IT Jobs
New firewall boosts performance 10-fold
Altor speeds up virtual security
By Tim Greene, Network World (US) | Network World US
Published: 05:43 GMT, 08 July 09
Altor Networks has rewritten its virtual firewall so the software plugs direct into VMware hypervisors. Altor said that this boosted firewall performance by a factor of 10.
With Altor VF 3.0 software, the firewall can be integrated via VMsafe application programming interfaces published by VMware earlier this year. This enables the firewall to see traffic as it moves through the hypervisor between virtual machines (VM) on the same physical host, said the company.
Altor rewrote the firewall software so it could connect to the hypervisor via what VMware calls a Fast Path connection. According to Altor, this provides a direct link to the hypervisor for processing rather than through a VM, the path method that is 10 times slower.
Engineers fix shortcomings of the traditional firewall
Return on investment for this type of firewall integration is also faster because each physical machine winds up with more processing power left over to dedicate to virtual machines, said Ted Ritter, a senior research analyst with Nemertes Research.
"If the firewall chews up a whole core on a four-core processor, that's 25 percent of the performance I'm giving to it," he said. Tying the firewall into the hypervisor is more efficient than the slow path method that runs the firewall through a VM, he added.
With the new software release Altor is adding an intrusion-detection system (IDS) powered by Snort with malware signatures provided and updated by Sourcefire. Along with that the IDS monitors attempted connections to the hypervisor to flag possible attacks against it. Logs from the IDS could be used by auditors to demonstrate whether the hypervisor was violated, the company says.
Like the firewall, the IDS is geared to virtual environments and is not meant to take the place of a network-grade firewall, Ritter said. "Their IDS just handles the bare minimum to protect virtual machines and assumes you still have a physical IDS at the perimeter of the network to do the bulk of the work," he said. "The same thing with the firewall."
Locking security applications into the hypervisor means they see and can act on all traffic in and out of all VMs on a host, the company claimed. This enables defence in depth in a virtual environment by layering security on all VMs.
Altor VF 3.0 supports hot standby of its Altor Center firewall management software, so if one instance fails the other can take over. This is important because virtualisation promises better uptime than physical environments, so avoiding security failures is important to boost reliability, said Ritter.
Add your commentComments