Enable SR-IOV on ESXi
Single root I/O virtualization (SR-IOV) allows a single PCIe physical device under a single root port to appear to be multiple separate physical devices to the hypervisor or guest. Enable SR-IOV by enabling virtual function devices on the SR-IOV NIC and the modify the guest settings in vCenter.
SR-IOV on the VM-Series for ESXi requires one of the following Intel NIC drivers.
Complete the following procedure to enable SR-IOV.
- Enable virtual function (VF) devices on the SR-IOV NIC. max_vfs is the maximum number of virtual functions allowed on a physical port. The maximum limit depends on the number of VFs supported for your ESXi hosts, your adaptors, and your server configuration. Consult your driver documentation.
- Log in to the ESXi host CLI.
- Use the following command to specify the maximum number of VFs (max_vfs) per port.$esxcli system module parameters set -m<nic_driver>-p “max_vfs=<n>”If you have a multi-port NIC or multiple NICs using the same driver, you must specify a comma-separated list of max_vfs values. You list the numbers in the order of the NIC ports on the PCI bus, where each number corresponds to the number of VFs enabled on a physical port. For example, for ixgbe, you can specify:$esxcli system module parameters set -m ixgbe -p "max_vfs=8,8,8"
- After the VF devices are enabled, shut down all VMs, including the vCenter Server Appliance, and reboot the ESXi host.
- Modify the guest settings in vCenter.
- Log in to vCenter and select your VM-Series firewall guest machine.
- SelectandManageSettingsVM HardwareEditthe hardware settings.
- SelectVirtual Hardware.
- ChoosePCI Devicefrom theNew devicedrop-down and clickAdd.
- Edit the settings of the added PCI device, select the PCI ID corresponding to an available virtual function device.
- Reboot the ESXi host for your changes to take effect.
Enable SR-IOV on KVM
Enable SR-IOV on KVM Single root I/O virtualization (SR-IOV) allows a single PCIe physical device under a single root port to appear to be multiple ...
VM-Series on ESXi System Requirements
VM-Series on ESXi System Requirements You can create and deploy multiple instances of the VM-Series firewall on an ESXi server. Because each instance of the ...
VM-Series on KVM—Requirements and Prerequisites
VM-Series on KVM— Requirements and Prerequisites VM-Series on KVM System Requirements Options for Attaching the VM-Series on the Network Prerequisites for VM-Series on KVM VM-Series ...
Prepare the Linux Server
Prepare the Linux Server Check the Linux distribution version. For a list of supported versions, see VM-Series on KVM System Requirements . Verify that you ...
Performance Tuning of the VM-Series for ESXi
Performance Tuning of the VM-Series for ESXi The VM-Series firewall for ESXi is a high-performance appliance but may require tuning of the hypervisor to achieve ...
VM-Series on ESXi System Limitations
VM-Series on ESXi System Limitations The VM-Series firewall functionality is very similar to the Palo Alto Networks hardware firewalls, but with the following limitations: Dedicated ...
Install the NIC Driver on ESXi
Install the NIC Driver on ESXi For the best performance, use SR-IOV with Intel 10GB network interfaces which requires the ixgbe 4.4.1 driver to support ...
Enable DPDK on ESXi
Enable DPDK on ESXi Data Plane Development Kit (DPDK) enhances VM-Series performance by increasing network interface card (NIC) packet processing speed. On the VM-Series firewall, ...
Options for Attaching the VM-Series on the Network
Options for Attaching the VM-Series on the Network With a Linux bridge or OVS, data traffic uses the software bridge to connect guests on the ...