VM-Series on KVM— Requirements and Prerequisites
- VM-Series on KVM System Requirements
- Options for Attaching the VM-Series on the Network
- Prerequisites for VM-Series on KVM
See VM-Series System Requirements for the minimum hardware requirements for your VM-Series model.
Network Interfaces—Network Interface Cards and Software Bridges
The VM-Series on KVM supports a total of 25 interfaces— 1 management interface and a maximum of 24 network interfaces for data traffic.
VM-Series deployed on KVM supports software-based virtual switches such as the Linux bridge or the Open vSwitch bridge, and direct connectivity to PCI passthrough or an SR-IOV capable adapter.
If you plan to establish connectivity using PCI-passthrough or SR-IOV, you cannot configure a vSwitch on the physical port used for SR-IOV or PCI-passthrough. To communicate with the host and other virtual machines on the network, the VM-Series firewall must have exclusive access to the physical port and associated virtual functions (VFs) on that interface.
Data Plane Development Kit (DPDK) Support
DPDK is enabled by default on VM-Series firewalls on KVM if one of the following NIC drivers is used:
Performance Tuning of the VM-Series for KVM
Performance Tuning of the VM-Series for KVM The VM-Series firewall for KVM is a high-performance appliance but may require tuning of the hypervisor to achieve ...
Prepare the Linux Server
Prepare the Linux Server Check the Linux distribution version. For a list of supported versions, see VM-Series on KVM System Requirements . Verify that you ...
Set Up the VM-Series Firewall on KVM
Set Up the VM-Series Firewall on KVM Kernel-based Virtual Machine (KVM) is an open-source virtualization module for servers running Linux distributions. The VM-Series firewall can ...
VM-Series Firewall Hypervisor Support
VM-Series Firewall Hypervisor Support The following table shows hypervisor version support on the VM-Series firewall. Deployment PAN-OS Version Support Hypervisor Version Support I/O Enhancement Support ...
Provision the VM-Series Firewall on a KVM Host
Provision the VM-Series Firewall on a KVM Host Use the following instructions to provision the KVM host for the VM-Series firewall. Create a new virtual ...
Integrate Open vSwitch with DPDK
Integrate Open vSwitch with DPDK To integrate Open vSwitch (OVS) with DPDK, you must install the required components and then configure OVS. DPDK is enabled ...
Prerequisites for VM-Series on KVM
Prerequisites for VM-Series on KVM Before you install the VM-Series firewall on the Linux server, review the following sections: Prepare the Linux Server Prepare to ...
Supported Deployments on KVM
Supported Deployments on KVM You can deploy a single instance of the VM-Series firewall per Linux host (single tenant) or multiple instances of the VM-Series ...
Edit the VM-Series Firewall Configuration File
Edit the VM-Series Firewall Configuration File Edit the VM-Series firewall XML configuration file to support OVS and DPDK. You can access the XML configuration file ...