patches to disable anti-spoofing in VF (igb & ixgbe)

[TChun9]

Attached please find two patches for the igb and ixdbe drivers that allow a guest instance to set the MAC address.

To enable such features, you need to run this on the host:

ip link set dev vf < index> spoofchk off

The igb patch is based on version 5.3.3.5.

The ixgbe patch is based on redhat el7 3.10.0.-327.4.5.el7 kernel. (i.e. linux-3.10.0-327.4.5.el7.x86_64/drivers/net/ethernet/intel/ixgbe)

Let me know if that make sense?

[SYeo3]

Hi tonychung,

Thank you for contacting Intel. We'll further check on this.

I apologize for the delay.

Sincerely,

Sandy

[SYeo3]

Hi tonychung,

Can you also provide your network adapter models, those using igb and ixgbe drivers? Thanks.

Sincerely,

Sandy

[TChun9]

ixgbe:

06:00.0 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 01)

06:00.1 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 01)

igb:

01:00.0 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)

01:00.1 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)

I created the igb patch first and later created the ixgbe patch which seems to much simple. So the igb.patch can be simplified just like the ixgbe patch.

However, is this reasonable thing to do? Do I miss anything?

[SYeo3]

Hi tonychung,

Please confirm what would you like to achieve with the patch? Is it to disable anti-spoofing or allow guest to set MAC Address?

Sincerely,

Sandy

[TChun9]

The goal is to allow guest to set MAC address and still pass traffic ( disable anti-spoofing).

For ixgbevf, guest can set MAC address but no traffic is allowed.

For igbvf, guest cannot even set MAC address!

The patches allow guest to set MAC address after the admin turn spoofchk off on the host.

It is not practical for an admin to set the MAC address for the guest on the host.

The guest need to set the VRRP MAC address that happen during a failover.

[SYeo3]

Hi tonychung,

Thanks for the clarification. We'll check on it.

Sincerely,

Sandy

[SYeo3]

Hi tonychung,

We are unable to support on your configuration. We suggest to submit your inquiry to https://sourceforge.net/ sourceforge mailing list.

Sincerely,

Sandy