If I may add one thought to this, Chokepoint have recently announced a virtual version of their 'blade' product which uses the VMSafe API to enable more efficient inspection of traffic travelling between virtual machines and the outside world.
http://www.networkworld.com/news/2010/090110-check-point-vmware-security.html?hpg1=bn Dunno what the possibilty of such an approach is with pfSense. Given the innards of VMWare is linux based, the ABI is likely to be interesting for other operating systems to interface against. Greg ________________________________________ From: Chris Buechler [cbuech...@gmail.com] Sent: 07 October 2010 15:32 To: discussion@pfsense.com Subject: Re: [pfSense-discussion] pfSense router/firewall in a Vmware ESXi guest for other guests On Thu, Oct 7, 2010 at 3:43 PM, Eugen Leitl <eu...@leitl.org> wrote: > On Sat, Oct 02, 2010 at 03:53:54PM -0400, Chris Buechler wrote: > >> That's not the normal experience from what I've seen, sounds specific >> to something in particular you're doing. I believe every environment >> I've seen that routes between VLANs within ESX handles the VLANs >> entirely at the ESX level, with one vswitch per VLAN and the firewall >> connected to the individual vswitches, maybe that's the difference. >> >> Running inside of VMware isn't nearly as fast as running on equivalent >> bare metal, but most of the time you don't need that kind of >> performance, 300 Mbps is easily achievable with e1000 NICs and >> moderately new (anything with VT) server hardware. I've been on dozens > > Chris, how much memory do you recommend for a pfSense ESXi instance, > which handles 4 guests (one IP address each), 100 MBit/s switched > setup? Do I need 1+ GByte, or can I risk allocating just 512 > MBytes to the guest? > "It depends". Virtual sizing no diff from physical. Depends on simultaneous connections, what packages and configurations they use, etc. I use 128 MB RAM and 2 GB disks on most of my test and dev boxes, they're mostly pretty basic though. --------------------------------------------------------------------- To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org --------------------------------------------------------------------- To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
