Personal computing discussed

Moderator: Dposcorp

 
Omniman
Gerbil Team Leader
Topic Author
Posts: 291
Joined: Sat Dec 13, 2008 1:24 am
Location: White River Junction, Vermont

Anti-Virus and Hyper-V

Sun Oct 01, 2017 11:43 am

On my test lab I've got Server 2016 Datacenter with the desktop experience running a Hyper-V role. I'm curious for the best performance would you just have Anti-Virus running on the host or would you roll it out to the host and the VM guests? I've been reading very mixed results with some saying just the host as it will scan the guests as well and reduce performance overhead/Anti-virus scan attacks bringing the host to its knees as every guest scans at potentially the same time. What would you all recommend?
Intel I7-2600k, Asus P8P67, 16GB DDR3 1600mhz, Geforce GTX 1070, ASUS Xonar D2, Samsung Evo 250GB, Western Digital Black 1TB, Corsair HX750w
 
just brew it!
Gold subscriber
Administrator
Posts: 49662
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Anti-Virus and Hyper-V

Sun Oct 01, 2017 12:15 pm

I question the ability of the host's AV to effectively detect threats/infections on the guests. Especially if the guests are not running the exact same OS.

Furthermore, if the guest is running its virtual network interface in bridged mode, guest network traffic is bypassing most of the host's network stack. Would the host's AV even see it?
Nostalgia isn't what it used to be.
 
SuperSpy
Gold subscriber
Minister of Gerbil Affairs
Posts: 2226
Joined: Thu Sep 12, 2002 9:34 pm
Location: TR Forums

Re: Anti-Virus and Hyper-V

Mon Oct 02, 2017 8:27 am

I can't imagine the host can scan the Hyper-V guest disks as they are locked by the Hyper-V service while the VM is active. Even if they weren't, it's not like the AV can do anything about it without corrupting the VM as the guest OS is still doing paging/caching on the image.
Desktop: i7-4790K @4.8 GHz | 32 GB | EVGA Gefore 1060 | Windows 10 x64
Laptop: i7 740QM | 12 GB | Mobility Radeon 5850 | Windows 10 x64
 
Omniman
Gerbil Team Leader
Topic Author
Posts: 291
Joined: Sat Dec 13, 2008 1:24 am
Location: White River Junction, Vermont

Re: Anti-Virus and Hyper-V

Mon Oct 02, 2017 10:34 am

Thanks for the info and that all makes sense. Just so much naysay out their on the interwebs it can be a little confusing!
Intel I7-2600k, Asus P8P67, 16GB DDR3 1600mhz, Geforce GTX 1070, ASUS Xonar D2, Samsung Evo 250GB, Western Digital Black 1TB, Corsair HX750w
 
Flying Fox
Gerbil God
Posts: 25417
Joined: Mon May 24, 2004 2:19 am
Contact:

Re: Anti-Virus and Hyper-V

Mon Oct 02, 2017 10:54 am

Plus, if you use Shield VM, the host is not supposed to see any data on the guests. Then what? :P
The Model M is not for the faint of heart. You either like them or hate them.

Gerbils unite! Fold for UnitedGerbilNation, team 2630.

Who is online

Users browsing this forum: No registered users and 1 guest