From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 0C3A7A00BE; Wed, 30 Oct 2019 10:15:20 +0100 (CET) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id B93B61BF55; Wed, 30 Oct 2019 10:15:18 +0100 (CET) Received: from mail-il1-f195.google.com (mail-il1-f195.google.com [209.85.166.195]) by dpdk.org (Postfix) with ESMTP id 13E8C1BEE0 for ; Wed, 30 Oct 2019 10:15:17 +0100 (CET) Received: by mail-il1-f195.google.com with SMTP id d83so1461259ilk.7 for ; Wed, 30 Oct 2019 02:15:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=83cCkMhGK4JUbkwefRG+YThsvBfT65k7XKvoIqbdbhU=; b=WRjEb/PgRCA8xHt2C869EVbysafAD/J2QrD3dsslL64kwReg0kV9Qyyhq56n09ADkg OVweBOf52JAbKCwwrytW017zb89kdzWsMibc7LeiKhTh1jUClHkZCgpjEvLH5kneAHNP UQPTHuLL437CZpqSFfBCchjNWqklwlSKzUAUKqSkopPJB5n6oLNC3tvcvqMNhwY1Z/15 OUY5pyaxahhaXNDhE5KERKFOxe25fpiGJhpNZxjqNbJo/9MSjc7ku1GuKSyDn95WGBYE YzZan9Gz59dUXfHTHFgnnnIpwAaUO2HZFqRheucqJahjIPNVuDts8lUOWGo6u6nx3tyG UMMw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=83cCkMhGK4JUbkwefRG+YThsvBfT65k7XKvoIqbdbhU=; b=imPXjB1oOlSHcQc0zAwY/Vj/DRcP1hnNlM4FrIthqZbUvdnNLdz1OtGSw+nzzru1Kf xK/O9ss3aO12oxcg+w4FfrRGcyOfqH45mtBa1C0WwhiCv/QP8u/yaF6Zl0e+1My+xAza 3rafNLNXoReOQFNPXXQkz7kOqzhv3AS2n4m+oQ1SZJ/XrpTsD/brSvwfWB880VKhD/9l J+VG3TQZUo+/TbxCw4lRQalrk+j5iSHXfPloetQP9XxMt5rH9SfhmZnel8NQ5cHxNG7W hyiQWYTTiEs4e6tcj+cw0k+rOuSmqrvVrUAQh6DHTXqdxWqKaHbn7ou2d0DhjRgc+8gr nUtw== X-Gm-Message-State: APjAAAWgAEvuSen0oadKuB8ByKaHlaw0ho6lcMyLZYfTsH/w7XML7iF4 z5ZBebUMmaWu/9DRfUC2lMf5cP7ZG1y7TfCOtlA= X-Google-Smtp-Source: APXvYqyaFkeDxGhxRjxCYSoYlS2MWA4bhRDjtdEB8ME8vYegpTtbuJec9iEqbMQSl4BsuntImWxl5kJKjAn90l/D2Ig= X-Received: by 2002:a92:aa48:: with SMTP id j69mr32523474ili.162.1572426915992; Wed, 30 Oct 2019 02:15:15 -0700 (PDT) MIME-Version: 1.0 References: <4165509.5enYigmRGf@xps> <20191029185051.32203-1-thomas@monjalon.net> <4976847.S65dXbhd2F@xps> In-Reply-To: <4976847.S65dXbhd2F@xps> From: Jerin Jacob Date: Wed, 30 Oct 2019 14:45:00 +0530 Message-ID: To: Thomas Monjalon Cc: Stephen Hemminger , Andrew Rybchenko , Ferruh Yigit , dpdk-dev Content-Type: text/plain; charset="UTF-8" Subject: Re: [dpdk-dev] [PATCH v2 0/3] ethdev: configure SR-IOV VF from host X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" On Wed, Oct 30, 2019 at 2:26 PM Thomas Monjalon wrote: > > 30/10/2019 05:08, Jerin Jacob: > > On Wed, Oct 30, 2019 at 12:21 AM Thomas Monjalon wrote: > > > > > > In a virtual environment, the network controller may have to configure > > > some SR-IOV VF parameters for security reasons. > > > > Just to understand, Could you explain more details/examples for > > security reasons? > > Examples are setting the MAC address or the promiscuous mode. > These settings should be decided by the hypervisor, > and not freely set by the VM. What is hypervisor here, rte_flow based DPDK application over using port representor? > > > > When the PF (host port) is driven by DPDK (OVS-DPDK case), > > > we face two different cases: > > > - driver is bifurcated (Mellanox case), > > > so the VF can be configured via the kernel. > > > - driver is on top of UIO or VFIO, so DPDK API is required, > > > > Not true. Both UIO and VFIO are NOT allowed to create SRIOV VF from > > the PF device. > > It is only allowed through igb-uio out of tree driver without iommu support. > > Not sure I said the contrary. > igb_uio and vfio_pf are 2 implementations of UIO and VFIO. Yes. I am saying without out of tree module it is not possible. > > > > and PMD-specific APIs were used. > > > This new generic API will avoid vendors fragmentation. > > > > The API is good. But I have concerns about the vendor implementation > > of this API. > > It can support only vendors with bifurcated driver(Mellanox case). > > or using igb_uio(non iommu case) but not the devices with VFIO(Which > > is the first-class citizen). > > Why not? (see above) > The API is agnostic to the kernel driver in use. My question is how do you enable in DPDK with VFIO if DPDK is giving this feature? > > > All the control plane control stuff to replace Linux with "port > > representor" logic > > will be of the mercy of an "out of tree" driver either with igb_uio > > or http://patches.dpdk.org/patch/58810/ > > > > I am _not against_ on DPDK supports port representor or controlling > > netdev VF traffic, > > but if we have taken that path then DPDK should have the > > infrastructure to support for > > all driver models like VFIO(Addressed in [1]) > > > > I would have this question when DPDK starts supporting port > > representor(but I was not > > aware that kernel security issue on netdev ports controlled by DPDK in > > non-bifurcated driver case > > and concise effort block such scheme by kernel [2]) > > > > > > [1] > > http://patches.dpdk.org/patch/58810/ > > [2] > > https://patchwork.kernel.org/patch/10522381/ > > I feel you are using this thread to promote your vfio_pf implementation. Yes. I am. Because, I need to think, How I can enable this API with VFIO. Otherwise, I can not implement this API. > But this API and the kernel module are orthogonals. > Please can we focus on the DPDK API in this thread, > and talk about VFIO implementation in the other thread? Yes. My concerns are we keep adding APIs without thinking about how it can be implemented in the overall scheme of things. Just API is not enough. > >