Netgate SG-1000 microFirewall

Author Topic: Create a PV DomU pfsense image for Xen $100  (Read 9204 times)

0 Members and 1 Guest are viewing this topic.

Offline jonnytabpni

  • Full Member
  • ***
  • Posts: 287
  • Karma: +0/-0
    • View Profile
Create a PV DomU pfsense image for Xen $100
« on: June 15, 2010, 07:10:19 am »
Now that pfSense uses FreeBSD 8, and FreeBSD eight has support for a PV kernel, could someone please create a Xen PV image?

At the minute, the HVM network cards really do cap performance.

I'll start this bounty at $100

Thanks

Offline cougarmaster

  • Jr. Member
  • **
  • Posts: 87
  • Karma: +0/-0
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #1 on: June 16, 2010, 11:42:06 am »
Hi jonnytabpni,
    Try this link might help you.

            http://www.freebsdnews.net/2010/05/10/howto-create-freebsd-8-i386-xen-pv-domu/

Good luck and share if you do make it.
Eric

Offline jonnytabpni

  • Full Member
  • ***
  • Posts: 287
  • Karma: +0/-0
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #2 on: June 18, 2010, 03:50:45 am »
Hi cougarmaster,

The oly issue I see with that link is that is is FreeBSD generic. After I had made the kernel, how would I go about incoroporating pfsense into the image?

Thanks

Offline djzort

  • Jr. Member
  • **
  • Posts: 79
  • Karma: +2/-0
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #3 on: September 11, 2010, 02:14:40 am »
Xen is dead, use KVM.

Offline billm

  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-1
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: Create a PV DomU pfsense image for Xen $100
« Reply #4 on: September 15, 2010, 11:39:09 am »
pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette

Offline black0ut

  • Newbie
  • *
  • Posts: 14
  • Karma: +0/-0
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #5 on: October 31, 2010, 02:55:27 pm »
Now that pfSense uses FreeBSD 8, and FreeBSD eight has support for a PV kernel, could someone please create a Xen PV image?

At the minute, the HVM network cards really do cap performance.

I'll start this bounty at $100

Thanks

Have you solved this problem yet?  If not, let me know what version of xen you're running on what distro, and I can try and test out my Xen PV image.

Offline danswartz

  • Hero Member
  • *****
  • Posts: 1168
  • Karma: +1/-0
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #6 on: November 01, 2010, 08:49:36 pm »
Xen is dead, use KVM.

What does the kernel memory interface (http://www.freebsd.org/cgi/man.cgi?query=kvm&apropos=0&sektion=0&manpath=FreeBSD+8.1-RELEASE&format=html) have to do with virtualization?

--Bill

Not that KVM, the kernel module for virtualization.


Offline billm

  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-1
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: Create a PV DomU pfsense image for Xen $100
« Reply #7 on: December 30, 2010, 08:41:48 am »
Xen is dead, use KVM.

What does the kernel memory interface (http://www.freebsd.org/cgi/man.cgi?query=kvm&apropos=0&sektion=0&manpath=FreeBSD+8.1-RELEASE&format=html) have to do with virtualization?

--Bill

Not that KVM, the kernel module for virtualization.



Yeah, I know...but the original post asked for Xen support - Xen images can run on NetBSD, Citrix XenServer (think, commercial environment) and with greater difficulty by the day on Linux.  As far as I know there is no decent commercial support of KVM and it's a Linux only solution.  I see greater value in a Xen image...however, for $100 I'd suggest replacing your CPU and forgetting about PV (yes, this may not be possible, but trust me, you'll be MUCH happier with hardware virtualization).

--Bill

pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette

Offline jonnytabpni

  • Full Member
  • ***
  • Posts: 287
  • Karma: +0/-0
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #8 on: January 04, 2011, 12:08:43 pm »
Xen is dead, use KVM.

Xen is not dead. Without going too much off-topic, very few companies use KVM in production. There are literally thousands that use Xen though. While I agree that the distant future for KVM looks good (as there are a lot of companies backing it), Xen is by far the most mature virtualisation technology out there (Even more mature than VMWare).

As to the poster who mentioned that I should forget PV and use full virtualisation, yes, I've tried that and pfsense works well in Xen under full virtualisation (HVM mode). However, Xen works better with PV VMs, hence this bounty :)


Offline simoncpu

  • Jr. Member
  • **
  • Posts: 28
  • Karma: +0/-0
  • simoncpu was here
    • View Profile
Re: Create a PV DomU pfsense image for Xen $100
« Reply #9 on: January 14, 2011, 12:58:49 am »
This sounds exciting.  I'll wait for the bounty to go up... :)

Offline billm

  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-1
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: Create a PV DomU pfsense image for Xen $100
« Reply #10 on: February 15, 2011, 11:19:33 am »
Xen is dead, use KVM.

Xen is not dead. Without going too much off-topic, very few companies use KVM in production. There are literally thousands that use Xen though. While I agree that the distant future for KVM looks good (as there are a lot of companies backing it), Xen is by far the most mature virtualisation technology out there (Even more mature than VMWare).

As to the poster who mentioned that I should forget PV and use full virtualisation, yes, I've tried that and pfsense works well in Xen under full virtualisation (HVM mode). However, Xen works better with PV VMs, hence this bounty :)


Unfortunately I found it rather difficult to get Xen working in my environment and ended up having to deploy KVM.  I have an opportunity to try it again in a few days.  If I succeed, I may be willing to pursue this bounty if it's still open.

--Bill
pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette