From: Ilya Maximets <i.maximets@ovn.org>
To: Ilya Maximets <i.maximets@ovn.org>,
Thomas Monjalon <thomas@monjalon.net>,
Jerin Jacob <jerinjacobk@gmail.com>
Cc: dev@dpdk.org, Shahaf Shuler <shahafs@mellanox.com>,
Stephen Hemminger <stephen@networkplumber.org>,
Andrew Rybchenko <arybchenko@solarflare.com>,
Ferruh Yigit <ferruh.yigit@intel.com>
Subject: Re: [dpdk-dev] [PATCH v2 0/3] ethdev: configure SR-IOV VF from host
Date: Fri, 1 Nov 2019 10:56:15 +0100 [thread overview]
Message-ID: <30f761f1-a62f-ced5-c505-781c480628e5@ovn.org> (raw)
In-Reply-To: <53d2b0ea-1e1e-813c-1361-264e1118680c@ovn.org>
On 01.11.2019 10:06, Ilya Maximets wrote:
> On 01.11.2019 1:24, Thomas Monjalon wrote:
>> 30/10/2019 10:24, Jerin Jacob:
>>> On Wed, Oct 30, 2019 at 12:52 PM Shahaf Shuler <shahafs@mellanox.com> wrote:
>>>> Wednesday, October 30, 2019 6:09 AM, Jerin Jacob:
>>>>> Subject: Re: [dpdk-dev] [PATCH v2 0/3] ethdev: configure SR-IOV VF from
>>>>> host
>>>>>
>>>>> On Wed, Oct 30, 2019 at 12:21 AM Thomas Monjalon
>>>>> <thomas@monjalon.net> wrote:
>>>>>>
>>>>>> In a virtual environment, the network controller may have to configure
>>>>>> some SR-IOV VF parameters for security reasons.
>>>>>
>>>>> Just to understand, Could you explain more details/examples for security
>>>>> reasons?
>>>>>
>>>>>>
>>>>>> When the PF (host port) is driven by DPDK (OVS-DPDK case), we face two
>>>>>> different cases:
>>>>>> - driver is bifurcated (Mellanox case),
>>>>>> so the VF can be configured via the kernel.
>>>>>> - driver is on top of UIO or VFIO, so DPDK API is required,
>>>>>
>>>>> Not true. Both UIO and VFIO are NOT allowed to create SRIOV VF from the
>>>>> PF device.
>>>>> It is only allowed through igb-uio out of tree driver without iommu support.
>>>>
>>>> Per my understanding Thomas proposal is not to create the VFs
>>>> from the PF device. it is to configure their network attributes
>>>> from the PF after they have been created.
>>>
>>> Yes. My question is without creating the VF, How do you control them?
>>
>> We can create the VF via the kernel PF driver, before binding the PF to VFIO.
>
> AFAIK, this is not possible. VFs are gone as soon as you're unbinding kernel
> PF driver. And after binding of vfio-pci you can no longer create VFs.
>
> I tried to check some representor functionality about 2 months ago and didn't
> find a way to enable VFs on Intel NICs if PF is under control of vfio-pci.
Likely it was i40e driver from the kernel side. I see from the lkml thread that
some drivers might not clear sriov on exit (ixgbe), but that wasn't my case and
it's actually a controversial feature in general.
next prev parent reply other threads:[~2019-11-01 9:56 UTC|newest]
Thread overview: 36+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-08-15 15:06 [dpdk-dev] [RFC] " Thomas Monjalon
2019-08-15 15:34 ` Jerin Jacob Kollanukkaran
2019-08-15 17:59 ` Thomas Monjalon
2019-08-29 15:02 ` Iremonger, Bernard
2019-09-04 8:23 ` Thomas Monjalon
2019-10-29 18:50 ` [dpdk-dev] [PATCH v2 0/3] " Thomas Monjalon
2019-10-29 18:50 ` [dpdk-dev] [PATCH v2 1/3] ethdev: identify " Thomas Monjalon
2019-10-29 18:50 ` [dpdk-dev] [PATCH v2 2/3] ethdev: set VF MAC address " Thomas Monjalon
2019-11-01 0:18 ` [dpdk-dev] [RFC PATCH] net/i[xgb|40]e: " Thomas Monjalon
2019-10-29 18:50 ` [dpdk-dev] [PATCH v2 3/3] net/mlx5: " Thomas Monjalon
2019-10-30 4:08 ` [dpdk-dev] [PATCH v2 0/3] ethdev: configure SR-IOV VF " Jerin Jacob
2019-10-30 7:22 ` Shahaf Shuler
2019-10-30 9:24 ` Jerin Jacob
2019-11-01 0:24 ` Thomas Monjalon
2019-11-01 9:06 ` Ilya Maximets
2019-11-01 9:56 ` Ilya Maximets [this message]
2019-10-30 8:56 ` Thomas Monjalon
2019-10-30 9:15 ` Jerin Jacob
2019-11-01 0:33 ` Thomas Monjalon
2019-11-01 11:01 ` Jerin Jacob
2019-11-01 13:25 ` Jerin Jacob
2019-11-03 6:31 ` Shahaf Shuler
2019-10-30 15:07 ` Ilya Maximets
2019-10-30 15:49 ` Thomas Monjalon
2019-10-30 16:09 ` Ilya Maximets
2019-10-30 21:42 ` Thomas Monjalon
2019-11-01 9:32 ` Ilya Maximets
2019-11-03 6:48 ` Shahaf Shuler
2019-11-03 15:27 ` Ananyev, Konstantin
2019-11-03 22:09 ` Thomas Monjalon
2019-11-07 14:44 ` Thomas Monjalon
2019-11-04 10:28 ` Ilya Maximets
2019-11-04 14:30 ` Asaf Penso
2019-11-04 14:58 ` Ilya Maximets
2019-11-04 20:33 ` Shahaf Shuler
2019-11-05 12:15 ` Ilya Maximets
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=30f761f1-a62f-ced5-c505-781c480628e5@ovn.org \
--to=i.maximets@ovn.org \
--cc=arybchenko@solarflare.com \
--cc=dev@dpdk.org \
--cc=ferruh.yigit@intel.com \
--cc=jerinjacobk@gmail.com \
--cc=shahafs@mellanox.com \
--cc=stephen@networkplumber.org \
--cc=thomas@monjalon.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).