R82 - ElasticXL on OpenServers & Virtual Servers

[David_Robinson]

Hi All,

Will ElasticXL support Openservers and KVM virtual machines?

Also, will there be an upgrade path from existing ClusterXL to ElasticXL?

Thanks

Dave

[G_W_Albrecht]

Q1: No, only CP appliances are supported, no mix and match as in Maestro

Q2: This is a different solution - you can decide to use SecureXL or ElasticXL including Maestro features

[David_Robinson]

Q1, so ElesticXL will only ever be supported on physical checkpoint appliances?

It will be a nightmare for testing in labs, etc, if that's the case, especially if it won't support virtual labs i.e KVM

[G_W_Albrecht]

At least upon release this will be a limitation ! No nightmare, it will just not work 😉

As with Maestro or VSX you would need a demo appliance for Lab. We even got temporary additional HW for our Maestro Lab deployment from CP local office for customer presentation...

[the_rock]

Check out this workaround @ShaiF provided in my post. Its NOT officially supported, but it does work.

Andy

Solved: Re: R82 elasticXL lab - Check Point CheckMates

[PhoneBoy]

At the time of release of R82, only physical Check Point appliances will support ElasticXL.
I believe there are plans to release a conversion (from ClusterXL) sometime after that.

As for support in VM and/or on Open Servers, at least not initially.
In terms of it being made to work on VM/Open Servers, it seems possible (albeit without official support) based on several CheckMates threads.
Partners do have access to an ElasticXL blueprint in DemoPoint where this functionality can be demonstrated.

[ShaiF · Accepted solution]

Hi,

1. Open servers and vms- there's an option to work with VMs and open servers using R82 for labs testing, demo etc... not for production.

Just need to make sure we connect eth0 to mgmt network and eth1 to Sync network. For VM it might be you will need to adjust some security settings on the vSwitches if gateways are not auto discovered. Official support is on roadmap and will be released later on with JHF or R82.10

2. Migration tool from Cluster XL to ElasticXL and clusterXL vsx to ElasticXL VSNext - Tool will be available close to R82 GA release.

Regards,

Shai

[PhoneBoy]

Thanks for the clarification @ShaiF 

[Don_Paterson]

Hi @ShaiF 

Maybe you can help me to understand for certain, if:

1. Traditional VSX R82 is supported on VMs (as per the Gaia HCL and the R82 RN)?

2. if this is a change from VSX in older versions (e.g. R81.20), which were not being supported on VMs (for live/production)?

That is how I understood it and see it now.

From https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RN/Content/Topics-RN/Supported-Env... 

VSNext and Traditional VSX

This table shows the support for VSNext and Traditional VSX

 in R82:

Platforms	VSNext (1)	Traditional VSX
ElasticXL Cluster (2)	Yes (3)	No
Security Group - Maestro	Yes (4)	Yes (5)
Security Group - Scalable Chassis	No	Yes (6)
Open Servers	No	Yes (6)
Virtual Machines	No	Yes (6)

6. The Gaia Operating System must be after a clean install, or restored to factory defaults.

   In SmartConsole, you configure a VSX Gateway object and the required Virtual System / Virtual Switch objects.

Thanks,

Don