From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <sami.assaad@alcatel-lucent.com> Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-01.alcatel-lucent.com [135.245.210.20]) by dpdk.org (Postfix) with ESMTP id 2EA085A57 for <dev@dpdk.org>; Fri, 15 May 2015 14:59:44 +0200 (CEST) Received: from us70tusmtp2.zam.alcatel-lucent.com (unknown [135.5.2.64]) by Websense Email Security Gateway with ESMTPS id 4F8CDE2F9BACC; Fri, 15 May 2015 12:59:41 +0000 (GMT) Received: from US70TWXCHHUB04.zam.alcatel-lucent.com (us70twxchhub04.zam.alcatel-lucent.com [135.5.2.36]) by us70tusmtp2.zam.alcatel-lucent.com (GMO) with ESMTP id t4FCxgTO031793 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 15 May 2015 08:59:42 -0400 Received: from US70TWXCHMBA07.zam.alcatel-lucent.com ([169.254.1.180]) by US70TWXCHHUB04.zam.alcatel-lucent.com ([135.5.2.36]) with mapi id 14.03.0195.001; Fri, 15 May 2015 08:59:42 -0400 From: "Assaad, Sami (Sami)" <sami.assaad@alcatel-lucent.com> To: "Ananyev, Konstantin" <konstantin.ananyev@intel.com>, "Richardson, Bruce" <bruce.richardson@intel.com>, Stephen Hemminger <stephen@networkplumber.org> Thread-Topic: [dpdk-dev] How do you setup a VM in Promiscuous Mode using PCI Pass-Through (SR-IOV)? Thread-Index: AdCOjk4sR+QxMfZpRpCFxRUJ6L7QSgAM4liAABRBm4AAACQ1AAABRp3A Date: Fri, 15 May 2015 12:59:40 +0000 Message-ID: <9478F0FB69DAA249AF0A9BDA1E6ED95218818190@US70TWXCHMBA07.zam.alcatel-lucent.com> References: <9478F0FB69DAA249AF0A9BDA1E6ED95218817AB9@US70TWXCHMBA07.zam.alcatel-lucent.com> <20150514164719.7b68b0ef@urahara> <20150515092719.GA1520@bricha3-MOBL3> <2601191342CEEE43887BDE71AB9772582142F279@irsmsx105.ger.corp.intel.com> In-Reply-To: <2601191342CEEE43887BDE71AB9772582142F279@irsmsx105.ger.corp.intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.5.27.17] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "dev@dpdk.org" <dev@dpdk.org> Subject: Re: [dpdk-dev] How do you setup a VM in Promiscuous Mode using PCI Pass-Through (SR-IOV)? X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: patches and discussions about DPDK <dev.dpdk.org> List-Unsubscribe: <http://dpdk.org/ml/options/dev>, <mailto:dev-request@dpdk.org?subject=unsubscribe> List-Archive: <http://dpdk.org/ml/archives/dev/> List-Post: <mailto:dev@dpdk.org> List-Help: <mailto:dev-request@dpdk.org?subject=help> List-Subscribe: <http://dpdk.org/ml/listinfo/dev>, <mailto:dev-request@dpdk.org?subject=subscribe> X-List-Received-Date: Fri, 15 May 2015 12:59:44 -0000 Thanks Konstantin for your reply. Konstantin,=20 Would you be able in providing more details as to ixgbe VF mirroring?=20 Would you have any valuable URL's or documentation that explain this in det= ail and/or provide examples? Thanks in advance. Best Regards, Sami. -----Original Message----- From: Ananyev, Konstantin [mailto:konstantin.ananyev@intel.com]=20 Sent: Friday, May 15, 2015 5:31 AM To: Richardson, Bruce; Stephen Hemminger Cc: dev@dpdk.org; Assaad, Sami (Sami) Subject: RE: [dpdk-dev] How do you setup a VM in Promiscuous Mode using PCI= Pass-Through (SR-IOV)? > -----Original Message----- > From: dev [mailto:dev-bounces@dpdk.org] On Behalf Of Bruce Richardson > Sent: Friday, May 15, 2015 10:27 AM > To: Stephen Hemminger > Cc: dev@dpdk.org; Assaad, Sami (Sami) > Subject: Re: [dpdk-dev] How do you setup a VM in Promiscuous Mode using P= CI Pass-Through (SR-IOV)? >=20 > On Thu, May 14, 2015 at 04:47:19PM -0700, Stephen Hemminger wrote: > > On Thu, 14 May 2015 21:38:24 +0000 > > "Assaad, Sami (Sami)" <sami.assaad@alcatel-lucent.com> wrote: > > > > > Hello, > > > > > > My Hardware consists of the following: > > > - DL380 Gen 9 Server supporting two Haswell Processors (Xeon CPU E5= -2680 v3 @ 2.50GHz) > > > - An x540 Ethernet Controller Card supporting 2x10G ports. > > > > > > Software: > > > - CentOS 7 (3.10.0-229.1.2.el7.x86_64) > > > - DPDK 1.8 > > > > > > I want all the network traffic received on the two 10G ports to be=20 > > > transmitted to my VM. The issue is that the Virtual Function / > Physical Functions have setup the internal virtual switch to only=20 > route Ethernet packets with destination MAC address matching the VM=20 > virtual interface MAC. How can I configure my virtual environment to prov= ide all network traffic to the VM...i.e. set the virtual functions for both= PCI devices in Promiscuous mode? > > > > > > [ If a l2fwd-vf example exists, this would actually solve this=20 > > > problem ... Is there a DPDK l2fwd-vf example available? ] > > > > > > > > > Thanks in advance. > > > > > > Best Regards, > > > Sami Assaad. > > > > This is a host side (not DPDK) issue. > > > > Intel PF driver will not allow guest (VF) to go into promiscious=20 > > mode since it would allow traffic stealing which is a security violatio= n. >=20 > Could you maybe try passing the PF directly into the VM, rather than a=20 > VF based off it? Since you seem to want all traffic to go to the one=20 > VM, there seems little point in creating a VF on the device, and=20 > should let the VM control the whole NIC directly. As I remember, with ixgbe it is possible to make one VF a mirror (receive a= copy of all traffic). Konstantin >=20 > Regards, > /Bruce