Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.
will there be support for fastpath using the hv_netvsc Hyper-V network driver?
SFVH_HV01_SFOS 18.0.0 EAP3-Refresh1# ethtool -i PortBdriver: hv_netvscversion:firmware-version: N/Aexpansion-rom-version:bus-info:supports-statistics: yessupports-test: nosupports-eeprom-access: nosupports-register-dump: nosupports-priv-flags: no
currently I get the following error.
console> system firewall-acceleration showFirewall Acceleration is Enabled. Fastpath Load Failed.
No,Currently fastpath supports the following NIC drivers: i40e, e1000, e1000e, igb, ixgbe, vmxnet3.
If fastpath is enabled when system has no supported NICs, fastpath load will fail but system will still be fully functional without the performance enhancements provided by fastpath.
can you investigate internally and track this as an issue?
Hyper-V is very popular and fast path should be supported even on Hyper-V platform.
I think this is a system limitation on the side of the snort engine on which FastPath & DPI is implemented. Note that there is not support for KVM, Citrix XenApp, and of course for Hyper-V and Azure too.
Our SFOS installed base ion Hyper-V is around 0.5% of deployments. I understand Hyper-V is popular in some sectors, but our data shows it's not that popular for SFOS deployments.
Hope you can understand that whilst we will look at support for the Hyper-V driver, it won't be high on our engineering priorities in the near future,
Thanks for your feedback though, always valuable.
Put me down for a +1 for hyper-v support.
I understand what you say about current installations but it is a bit 'chicken and egg' - if you don't support fastpath in hyper-v then that is going to put people off deploying it in that environment so the numbers will stay low.
Put me down for Hyper-V driver support, also Gen 2 support would be nice.
Bart van der Horst
Sophos XG v18(.5) / v19 Certified Architecthttps://www.bpaz.nl