Platform
| Item | Requirement |
|---|---|
| Processor | 64-bit x86 (x86-64). |
| Firmware | UEFI with Secure Boot off. The image boots in UEFI mode only. |
| Memory | 2 GB with the default threat categories; 4 GB or more with the adult, advertising and extended malware DNS lists. |
| Image | 97.9 MB compressed, 316 MiB written to the disk. |
| Network interfaces | At least two: one for the internal network and one for the internet. |
| Internet access | updates.nexwall.com.br, license.nexwall.com.br and services.nexwall.com.br for updates, licenses, threat lists and registration. |
Virtualization platforms
| Platform | Network driver | Status |
|---|---|---|
| VMware (Workstation, ESXi) | vmxnet3, e1000, e1000e | Tested in VMware with emulated Intel e1000 adapters. vmxnet3 is included and recommended; not measured yet. |
| KVM, QEMU, Proxmox | virtio-net | Driver in the kernel. Not tested. |
| Microsoft Hyper-V | Hyper-V network adapter (hv_netvsc) | Driver in the kernel. Not tested. |
| Xen | Xen network frontend | Driver in the kernel. Not tested. |
| Amazon EC2 | Elastic Network Adapter (ena) | Module in the image. Not tested. |
Network adapters
| Vendor and family | Driver | Status |
|---|---|---|
| Intel Fast Ethernet (82557 and later) | e100 | Included. Not tested on hardware. |
| Intel gigabit (82540 to 82545, PCIe 82571 and later, I217, I218, I219) | e1000, e1000e | Included. e1000 tested in a virtual machine. |
| Intel gigabit (82576, I210, I211, I350) | igb | Included. Not tested on hardware. |
| Intel 2.5 gigabit (I225, I226) | igc | Included. Not tested on hardware. |
| Intel 10 gigabit (X520, X540, X550) | ixgbe | Included. Not tested on hardware. |
| Intel 10 and 40 gigabit (X710, XL710) | i40e | Included. Not tested on hardware. |
| Intel integrated Ethernet | dwmac-intel (stmmac) | Included. Not tested on hardware. |
| Realtek gigabit and 2.5 gigabit (RTL8111, RTL8168, RTL8125) | r8169 | Included. Not tested on hardware. |
| Realtek Fast Ethernet (RTL8139) | 8139cp, 8139too | Included. Not tested on hardware. |
| Broadcom NetXtreme | tg3, bnx2, bnx2x, bnxt_en | Included. Not tested on hardware. |
| NVIDIA nForce | forcedeth | Included. Not tested on hardware. |
| Not in this release | Intel E810 (ice), Mellanox (mlx4, mlx5), Aquantia, USB Ethernet adapters, Wi-Fi adapters | Not included. |
Storage controllers
| Controller | Status |
|---|---|
| NVMe | Driver in the kernel. Not tested. |
| SATA (AHCI) and legacy IDE (PIIX) | Driver in the kernel. Not tested on hardware. |
| VirtIO block and SCSI | Driver in the kernel. Not tested. |
| VMware paravirtual SCSI | Driver in the kernel. Tested in VMware. |
| Hyper-V storage | Driver in the kernel. Not tested. |
| LSI Fusion-MPT (SAS, SPI) | Driver in the kernel. Not tested. |
Notes
- In virtual machines with emulated Intel e1000 adapters throughput stays around 0.7 to 1 Gbit/s whatever the CPU. This is a limit of the emulation, not of the firewall: use vmxnet3 or virtio for performance tests.
- The fast path is off by default. It was verified for correctness, but its gain has not been measured on physical hardware yet.
- Nexwall has tested this release in virtual machines only. Results on physical hardware are welcome; the Status column will be updated.