docker SR-IOV with IXGBE - Vlan packets getting spoofed

[htadi]

environment:

Redhat 7.4

ixgbe, ixgbevf (82599es ethernet controller)

docker 1.13

requirement:

The docker container had to have a trunk port which is mapped to a VF.

docker guest running in privileged mode.

Problem:

when the container emits the q-in-q packets, the kernel drops as the packets are spoofed.

in the recv direction how can i classify based on the vlan (with no vlan interface in the container)?

Thanks for the help

[idata]

Hi Hari_tadiparthi,

Thank you for posting in Wired Communities. For 82599es ethernet controller, Q-in-Q VLAN is not supported. Hope this clarifies.Thanks,Sharon T

[htadi]

thanks for your answer.

Atleast the below is possible ?

if i set the vf to classify based on vlan, vf strips the tag and forwards to the container.

is it possible to configure the vf to pass the tag as it is rather than strip the tag ??

[idata]

Hi Hari_tadiparthi,

You are welcome. Just to clarify what is the entire setup? Are you trying to configure the VF on the 82599ES in a VM then forward the packets to another PC (with the same VLAN) in the same container? Please provide more information for better investigation.Regards,Sharon T

[htadi]

the container/vm need to interact with the device on the network which is sending vlan tagged the packets.

the conainer/vm need to classify the traffic based on the vlan tags.

i need the vf to handle the packets to vm without removing the tags.

[idata]

Hi Hari_tadiparthi,

Thank you for the information provided. Just to double check to clarify my understanding about your setup:1) Is the device you mentioned refer to another virtual machines? Which means you are trying to send vlan tagged packets from one VMs to another VM within the same container through a trunk port? 2) You mentioned about trunk port mapped to VF. Where is this trunk port located or configured? Thanks,Sharon T

[idata]

Hi Hari_tadiparthi,

Just to double check if your question here is similar to the question you posted in https://communities.intel.com/thread/123410 https://communities.intel.com/thread/123410. Thanks,Sharon T

[idata]

Hi Hari_tadiparthi,

Please feel free to confirm and if further assistance needed.Thanks,Sharon T