<os firmware='efi'> <type arch='x86_64' machine='pc-q35-6.2'>hvm</type> <loader readonly='yes' type='pflash'>/usr/share/OVMF/OVMF_CODE.fd</loader> </os> Cause: The default VirtIO network driver under high load. Solution: Increase the ring buffer size and enable multi-queue.
virt-install --boot uefi ... Or edit the XML:
<interface type='bridge'> <model type='virtio'/> <driver name='vhost' queues='4'/> <virtualport type='openvswitch'/> </interface> Panorama is sensitive to time. If the KVM host is overcommitted, PanOS 10.0.4 may show NTP errors. Solution: Use kvmclock and tsc as the time source. panorama-kvm-10.0.4.qcow2
virsh snapshot-create-as panorama pre-upgrade \ --disk-only --atomic --quiesce Note: Snapshots are not backups. Use virsh domblklist and copy the QCOW2 files while the VM is offline for true backups. Deploying panorama-kvm-10.0.4.qcow2 is not always seamless. Here are known issues and solutions. Issue 1: The VM boots to a Grub Rescue prompt Cause: KVM’s default BIOS doesn’t always locate the bootloader. Solution: Switch the firmware to UEFI.
<!-- Edit via virsh edit panorama --> <blkiotune> <device path='/var/lib/libvirt/images/panorama.qcow2'> <read_bytes_sec>10000000</read_bytes_sec> <write_bytes_sec>10000000</write_bytes_sec> </device> </blkiotune> Enable hugepages to reduce TLB misses and improve logging performance. On the host: take a snapshot.
sudo mv ~/Downloads/panorama-kvm-10.0.4.qcow2 /var/lib/libvirt/images/panorama.qcow2 Optional: Create a backing file or copy the image if you plan multiple instances (for lab testing). For precision, use the command line. Note the specific parameters for a network management appliance.
Version 10.0.4 offers a stable foundation, but always plan your upgrade path and backup strategy before moving to production. By following the optimization and troubleshooting steps outlined in this guide, you can confidently manage hundreds of Palo Alto firewalls from a single, self-hosted KVM virtual appliance. self-hosted KVM virtual appliance.
<memoryBacking> <hugepages/> </memoryBacking> The beauty of QCOW2 is snapshots. Before upgrading Panorama to 10.0.5 or 10.1.x, take a snapshot.