Radware DefensePro VA, Руководство по установке и обслуживанию

Страница: 37 / 83

DefensePro VA Installation and Maintenance Guide
DefensePro VA Installation and Configuration
Document ID: RDWR-DPVA_IG2005
37
Optimizing the VM for Best DefensePro VA Performance
The DefensePro VA installation wizard optimizes the VM configuration to achieve the best
performance. If the VM configuration running DefensePro VA was changed after DefensePro VA was
already created by the deployer (such as a change in the number of vCPUs of the VM, or a change in
the number of vCPUs assigned to DefensePro VA) you should optimize the VM running DefensePro
VA as follows:
• Radware recommends pinning the DefensePro VA vCPUs to physical cores/hyperthreads and not
let them be shared with other VMs, and to prevent the hypervisor from moving them. Memory
over-subscription is discouraged.
• In a hyperthreaded environment, it is best to configure an even number of DefensePro engines
and allocate whole physical cores (both hyperthreads on each physical core) for DefensePro VA,
and not mix them with other VMs.
• On a host with multiple CPUs using the NUMA architecture, Radware recommends assigning all
DefensePro VA vCPUs to cores/hyperthreads on the same NUMA node.
You should also be aware of the of PCI slots-to-NUMA nodes mapping on such a host machine.
Use the following Linux command to determine to which PCI slot the NIC is connected to:
cat /sys/class/net/ethX/device/numa_node
(where ethX is the Ethernet number. For example, eth0 or eth1 ).
Radware recommends assigning the PCI NICs that are connected to that same NUMA node to
DefensePro VA running on a specific NUMA node.
Configuring DefensePro VA for KVM
After installing the Radware package, you can now deploy DefensePro VA.
To deploy DefensePro VA
1. Enter into the virsh console; type the command
virsh
.
2. In the virsh console prompt, type the following command to start the DefensePro VA virtual
machine and to access the console:
start <VM_NAME> --console
For example:
start Setup1-NFV_UCS-10.185.6.111 --console
DefensePro boots up and the configuration wizard displays.
3. Run the configuration wizard to configure DefensePro VA.
After the wizard completes, the system reboots.
4. You are prompted to change the default password.
Further configuration of DefensePro VA can be performed through the management interface
after its IP address has been configured.