Dear all,
I am running a VNF using SR-IOV with the 82599ES NIC.
The VNF needs to receive traffic, which is unequal to the adapters MAC.
As of now, the VNF is not receiving a single unicast-packet due to the mac-mismatch.
So to me I do need promisc-mode for given virtual-function.
My tries to get the same configured are failing, so kindly asking for help.
root@ubuntu-cg:~# dev=ens4f0
root@ubuntu-cg:~# vf=0
root@ubuntu-cg:~# ethtool -i $dev
driver: ixgbe
version: 5.6.3
firmware-version: 0x681b0001, 1.853.0
expansion-rom-version:
bus-info: 0000:81:00.0
supports-statistics: yes
supports-test: yes
supports-eeprom-access: yes
supports-register-dump: yes
supports-priv-flags: yes
root@ubuntu-cg:~# ethtool -k $dev
Features for ens4f0:
rx-checksumming: on
tx-checksumming: on
tx-checksum-ipv4: on
tx-checksum-ip-generic: off [fixed]
tx-checksum-ipv6: on
tx-checksum-fcoe-crc: on [fixed]
tx-checksum-sctp: off [fixed]
scatter-gather: on
tx-scatter-gather: on
tx-scatter-gather-fraglist: off [fixed]
tcp-segmentation-offload: on
tx-tcp-segmentation: on
tx-tcp-ecn-segmentation: off [fixed]
tx-tcp6-segmentation: on
udp-fragmentation-offload: off [fixed]
generic-segmentation-offload: on
generic-receive-offload: on
large-receive-offload: off [fixed]
rx-vlan-offload: on
tx-vlan-offload: on
ntuple-filters: off
receive-hashing: on
highdma: on [fixed]
rx-vlan-filter: on
vlan-challenged: off [fixed]
tx-lockless: off [fixed]
netns-local: off [fixed]
tx-gso-robust: off [fixed]
tx-fcoe-segmentation: on [fixed]
tx-gre-segmentation: off [fixed]
tx-ipip-segmentation: off [fixed]
tx-sit-segmentation: off [fixed]
tx-udp_tnl-segmentation: off [fixed]
fcoe-mtu: off [fixed]
tx-nocache-copy: off
loopback: off [fixed]
rx-fcs: off [fixed]
rx-all: off [fixed]
tx-vlan-stag-hw-insert: off [fixed]
rx-vlan-stag-hw-parse: off [fixed]
rx-vlan-stag-filter: off [fixed]
l2-fwd-offload: off [fixed]
busy-poll: on [fixed]
hw-tc-offload: off
I am wondering why the privacy-flags only show the flow-director and nothing more??
root@ubuntu-cg:~# ethtool --show-priv-flags $dev
Private flags for ens4f0:
flow-director-atr: off
virtual-functions are enabled
===================
root@ubuntu-cg:~# virsh nodedev-dumpxml pci_0000_81_00_0
<device>
<name>pci_0000_81_00_0</name>
<path>/sys/devices/pci0000:80/0000:80:01.0/0000:81:00.0</path>
<parent>pci_0000_80_01_0</parent>
<driver>
<name>ixgbe</name>
</driver>
<capability type='pci'>
<domain>0</domain>
<bus>129</bus>
<slot>0</slot>
<function>0</function>
<product id='0x10fb'>82599ES 10-Gigabit SFI/SFP+ Network Connection</product>
<vendor id='0x8086'>Intel Corporation</vendor>
<capability type='virt_functions' maxCount='63'>
<address domain='0x0000' bus='0x81' slot='0x10' function='0x0'/>
<address domain='0x0000' bus='0x81' slot='0x10' function='0x2'/>
<address domain='0x0000' bus='0x81' slot='0x10' function='0x4'/>
<address domain='0x0000' bus='0x81' slot='0x10' function='0x6'/>
<address domain='0x0000' bus='0x81' slot='0x11' function='0x0'/>
<address domain='0x0000' bus='0x81' slot='0x11' function='0x2'/>
<address domain='0x0000' bus='0x81' slot='0x11' function='0x4'/>
<address domain='0x0000' bus='0x81' slot='0x11' function='0x6'/>
</capability>
<iommuGroup number='55'>
<address domain='0x0000' bus='0x81' slot='0x00' function='0x0'/>
</iommuGroup>
<numa node='1'/>
<pci-express>
<link validity='cap' port='0' speed='5' width='8'/>
<link validity='sta' speed='5' width='8'/>
</pci-express>
</capability>
</device>
I tried the below commands to get it fixed:
root@ubuntu-cg:~# ip link set dev $dev vf $vf trust on
root@ubuntu-cg:~# ip link set dev $dev vf $vf spoofchk off
root@ubuntu-cg:~# ethtool --set-priv-flags $dev vf-true-promisc-support on
ethtool: bad command line argument(s)
I thought that the --set-priv-flags "vf-true-promisc-support" should be the solution, somehow the command fails when trying to execute it.
Any pointer how to proceed here very much appreciated.
If promisc-mode for the vf is not the right approach, kindly let me know.
OS is ubuntu 16.04
many thanks
christian
