Network Interfaces—Network Interface Cards
and Software Bridges
The VM-Series on KVM supports a total of
25 interfaces— 1 management interface and a maximum of 24 network
interfaces for data traffic.
VM-Series deployed on KVM supports
software-based virtual switches such as the Linux bridge or the
Open vSwitch bridge, and direct connectivity to PCI passthrough
or an SR-IOV capable adapter.
If you plan to establish connectivity
using PCI-passthrough or SR-IOV, you cannot configure a vSwitch
on the physical port used for SR-IOV or PCI-passthrough. To communicate
with the host and other virtual machines on the network, the VM-Series
firewall must have exclusive access to the physical port and associated
virtual functions (VFs) on that interface.
Linux bridge and OVS, the e1000 and virtio drivers are supported;
the default driver rtl8139 is not supported.
Open vSwitch version support:
LTS: OVS 1.9.3 and OVS 2.3.1
Ubuntu 16.04 LTS: OVS 2.5.0
Ubuntu 16.04 LTS with OVS-DPDK: OVS 2.5.1
CentOS/RHEL 7.2: OVS 2.5.0
For PCI passthrough/SR-IOV support, the VM-Series firewall
has been tested for the following network cards:
82576 based 1G NIC: SR-IOV support on all supported Linux distributions;
Intel 82599 based 10G NIC: SR-IOV support on all supported
Linux distributions; PCI-passthrough support
Broadcom 57112 and 578xx based 10G NIC: SR-IOV support on
all supported Linux distributions; No PCI-passthrough support.
Drivers: igb; ixgbe; bnx2x
Drivers: igbvf; ixgbevf; bnx2x
interfaces assigned to the VM-Series firewall, must be configured
as Layer 3 interfaces or as HA interfaces.
Data Plane Development Kit (DPDK) Support
DPDK is enabled by default on VM-Series
firewalls on KVM if one of the following NIC drivers is used: