Personal computing discussed

Moderators: renee, Dposcorp

 
Omniman
Gerbil XP
Topic Author
Posts: 316
Joined: Sat Dec 13, 2008 1:24 am
Location: White River Junction, Vermont

Anti-Virus and Hyper-V

Sun Oct 01, 2017 11:43 am

On my test lab I've got Server 2016 Datacenter with the desktop experience running a Hyper-V role. I'm curious for the best performance would you just have Anti-Virus running on the host or would you roll it out to the host and the VM guests? I've been reading very mixed results with some saying just the host as it will scan the guests as well and reduce performance overhead/Anti-virus scan attacks bringing the host to its knees as every guest scans at potentially the same time. What would you all recommend?
Intel i7-7700, MSI Trident, 32GB DDR4 2133mhz, Geforce 1060GTX, and Samsung Evo 1TB.
 
just brew it!
Administrator
Posts: 54500
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Anti-Virus and Hyper-V

Sun Oct 01, 2017 12:15 pm

I question the ability of the host's AV to effectively detect threats/infections on the guests. Especially if the guests are not running the exact same OS.

Furthermore, if the guest is running its virtual network interface in bridged mode, guest network traffic is bypassing most of the host's network stack. Would the host's AV even see it?
Nostalgia isn't what it used to be.
 
SuperSpy
Minister of Gerbil Affairs
Posts: 2403
Joined: Thu Sep 12, 2002 9:34 pm
Location: TR Forums

Re: Anti-Virus and Hyper-V

Mon Oct 02, 2017 8:27 am

I can't imagine the host can scan the Hyper-V guest disks as they are locked by the Hyper-V service while the VM is active. Even if they weren't, it's not like the AV can do anything about it without corrupting the VM as the guest OS is still doing paging/caching on the image.
Desktop: i7-4790K @4.8 GHz | 32 GB | EVGA Gefore 1060 | Windows 10 x64
Laptop: MacBook Pro 2017 2.9GHz | 16 GB | Radeon Pro 560
 
Omniman
Gerbil XP
Topic Author
Posts: 316
Joined: Sat Dec 13, 2008 1:24 am
Location: White River Junction, Vermont

Re: Anti-Virus and Hyper-V

Mon Oct 02, 2017 10:34 am

Thanks for the info and that all makes sense. Just so much naysay out their on the interwebs it can be a little confusing!
Intel i7-7700, MSI Trident, 32GB DDR4 2133mhz, Geforce 1060GTX, and Samsung Evo 1TB.
 
Flying Fox
Gerbil God
Posts: 25690
Joined: Mon May 24, 2004 2:19 am
Contact:

Re: Anti-Virus and Hyper-V

Mon Oct 02, 2017 10:54 am

Plus, if you use Shield VM, the host is not supposed to see any data on the guests. Then what? :P
The Model M is not for the faint of heart. You either like them or hate them.

Gerbils unite! Fold for UnitedGerbilNation, team 2630.

Who is online

Users browsing this forum: No registered users and 1 guest
GZIP: On