New-old VM models

[Tician]

Hi All,

I have been updated with new information on "Colossal event" , but some things remain grayed...

Example, I have VM-100 almost five years in production environment and I see that it got muscles right now. So I have several doubts regarding my "old" VM-100...

What going to happend with licensing fee if consider resource increasing?

How to get this "muscles" (supposed upgrade to PAN OS 8...), but not only this? What is minimum profile resources (cpu, mem, disk...etc)?

[FJU-ITCS]

Hi Tician,

for the "new" VM-100 you need 6.5GB RAM, 2 Cores and min. 60GB HDD.

The licensing fee will not changed automatical with the Update, for Renewal please ask your Partner/SE

[Gertjan-HFG]

For the vm-100 running pan-os 8 is 2 cores also the max, more cores wil be added to the (virtual) management plane

This is done to limit the througput. 

@Tician

A critical note:

You only get the perfomance win if u use in esxi : Single Root I/O Virtualization (SR-IOV) or PCI Passthrough of I/O enabled 

If you use the PA interfaces on a "normal" (d)vswitch the througput is even slower then the vm-100 on panos-7.1

max threat prevention througput  500 Mbps  in 7.1 it was 600 Mbps

App-id performance stays the same 1 Gbps

[dlazzaro]

Does this mean that PCI passthrough is now possible with ESXi VMware edition? PCI passthrough was only possible with KVM before right?

@Gertjan-HFG

[shrikant]

Yes , please check link  https://live.paloaltonetworks.com/t5/forums/replypage/board-id/members_discuss/message-id/48509

This release adds I/O enhancements through the support for Data Plane Development Kit (DPDK) for the
VM‐Series on KVM, ESXi, and AWS and Large receive offload (LRO) for the VM‐Series firewall on NSX.
Additionally, SR‐IOV is now supported for ESXi.

for more details read more detail on installation

hope this helps

 @Tician i think good starting point

Thanks

[dlazzaro]

That sounds really great.

-Derek