topic Re: New-old VM models in General Topics

New-old VM models

Tician — Wed, 08 Feb 2017 09:49:28 GMT

Hi All,

I have been updated with new information on "Colossal event" , but some things remain grayed...

Example, I have VM-100 almost five years in production environment and I see that it got muscles right now. So I have several doubts regarding my "old" VM-100...

What going to happend with licensing fee if consider resource increasing?

How to get this "muscles" (supposed upgrade to PAN OS 8...), but not only this? What is minimum profile resources (cpu, mem, disk...etc)?

Re: New-old VM models

FJU-ITCS — Wed, 08 Feb 2017 12:46:01 GMT

Hi Tician,

for the "new" VM-100 you need 6.5GB RAM, 2 Cores and min. 60GB HDD.

The licensing fee will not changed automatical with the Update, for Renewal please ask your Partner/SE

Re: New-old VM models

Retired Member — Wed, 08 Feb 2017 18:59:29 GMT

For the vm-100 running pan-os 8 is 2 cores also the max, more cores wil be added to the (virtual) management plane

This is done to limit the througput.

@Tician

A critical note:

You only get the perfomance win if u use in esxi : Single Root I/O Virtualization (SR-IOV) or PCI Passthrough of I/O enabled

If you use the PA interfaces on a "normal" (d)vswitch the througput is even slower then the vm-100 on panos-7.1

max threat prevention througput 500 Mbps in 7.1 it was 600 Mbps

App-id performance stays the same 1 Gbps

Re: New-old VM models

dlazzaro — Fri, 10 Feb 2017 04:39:47 GMT

Does this mean that PCI passthrough is now possible with ESXi VMware edition? PCI passthrough was only possible with KVM before right?

@Retired Member

Re: New-old VM models

shrikant — Fri, 10 Feb 2017 11:30:08 GMT

Yes , please check link https://live.paloaltonetworks.com/t5/forums/replypage/board-id/members_discuss/message-id/48509

This release adds I/O enhancements through the support for Data Plane Development Kit (DPDK) for the
VM‐Series on KVM, ESXi, and AWS and Large receive offload (LRO) for the VM‐Series firewall on NSX.
Additionally, SR‐IOV is now supported for ESXi.

for more details read more detail on installation

hope this helps

@Tician i think good starting point

Thanks

Re: New-old VM models

dlazzaro — Fri, 10 Feb 2017 19:29:05 GMT

That sounds really great.

-Derek