Oracle Audit Vault and Database Firewall on Hyper-V

hyper-voracle

I am trying to configure an Oracle Database Firewall / Audit Server as virtual machines on Hyper-V. The problem is that, for example, to install the Database Firewall on a virtual machine, the VM needs to have at least two NIC-s (up to three). During the installation process, no NIC-s (0) are detected. Normally the NICs are configured to work within a previously created virtual network (that is working with other existent virtual machines). So, my question is the following: Are there any incompatibility issues with Hyper-V and Oracle AVDF ? I have succeeded this task with VMware. All VM are running there, that's why I'm concerned about incompatibility with Hyper-V.

Best Answer

I'm going to assume that you have already added NIC's to the VM. Because that is too obvious.

Hyper-V can present 2 different kinds of NIC's to a VM: a Synthetic NIC or an Emulated NIC. A Synthetic NIC requires a Microsoft driver to work, whereas an Emulated NIC shows up as an Intel 21140 NIC that is more likely to be supported.

You get better performance with Synthetic, but if your platform doesn't support it then you have to use Emulated.

If you're using Hyper-V manager instead of Virtual Machine Manager, then Synthetic is just called Network Adapter and Emulated is called Legacy.

Related Solutions

Firewall – Virtualized firewall under Hyper-V

What Wesley said... Plus a diagram:

              +----------------------------------+
              |    +----------+   +---------+    |     +----+ +----+ +----+
              |    | pfSense  |   | Host OS |    |     |    | |    | |    |
              |    |          |   |         |    |     | PC | | PC | | PC |
              |    +----------+   +---------+    |     |    | |    | |    |
              |         ^   ^          ^         |     +----+ +----+ +----+
              |         |   +------+   |         |        ^      ^      ^
              |         |          |   |         |        |      |      |
              |         V          V   V         |        V      V      V
+--------+    +---+   +-------+  +-------+   +---+      +-----------------+
|Internet|<-->|WAN|<->|WAN NET|  |LAN NET|<->|LAN|<----+|    LAN SWITCH   |
+--------+    +---+   +-------+  +-------+   +---+      +-----------------+
              |          Hyper-V Host            |
              +----------------------------------+

It's actually possible to use the same NIC on the Hyper-V Host for both WAN and LAN, but you'll need to setup vLANs and need a switch that supports them. It gets messy quickly and NICs are fairly cheap. A note on NIC chips, get a good one, like Intel, Broadcom, etc. Stay away from Realtek, Marvel, and most of the on-board chips on cheaper and DIY motherboards. They're nothing but trouble for virtualized environments.

Also, keep in mind that Hyper-V is a bare-metal Hypervisor. It is NOT a service that runs in Windows. What used to be the Windows installation on the machine becomes a special VM. This will not appear to be the case for simplicity and usability reasons, but comes into play when you do things like setup the Hyper-V Networking.

Hyper-V Thread Priorities host and guest – how do they correspond

The Hyper-V Parent Partition, or Management OS, is special within the hypervisor. If its virtual processors are runnable, they get a large boost in priority over guest VMs. This is because, in a supported Hyper-V configuration, the only thing the management OS does (statistically speaking) is I/O on behalf of guest VMs. If you install anything else in the management OS, then you're going to preempt work on behalf of guest VMs.

I assume that this has already occurred to you, but you could do this the supported way. Create a VM that is essentially the same size as the physical machine. Give it very low CPU and memory weights and turn on Dynamic Memory so that, when idle, it doesn't use much memory. Run your compute task in that VM. Hyper-V will then prefer doing work for any other guest than that one, but use idle cycles on behalf of your computational task.

Best Answer

Related Solutions

Firewall – Virtualized firewall under Hyper-V

Hyper-V Thread Priorities host and guest – how do they correspond

Related Topic