Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm moving a box that's running ESXi into a server colocation room at a local ISP. This box has a few virtual machines on it, and the local ISP just provides 1 IP address (by default).

Is there any problem in running a pfSense (or similar, suggestions?) VM as the gateway to my other VMs behind this pfsense NAT? My concern is that since the pfSense box will be routing traffic for multiple VMs (that will all be running on the same physical machine) we'll run into some performance issues.

The traffic should be relatively low, at least in the beginning. Something like a simple web-server and a Ventrilo server with < 50 users at any given time.

share|improve this question

2 Answers 2

up vote 2 down vote accepted

I wouldn't worry about performance issues with routing vm traffic internal to vmware. You should exceed performance over the same systems with physical connections

share|improve this answer
    
Spectacular! :D –  mrduclaw Mar 5 '10 at 1:35

I did something similar to this using a project called Vyatta (which I highly recommend). It's been a while, so I don't remember the specifics, but it wasn't particularly difficult to do. You just have to have the virtual NICs for the "LAN" side devices all be members of a common vswitch. Performance was phenomenal and the resources assigned to the Vyatta VM were fairly minimal. I believe Vyatta refers to such a solution as a "branch in a box".

share|improve this answer
    
Thank you! I'll check into this! –  mrduclaw Mar 5 '10 at 1:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.