Now we are talking. Today Altor Networks releases today the third generation of its Virtual Firewall (VF) which features a brand new kernel that fully leverages the new VMware VMsafe APIs.
The choice to rewrite the core part of the product will probably raise concerns about its stability, but there was a good reason to do so.
VMware offers two modes to use the VMsafe network APIs, called Slow-Path and Fast-Path.
By using the Slow-Path, a security vendor asks for a copy of the virtual traffic inside a dedicated VMsafe virtual appliance, plugging into the virtual switches that connect the protected VMs.
This approach is slow (it obliges to perform context switching) and implies some potential risks as the VMsafe virtual appliance itself could be targeted for an attack.
By using the Fast-Path instead, a security vendor can process the virtual traffic from inside the ESX vKernel, in a truly transparent mode.
Unfortunately the Fast-Path integration is harder to implement but pays off in terms of performance, flexibility and security, so different vendors are using both modes to deliver a hybrid solution.





