topic Re:[Intel E810-XXVDA2] Why are frames sent from VM discarded by SR-IOV spoofing check? in Ethernet Products

[Intel E810-XXVDA2] Why are frames sent from VM discarded by SR-IOV spoofing check?

Junya_Anritsu — Fri, 11 Oct 2024 06:31:47 GMT

Hello,

I have E810-XXVDA2 .

I created a VF and attached it to the VM.

Problem

If spoofing check is on, frames sent from the VM are discarded.

$ ip -s link show dev enp8s0 3: enp8s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 4e:09:8f:77:8f:f8 brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped missed mcast 5716 85 0 0 0 0 TX: bytes packets errors dropped carrier collsns 0 0 40 0 0 0

If spoofing check is off, it is ok.

I believe that spoofing check is unnecessary if the MAC address is paid out from the NIC.

Should I turn off spoof checking if SR-IOV pass through to a VM ?

Host-side infomation

The OS is Rocky Linux 9.4 .

The firmware is the latest version(4.60).

ethtool -i enp1s0f0 driver: ice version: 5.14.0-427.24.1.el9_4.x86_64 firmware-version: 4.60 0x8001e8b3 1.3682.0 expansion-rom-version: bus-info: 0000:01:00.0 supports-statistics: yes supports-test: yes supports-eeprom-access: yes supports-register-dump: yes supports-priv-flags: yes

Why are all the MAC address of VF the same ?

ip link show dev enp1s0f0 2: enp1s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 50:7c:6f:04:4d:32 brd ff:ff:ff:ff:ff:ff vf 0 link/ether 4e:09:8f:77:8f:f8 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off vf 1 link/ether 4e:09:8f:77:8f:f8 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off vf 2 link/ether 4e:09:8f:77:8f:f8 brd ff:ff:ff:ff:ff:ff, spoof checking off, link-state auto, trust on vf 3 link/ether 4e:09:8f:77:8f:f8 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off

Guest-side infomation

The OS is Debian 12 .

ethtool -i enp8s0 driver: iavf version: 4.10.6 firmware-version: N/A expansion-rom-version: bus-info: 0000:08:00.0 supports-statistics: yes supports-test: no supports-eeprom-access: no supports-register-dump: no

Thanks,

Re:[Intel E810-XXVDA2] Why are frames sent from VM discarded by SR-IOV spoofing check?

Sachinks — Tue, 18 Feb 2025 09:54:30 GMT

Hello Junya_Anritsu,

Thank you for posting in the Intel Community Forum. We sincerely apologize for the delay in our response.

Could you kindly let us know if the issue has been resolved, or if you require further assistance from us regarding this? Your prompt response will greatly help us in diagnosing and resolving the issue as quickly as possible.

Regards,

Sachin KS

Intel Customer Support Technician

Re:[Intel E810-XXVDA2] Why are frames sent from VM discarded by SR-IOV spoofing check?

Poojitha — Fri, 21 Feb 2025 15:41:38 GMT

Hello Junya_Anritsu,

Greetings for the day!

We are following up to check if you were able to find the information we requested. Kindly confirm at your earliest convenience, so that we can continue assisting you in resolving this matter.

We appreciate your understanding!

Regards,

Poojitha

Intel Customer Support Technician

Re:[Intel E810-XXVDA2] Why are frames sent from VM discarded by SR-IOV spoofing check?

Sachinks — Tue, 25 Feb 2025 05:27:28 GMT

Hello Junya_Anritsu,

Greetings for the day!

We would like to inform you that we are closing this request as no response has been received from our previous follow-ups.

Please don't hesitate to ask any further questions in the future. Feel free to start a new conversation, as this thread will no longer be monitored.

Regards,

Sachin KS

Intel Customer Support Technician