i was reading this discussion: Is there danger to virtualizing a router?
I'm in charge of mantaining several firewall installed in different SMB organization 10-100 user. We're installing Endian or PfSense on custom hardware. Unfortunatly (espcially with endian) when i try to restore the config on a different hardware i run in several problems (different NICs etc).
So i was thinking about virtualing the firewall to introduce a level of abastraction from the physical layer making the machine "hardware indipendent".
PRO:
- Hardware indipenent
- Easy to scale
- Easy to backup
CON:
- Performance (worst than physical)
The performance (in my scenario) wouldn't be an issue
I'm concerned about possible security risks what do you think about it? Which Hypervisor do you reccomend (and why)? Some other consideration to be made?
Thanks for your kind reply