Re: [E1000-devel] i40e driver - trusted VF features
Thank you guys. BR, Wojciech From: Laurent Dumont Sent: Friday, October 9, 2020 1:00 AM To: Fujinaka, Todd Cc: Majcher Wojciech - Hurt ; e1000-devel@lists.sourceforge.net Subject: Re: [E1000-devel] i40e driver - trusted VF features FYI - this was the answer on the same ML :) Kepczynski, Tomasz mailto:tomasz.kepczyn...@intel.com>> Tue, May 12, 8:13 AM [https://mail.google.com/mail/u/0/images/cleardot.gif] to me [https://mail.google.com/mail/u/0/images/cleardot.gif] Polish English Translate message Turn off for: Polish Hi Dumont There is PF enforced limit on a number of allowed VLANs per UNTRUSTED VF - to prevent malicious VF from grabbing all resources and as you noted - it is set to 8 VLANs. Trusted VF is allowed to get as many VLANs as possible - to HW limits. Please note this could mean other VFs may not get them AT ALL. Tomek On Thu, Oct 8, 2020 at 6:58 PM Laurent Dumont mailto:laurentfdum...@gmail.com>> wrote: There was one other feature that seem to be enabled when a VF is trusted : more than 8 vlans on a single VF (while not using vlan filters) It seems to be highly dependent on drivers/firmware/NIC cards to pass more than 8 vlans on a single VF, we had to set it trusted. On Thu, Oct 8, 2020 at 6:54 PM Fujinaka, Todd mailto:todd.fujin...@intel.com>> wrote: I checked around and was told that promiscuous mode and MAC manipulation are the features that are enabled. At this time, there aren't any other features. Todd Fujinaka Software Application Engineer Data Center Group Intel Corporation todd.fujin...@intel.com<mailto:todd.fujin...@intel.com> -Original Message- From: Majcher Wojciech - Hurt mailto:wojciech.majc...@orange.com>> Sent: Tuesday, October 6, 2020 6:21 AM To: e1000-devel@lists.sourceforge.net<mailto:e1000-devel@lists.sourceforge.net> Subject: [E1000-devel] i40e driver - trusted VF features Hello, I am wondering if there is any information/document about what exact features are turned on while switching VF into trust mode? I've found docs saying only that trust mode allows "for example" promisc mode on VF or MAC address manipulation. I would like to know all the features of trusted VF in comparison to untrusted VF. My i40e driver version: 2.3.2-k Thank you in advance. BR, Wojciech ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net<mailto:E1000-devel@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net<mailto:E1000-devel@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet
Re: [E1000-devel] i40e driver - trusted VF features
There was one other feature that seem to be enabled when a VF is trusted : more than 8 vlans on a single VF (while not using vlan filters) It seems to be highly dependent on drivers/firmware/NIC cards to pass more than 8 vlans on a single VF, we had to set it trusted. On Thu, Oct 8, 2020 at 6:54 PM Fujinaka, Todd wrote: > I checked around and was told that promiscuous mode and MAC manipulation > are the features that are enabled. At this time, there aren't any other > features. > > Todd Fujinaka > Software Application Engineer > Data Center Group > Intel Corporation > todd.fujin...@intel.com > > -Original Message- > From: Majcher Wojciech - Hurt > Sent: Tuesday, October 6, 2020 6:21 AM > To: e1000-devel@lists.sourceforge.net > Subject: [E1000-devel] i40e driver - trusted VF features > > Hello, > > I am wondering if there is any information/document about what exact > features are turned on while switching VF into trust mode? I've found docs > saying only that trust mode allows "for example" promisc mode on VF or MAC > address manipulation. I would like to know all the features of trusted VF > in comparison to untrusted VF. > > My i40e driver version: 2.3.2-k > > Thank you in advance. > > BR, > Wojciech > > > > ___ > E1000-devel mailing list > E1000-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/e1000-devel > To learn more about Intel Ethernet, visit > https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet > > > ___ > E1000-devel mailing list > E1000-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/e1000-devel > To learn more about Intel Ethernet, visit > https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet > ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet
Re: [E1000-devel] i40e driver - trusted VF features
FYI - this was the answer on the same ML :) Kepczynski, Tomasz Tue, May 12, 8:13 AM to me Polish English Translate message Turn off for: Polish Hi Dumont There is PF enforced limit on a number of allowed VLANs per UNTRUSTED VF - to prevent malicious VF from grabbing all resources and as you noted - it is set to 8 VLANs. Trusted VF is allowed to get as many VLANs as possible - to HW limits. Please note this could mean other VFs may not get them AT ALL. Tomek On Thu, Oct 8, 2020 at 6:58 PM Laurent Dumont wrote: > There was one other feature that seem to be enabled when a VF is trusted : > more than 8 vlans on a single VF (while not using vlan filters) > > It seems to be highly dependent on drivers/firmware/NIC cards to pass more > than 8 vlans on a single VF, we had to set it trusted. > > On Thu, Oct 8, 2020 at 6:54 PM Fujinaka, Todd > wrote: > >> I checked around and was told that promiscuous mode and MAC manipulation >> are the features that are enabled. At this time, there aren't any other >> features. >> >> Todd Fujinaka >> Software Application Engineer >> Data Center Group >> Intel Corporation >> todd.fujin...@intel.com >> >> -Original Message- >> From: Majcher Wojciech - Hurt >> Sent: Tuesday, October 6, 2020 6:21 AM >> To: e1000-devel@lists.sourceforge.net >> Subject: [E1000-devel] i40e driver - trusted VF features >> >> Hello, >> >> I am wondering if there is any information/document about what exact >> features are turned on while switching VF into trust mode? I've found docs >> saying only that trust mode allows "for example" promisc mode on VF or MAC >> address manipulation. I would like to know all the features of trusted VF >> in comparison to untrusted VF. >> >> My i40e driver version: 2.3.2-k >> >> Thank you in advance. >> >> BR, >> Wojciech >> >> >> >> ___ >> E1000-devel mailing list >> E1000-devel@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/e1000-devel >> To learn more about Intel Ethernet, visit >> https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet >> >> >> ___ >> E1000-devel mailing list >> E1000-devel@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/e1000-devel >> To learn more about Intel Ethernet, visit >> https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet >> > ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet
Re: [E1000-devel] i40e driver - trusted VF features
I checked around and was told that promiscuous mode and MAC manipulation are the features that are enabled. At this time, there aren't any other features. Todd Fujinaka Software Application Engineer Data Center Group Intel Corporation todd.fujin...@intel.com -Original Message- From: Majcher Wojciech - Hurt Sent: Tuesday, October 6, 2020 6:21 AM To: e1000-devel@lists.sourceforge.net Subject: [E1000-devel] i40e driver - trusted VF features Hello, I am wondering if there is any information/document about what exact features are turned on while switching VF into trust mode? I've found docs saying only that trust mode allows "for example" promisc mode on VF or MAC address manipulation. I would like to know all the features of trusted VF in comparison to untrusted VF. My i40e driver version: 2.3.2-k Thank you in advance. BR, Wojciech ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet ___ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel Ethernet, visit https://forums.intel.com/s/topic/0TO0P0018NbWAI/intel-ethernet
