{"id":6512,"date":"2026-05-29T15:09:32","date_gmt":"2026-05-29T07:09:32","guid":{"rendered":"https:\/\/www.killtest.hk\/?p=6512"},"modified":"2026-05-29T15:09:32","modified_gmt":"2026-05-29T07:09:32","slug":"fortigate-vm-on-kvm%e6%98%af%e4%bb%80%e9%ba%bc","status":"publish","type":"post","link":"https:\/\/www.killtest.hk\/index.php\/killtest\/fortigate-vm-on-kvm%e6%98%af%e4%bb%80%e9%ba%bc\/","title":{"rendered":"FortiGate-VM on KVM\u662f\u4ec0\u9ebc"},"content":{"rendered":"\n

FGT-KVM\uff08FortiGate<\/a>-VM on KVM\uff09\u662f\u98db\u5854\uff08Fortinet\uff09\u63a8\u51fa\u7684\u865b\u64ec\u5316\u65b0\u4e00\u4ee3\u9632\u706b\u7246\uff0c\u6838\u5fc3\u662f\u628a\u786c\u9ad4FortiGate\u7684\u5168\u91cf\u5b89\u5168\u80fd\u529b\u9077\u79fb\u5230Linux KVM\u74b0\u5883\uff0c\u517c\u9867\u865b\u64ec\u5316\u5f48\u6027\u8207\u4f01\u696d\u7d1a\u9632\u8b77\u3002<\/p>\n\n\n\n

