Community
cancel
Showing results for 
Search instead for 
Did you mean: 
TChun9
Beginner
1,054 Views

patches to disable anti-spoofing in VF (igb & ixgbe)

Attached please find two patches for the igb and ixdbe drivers that allow a guest instance to set the MAC address.

To enable such features, you need to run this on the host:

ip link set dev vf < index> spoofchk off

The igb patch is based on version 5.3.3.5.

The ixgbe patch is based on redhat el7 3.10.0.-327.4.5.el7 kernel. (i.e. linux-3.10.0-327.4.5.el7.x86_64/drivers/net/ethernet/intel/ixgbe)

Let me know if that make sense?

0 Kudos
7 Replies
SYeo3
Valued Contributor I
94 Views

Hi tonychung,

Thank you for contacting Intel. We'll further check on this.

I apologize for the delay.

Sincerely,

Sandy

SYeo3
Valued Contributor I
94 Views

Hi tonychung,

Can you also provide your network adapter models, those using igb and ixgbe drivers? Thanks.

Sincerely,

Sandy

TChun9
Beginner
94 Views

ixgbe:

06:00.0 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 01)

06:00.1 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 01)

igb:

01:00.0 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)

01:00.1 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)

I created the igb patch first and later created the ixgbe patch which seems to much simple. So the igb.patch can be simplified just like the ixgbe patch.

However, is this reasonable thing to do? Do I miss anything?

SYeo3
Valued Contributor I
94 Views

Hi tonychung,

Please confirm what would you like to achieve with the patch? Is it to disable anti-spoofing or allow guest to set MAC Address?

Sincerely,

Sandy

TChun9
Beginner
94 Views

The goal is to allow guest to set MAC address and still pass traffic ( disable anti-spoofing).

For ixgbevf, guest can set MAC address but no traffic is allowed.

For igbvf, guest cannot even set MAC address!

The patches allow guest to set MAC address after the admin turn spoofchk off on the host.

It is not practical for an admin to set the MAC address for the guest on the host.

The guest need to set the VRRP MAC address that happen during a failover.

SYeo3
Valued Contributor I
94 Views

Hi tonychung,

Thanks for the clarification. We'll check on it.

Sincerely,

Sandy

SYeo3
Valued Contributor I
94 Views

Hi tonychung,

 

We are unable to support on your configuration. We suggest to submit your inquiry to https://sourceforge.net/ sourceforge mailing list.

 

Sincerely,

 

Sandy

 

Reply