Higher Performance for VM-Series on Azure using Azure Accelerated Networking
VM-Series 9.0 firewalls deployed on D/DSv2 and D/DSv3
class of Azure VMs include support for Accelerated Networking (SR-IOV),
which you can deploy as an active/passive HA pair or in a scale-out
deployment with Azure load balancers.
accelerated networking is not supported on the management interface.
can enable accelerated networking for an existing firewall after
upgrading it to PAN-OS 9.0 or deploy new instances of the firewall
using the PAN-OS 9.0 solution template.
select the DSv2 and DSv3 class of Azure VMs to deploy a new instance
of the VM-Series firewall using the latest image (from the Azure portal),
accelerated networking is automatically enabled on the dataplane interfaces
of the firewall.
To verify that your firewall is enabled for
accelerated networking, select the firewall, and on
When you upgrade an existing VM-Series firewall to PAN-OS
9.0, to enable accelerated networking, you must stop the firewall
and use the Azure CLI to enable
it. If your firewalls belong to an availability set, you must stop/deallocate
all instanced within the availability set before enabling Accelerated
Networking on any of the NICs. On a VM-Series firewall that is not
part of an availability set or VMSS, you must stop/deallocate the
individual instance only.