Higher Performance for VM-Series on Azure using Azure Accelerated Networking (SR-IOV)

VM-Series 9.0 firewalls deployed on D/DSv2 and D/DSv3 class of Azure VMs include support for Accelerated Networking (SR-IOV), which you can deploy as an active/passive HA pair or in a scale-out deploymentwith Azure load balancers.
VM-Series firewalls deployed on D/DSv2 and D/DSv3 class of Azure VMs include support for Accelerated Networking (SR-IOV). Refer to the Azure documentation for instruction on supported VMs and for instructions on enabling accelerated networking.
You can enable accelerated networking for an existing firewall after upgrading it to PAN-OS 9.0 or deploy new instances of the firewall using the PAN-OS 9.0 solution template.
  • When you select the DSv2 and DSv3 class of Azure VMs to deploy a new instance of the VM-Series firewall using the latest image (from the Azure portal), accelerated networking is automatically enabled on the dataplane interfaces of the firewall.
    To verify that your firewall is enabled for accelerated networking, select the firewall, and on
    Settings
    Networking
    and check that
    Accelerated Networking
    is
    Enabled
    .
    accelerated-networking-enabled.png
  • When you upgrade an existing VM-Series firewall to PAN-OS 9.0, to enable accelerated networking, you must stop the firewall and use the Azure CLI to enable it. If your firewalls belong to an availability set, you must stop/deallocate all instanced within the availability set before enabling Accelerated Networking on any of the NICs. On a VM-Series firewall that is not part of an availability set or VMSS, you must stop/deallocate the individual instance only.

Related Documentation