti-spyware features enabled, utilizing 64K HTTP 1.1 transactions.
IPsec VPN performance is measured with App-ID™ enabled and tested between two
VM-Series deployed within the same region. The performance will depend on the
Azure VM size and network topology, such as whether you are connecting
on-premises hardware to VM-Series on Azure, or from VM-Series on an Azure VNet
to an Azure VPN Gateway in another VNet, or VM-Series to VM-Series between
regions.
| 2 vCPUs (formerly VM-100) | 4 vCPUs (formerly VM-300) | 8 vCPUs (formerly VM-500) | 16 vCPUs (formerly VM-700) | 32 vCPUs |
|---|
| Azure instance size tested (recommended) | D3_v2 | DS3_v2 | D8_ds_v5 | D16_ds_v5 | D32_ds_v5 |
| Firewall throughput (App-ID enabled) | 2 Gbps | 3 Gbps | 9 Gbps | 12 Gbps | 16 Gbps |
| Threat Prevention throughput | 1.2 Gbps | 2.5 Gbps | 4.2 Gbps | 10 Gbps | 13 Gbps |
| IPsec VPN throughput | 1 Gbps | 2 Gbps | 4 Gbps | 8 Gbps | 10 Gbps |
VM-Series capacities specified in the page are not specific to Azure
environments. For example, Azure Network Flow limits will limit your VM-Series
session capacities in Azure. If you need additional capacity or scale, please
refer to
VM-Series deployment options using Azure VM
Scale Sets.
Palo Alto Networks recommends additional testing within your environment to ensure that
your performance and capacity requirements are met. For your scaling and capacity
planning needs, use the
custom PAN-OS metrics published to
Azure Application Insights.
