Is KVM live migration supported on VM?

[RichardThornton]

Hi,

Does anyone know, I was thinking that licensing may cause issues?

Cheers

Richard

[hshah]

Hi Richard,

Recently PANW have started support for KVM hypervisor, which means PANW-VM-Series firewall can be installed on KVM hypervisor.

Regards,

Hardik Shah

[RichardThornton]

Thanks Hardik, yes 6.1.0 supports KVM but this is a more specific question about live migration of a PAN VM from one KVM host to another.

[hshah]

Hi Richard,

Definitely Licensing will be a issue, because new KVM host doesnt have licenses.

Basically next step is to do license transfer, which only TAC engineers can do.

The only option is to contact TAC for license transfer. They will transfer licenses to new box, old box will have licenses for next 30 days.

Let me know if this helps.

Regards,

Hardik Shah

[RichardThornton]

Hardik,

Can you explain how this KVM VM is licensed, is it the same as ESX:

"The authcode is tied to the Universally Unique ID (UUID). If the firewall is cloned, the UUID will change and the license will become invalid. Moving the firewall from one host to another will not change the UUID (only the CPUID) and therefore the license will remain valid."

If it is then moving it should not require relicensing.

Cheers

Richard

[hshah]

Hi Richard,

That is correct, if UUID remains same than re-licensing is required. Licensing is independant of Hypervisor, hence I can say its same as ESXi.

Regards,

Hardik Shah

[RichardThornton]

Hardik,

You know that KVM uses the same UUID licensing as ESX?

Cheers
Richard

[hshah]

Hi Richard,

I have not tried KVM, but will try and test soon.

Licenses are mapped between serial number and UUID/CPUID. There is no other combination.

Hence I can 90% confirm ESXi and KVM licensing are same.

Regards,

Hardik Shah

[hshah]

Hi Richard,

Let me know if you have any other query.

Regards,

Hardik Shah

[RichardThornton]

Thanks, we have drifted away from the actual question though, is live migration supported on KVM?

[hshah]

Hi Richard,

Is it something like "vmotion" in ESXi? If yes, it might work but may not be supported because vmotion is not supported.

Regards,

Hardik Shah