Higher Performance for VM-Series on Azure using Azure Accelerated
VM-Series 9.0 firewalls deployed on D/DSv2 and D/DSv3
class of Azure VMs include support for Accelerated Networking (SR-IOV),
which you can deploy as an active/passive HA pair or in a scale-out
deploymentwith Azure load balancers.
can enable accelerated networking for an existing firewall after
upgrading it to PAN-OS 9.0 or deploy new instances of the firewall
using the PAN-OS 9.0 solution template.
select the DSv2 and DSv3 class of Azure VMs to deploy a new instance
of the VM-Series firewall using the latest image (from the Azure
portal), accelerated networking is automatically enabled on the
dataplane interfaces of the firewall.
To verify that your
firewall is enabled for accelerated networking, select the firewall,
When you upgrade an existing VM-Series firewall to PAN-OS
9.0, to enable accelerated networking, you must stop the firewall
and use the Azure CLI to enable
it. If your firewalls belong to an availability set, you must stop/deallocate
all instanced within the availability set before enabling Accelerated
Networking on any of the NICs. On a VM-Series firewall that is not
part of an availability set or VMSS, you must stop/deallocate the
individual instance only.