@olivierlambert I will go ahead and open a support case from the office tomorrow, if I don't get it sorted out before then.
Thanks.
Allen B.

@olivierlambert said in Epyc VM to VM networking slow:

I feel that this is going to be a much larger issue for us.

Before that I would strongly encourage to test if it's really a problem, because it's really not in 90% of the use cases we've seen.

Thanks @olivierlambert - that is definitely the plan. I still see XCP-ng as the best alternative we've considered so far.

@planedrop It is a mix of anything and everything one would find in an enterprise datacenter. Lots of application server to database server connections, and we are also running Rancher with Longhorn storage, which is particularly sensitive to latency, but mostly of the storage type - not networking latency. We will just have to test and see if it is indeed an issue. If I understand correctly, the main issue is with performance between VMs on the same virtualization host. In that case, we can use rules to place application and db servers on separate hosts for better performance. Ironically, that is the opposite of the configuration we currently use with VMware.
Anyway, we will just have to do some testing to see if it is an issue worth stressing over for us.
Thanks.

@dinhngtu Thanks. I did verify that it does not have the revoked version on any of the hosts. I've also verified that this is only occurring with Windows 2025. I can V2V Windows 2022 or any Linux distribution that we've tried, without secure boot issues. Also, a fresh installation of Windows 2025 doesn't have the issue. I've opened support ticket number 7747017 for this issue. Hopefully someone can get it figured out.
Thanks.
Allen B.

@olivierlambert I will go ahead and open a support case from the office tomorrow, if I don't get it sorted out before then.
Thanks.
Allen B.

With Xen Orchestra 5.110.1, and fully patched XCP-ng 8.3 hosts in a pool, if I use V2V to import a Windows 2025 VM from vSphere 8 (VM is UEFI with secure boot enabled), the VM will only boot if I disable secure boot. Everything works perfectly after the migration with secure boot disabled, but if I enable it, I get the UEFI interactive shell. I've done "secureboot-certs install" on the pool. When the VM is powered up and at the UEFI shell screen, I have an option on the "advanced" tab to copy the pool's default UEFI certs to the VM (it disappears if the VM is powered off). Selecting this, and rebooting has no effect. Also, this error occurs in the log for the VM: "VM_SECURE_BOOT_FAILED The VM failed to pass Secure Boot verification."
I will admit that I don't have a strong understanding of the internals of secure boot, as it "just works" in VMware, and I've never had to do any troubleshooting of it.
What am I missing? I could open a support request, but I thought maybe someone here would be able to point me in the right direction.
Thanks.
Allen B.

@olivierlambert said in Epyc VM to VM networking slow:

I feel that this is going to be a much larger issue for us.

Before that I would strongly encourage to test if it's really a problem, because it's really not in 90% of the use cases we've seen.

Thanks @olivierlambert - that is definitely the plan. I still see XCP-ng as the best alternative we've considered so far.

@planedrop It is a mix of anything and everything one would find in an enterprise datacenter. Lots of application server to database server connections, and we are also running Rancher with Longhorn storage, which is particularly sensitive to latency, but mostly of the storage type - not networking latency. We will just have to test and see if it is indeed an issue. If I understand correctly, the main issue is with performance between VMs on the same virtualization host. In that case, we can use rules to place application and db servers on separate hosts for better performance. Ironically, that is the opposite of the configuration we currently use with VMware.
Anyway, we will just have to do some testing to see if it is an issue worth stressing over for us.
Thanks.

@olivierlambert I know that I am late to this thread, but I would like to ask if there is any realistic time estimate for a workable fix, or even for a temporary patch or workaround?
We have been trialing XCP-ng with the compiled version of Xen Orchestra as a potential replacement for VMware in a fairly large multi-datacenter environment, before doing an "official" proof of concept. My concern is that we've done all of our testing on our freshly retired older Intel virtualization hosts - as we've just completed replacing everything with AMD EPYC-based servers. Until now, our only matter of concern has been the 2TB virtual disk limit. I feel that this is going to be a much larger issue for us. It sounds as if I need to pull in a pool of EPYC systems to expand our testing.
Thanks in advance for any input or guesstimates that you may be able to provide.