CloudGuard Network KVM - Mellanox Connect-5 Support

[franctorres]

Hi Cloudmates a costumer have a Gygabyte Server with Mellanox MCX516A-GCAT ConnectX-5 cards.... they told me that Fortinet and PAN have support  to do a PCI passthrough with the KVM virtual enviroment....

Can we have this functionality with Cloudguard Network for KVM?

[Chris_Atkinson]

NVIDIA ConnectX NICs are leveraged in Quantum Lightspeed appliances today.

Cloud applications seems like a logical extension of this and I would encourage you to speak to your local Check Point SE about submitting an RFE / HCL request if this is important to you.

[franctorres]

Hi Chris I understand that CloudGuard don't have support of the PCI-PassThrough? can you confirm me? 

[HeikoAnkenbrand]

Hi @franctorres,

The following drivers (see below) are supported by Check Point and also supported with multi queueing. If necessary, PCI-PassThrough should also work here. In this case, they will probably also have to be listed in the Check Point HW Compatibility List.

Driver	Max Speed (Gbps)	Description	Maximal Number of RX Queues
igb	1	Intel® Network Adapter Driver for PCIe 1 Gigabit Ethernet Network	2-16 (depends on the interface)
ixgbe	10	Intel® Network Adapter Driver for PCIe 10 Gigabit Ethernet Network	16
i40e	40	Intel® Network Adapter Driver for PCIe 40 Gigabit Ethernet Network	64
i40evf	40	Intel® i40e driver for Virtual Function Network Devices	4
mlx5_core	40	Mellanox® ConnectX® mlx5 core driver	60
ena	20	Elastic Network Adapter in Amazon® EC2	Configured automatically
virtio_net	10	VirtIO paravirtualized device driver from KVM®	Configured automatically
vmxnet3	8	VMXNET Generation 3 driver from VMware®	8

[Chris_Atkinson]

We support PCI passthrough only for certified NICs for some this also includes SR-IOV.