[dpdk-dev] How do you setup a VM in Promiscuous Mode using PCI Pass-Through (SR-IOV)?
Bruce Richardson
bruce.richardson at intel.com
Fri May 15 11:27:19 CEST 2015
On Thu, May 14, 2015 at 04:47:19PM -0700, Stephen Hemminger wrote:
> On Thu, 14 May 2015 21:38:24 +0000
> "Assaad, Sami (Sami)" <sami.assaad at alcatel-lucent.com> wrote:
>
> > Hello,
> >
> > My Hardware consists of the following:
> > - DL380 Gen 9 Server supporting two Haswell Processors (Xeon CPU E5-2680 v3 @ 2.50GHz)
> > - An x540 Ethernet Controller Card supporting 2x10G ports.
> >
> > Software:
> > - CentOS 7 (3.10.0-229.1.2.el7.x86_64)
> > - DPDK 1.8
> >
> > I want all the network traffic received on the two 10G ports to be transmitted to my VM. The issue is that the Virtual Function / Physical Functions have setup the internal virtual switch to only route Ethernet packets with destination MAC address matching the VM virtual interface MAC. How can I configure my virtual environment to provide all network traffic to the VM...i.e. set the virtual functions for both PCI devices in Promiscuous mode?
> >
> > [ If a l2fwd-vf example exists, this would actually solve this problem ... Is there a DPDK l2fwd-vf example available? ]
> >
> >
> > Thanks in advance.
> >
> > Best Regards,
> > Sami Assaad.
>
> This is a host side (not DPDK) issue.
>
> Intel PF driver will not allow guest (VF) to go into promiscious mode
> since it would allow traffic stealing which is a security violation.
Could you maybe try passing the PF directly into the VM, rather than a VF based
off it? Since you seem to want all traffic to go to the one VM, there seems little
point in creating a VF on the device, and should let the VM control the whole
NIC directly.
Regards,
/Bruce
More information about the dev
mailing list