\u4e00\u3001\u6838\u5fc3\u5b89\u5168\u529f\u80fd\uff08\u5168\u91cfFortiOS\u80fd\u529b\uff09
\u9632\u706b\u7246
\uff1a\u72c0\u614b\u5075\u6e2c\u3001\u7b56\u7565\u63a7\u5236\u3001NAT\uff08\u4f86\u6e90\/\u76ee\u7684\/\u96d9\u5411\uff09\u3001\u900f\u660e\/\u8def\u7531\u6df7\u5408\u6a21\u5f0f\u3001IPv4\/IPv6\u96d9\u68e7\u3002
VPN
\uff1aIPsec\uff08\u7ad9\u53f0\/\u9060\u7aef\u5b58\u53d6\uff09\u3001SSL VPN\u3001L2TP\u3001GRE\uff0c\u652f\u63f4\u9ad8\u53ef\u7528\uff08HA\uff09\u53e2\u96c6\u3002
\u5165\u4fb5\u9632\u79a6\uff08IPS\uff09
\uff1a\u6f0f\u6d1e\u653b\u64ca\u9632\u8b77\u3001\u5354\u5b9a\u7570\u5e38\u5075\u6e2c\u3001\u5373\u6642\u963b\u65b7\u8207\u65e5\u8a8c\u3002
Web\u904e\u6ffe
\uff1aURL\u5206\u985e\u3001\u60e1\u610f\u7db2\u7ad9\u6514\u622a\u3001HTTPS\u89e3\u5bc6\/\u904e\u6ffe\u3001\u61c9\u7528\u7a0b\u5f0f\u63a7\u5236\u3002
\u9632\u6bd2\/\u53cd\u60e1\u610f\u8edf\u9ad4
\uff1aFortiGuard\u5373\u6642\u75c5\u6bd2\u5eab\u3001\u6a94\u6848\u904e\u6ffe\u3001\u90f5\u4ef6\u5b89\u5168\u3001\u52d2\u7d22\u8edf\u9ad4\u9632\u8b77\u3002
\u96f6\u4fe1\u4efb\u8207\u5b58\u53d6\u63a7\u5236
\uff1a\u4f7f\u7528\u8005\u8a8d\u8b49\uff08\u672c\u5730\/LDAP\/Radius\/\u96d9\u91cd\u56e0\u7d20\uff09\u3001\u61c9\u7528\u7a0b\u5f0f\u8fa8\u8b58\u3001\u6d41\u91cf\u63a7\u5236\uff08QoS\uff09\u3002
\u5b89\u5168Fabric\u806f\u52d5
\uff1a\u8207FortiManager<\/a>\u3001FortiAnalyzer\u3001FortiClient\u9023\u7d50\uff0c\u7d71\u4e00\u7ba1\u7406\u3001\u65e5\u8a8c\u8207\u5a01\u8105\u60c5\u5831\u5171\u4eab\u3002
\u4e8c\u3001KVM\u865b\u64ec\u5316\u5c08\u5c6c\u80fd\u529b
\u5f48\u6027\u90e8\u7f72
\uff1a\u652f\u63f4QCOW2\u93e1\u50cf\uff0c\u5206\u9418\u7d1a\u5efa\u7acb\/\u8907\u88fd\/\u9077\u79fb\u865b\u64ec\u6a5f\uff0c\u9069\u914d\u79c1\u6709\u96f2\/\u6df7\u5408\u96f2\u3002
\u8cc7\u6e90\u6700\u4f73\u5316
\uff1avCPU\/\u8a18\u61b6\u9ad4\u6309\u9700\u5206\u914d\uff0c\u652f\u63f4SR-IOV\u76f4\u901a\uff08\u7db2\u5361\u865b\u64ec\u5316\uff0c\u76f4\u63a5DMA\uff0c\u6548\u80fd\u63a5\u8fd1\u786c\u9ad4\uff09\u3001DPDK\/vNP\u5378\u8f09\uff08\u5c01\u5305\u8655\u7406\u7e5e\u904e\u5167\u6838\uff0c\u63d0\u5347\u541e\u5410\uff09\u3002
\u9ad8\u53ef\u7528\uff08HA\uff09
\uff1a\u652f\u63f4\u53e2\u96c6\uff08FGCP\uff09\u3001\u6703\u8a71\u540c\u6b65\u3001\u6545\u969c\u81ea\u52d5\u5207\u63db\uff0c\u6eff\u8db3\u696d\u52d9\u9023\u7e8c\u6027\u3002
\u786c\u9ad4\u76f8\u5bb9
\uff1a\u9069\u914d\u4e3b\u6d41x86\u4f3a\u670d\u5668\uff0c\u652f\u63f4VirtIO\u9a45\u52d5\u3001PCIe\u76f4\u901a\u3001TPM 2.0\uff08\u91d1\u9470\u5b89\u5168\u5132\u5b58\uff09\u3002
\u7ba1\u7406\u4fbf\u6377
\uff1a\u652f\u63f4virt-manager\u5716\u5f62\u5316\u3001virsh\u547d\u4ee4\u5217\u3001FortiManager\u7d71\u4e00\u7d0d\u7ba1\uff0c\u96f6\u63a5\u89f8\u90e8\u7f72\u3002
\u4e09\u3001\u6027\u80fd\u8207\u5408\u898f
\u9ad8\u6548\u80fd
\uff1a\u865b\u64ec\u5b89\u5168\u8655\u7406\u5668\uff08vSPU\uff09\uff0c\u541e\u5410\u6700\u9ad8\u53ef\u9054100Gbps\uff08\u4f9d\u6388\u6b0a\u8207\u8cc7\u6e90\uff09\uff0c\u652f\u63f4\u52a0\u5bc6\u6d41\u91cf\u9ad8\u901f\u8655\u7406\u3002
\u5408\u898f\u8a8d\u8b49
\uff1a\u7b49\u4fdd2.0\u3001PCI-DSS\u3001HIPAA\u3001GDPR\u7b49\uff0c\u5167\u5efa\u5408\u898f\u6aa2\u67e5\u6a21\u677f\u3002
\u56db\u3001\u5178\u578b\u61c9\u7528\u5834\u666f
\u8cc7\u6599\u4e2d\u5fc3\u6771\u897f\u5411\/\u5357\u5317\u5411\u6d41\u91cf\u9632\u8b77
\u96f2\u7aef\u5e73\u53f0\uff08\u79c1\u6709\/\u6df7\u5408\uff09\u865b\u64ec\u9632\u706b\u7246
\u9060\u8ddd\u8fa6\u516cSSL VPN\u7db2\u95dc
\u5206\u516c\u53f8\u5b89\u5168\u865b\u64ec\u5316\uff08\u66ff\u4ee3\u786c\u9ad4\uff09<\/p>\n","protected":false},"excerpt":{"rendered":"

FGT-KVM\uff08FortiGate-VM on KVM\uff09\u662f\u98db\u5854\uff08Fortinet\uff09\u63a8\u51fa\u7684\u865b\u64ec\u5316\u65b0\u4e00\u4ee3\u9632\u706b\u7246\uff0c\u6838 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[3553],"class_list":["post-6512","post","type-post","status-publish","format-standard","hentry","category-killtest","tag-fcp_fgt_ad-7-6"],"_links":{"self":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts\/6512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/comments?post=6512"}],"version-history":[{"count":1,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts\/6512\/revisions"}],"predecessor-version":[{"id":6513,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/posts\/6512\/revisions\/6513"}],"wp:attachment":[{"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/media?parent=6512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/categories?post=6512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.killtest.hk\/index.php\/wp-json\/wp\/v2\/tags?post=6512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}