Ethernet Products
Determine ramifications of Intel® Ethernet products and technologies
4811 Discussions

patches to disable anti-spoofing in VF (igb & ixgbe)

TChun9
Beginner
1,939 Views

Attached please find two patches for the igb and ixdbe drivers that allow a guest instance to set the MAC address.

To enable such features, you need to run this on the host:

ip link set dev vf < index> spoofchk off

The igb patch is based on version 5.3.3.5.

The ixgbe patch is based on redhat el7 3.10.0.-327.4.5.el7 kernel. (i.e. linux-3.10.0-327.4.5.el7.x86_64/drivers/net/ethernet/intel/ixgbe)

Let me know if that make sense?

0 Kudos
7 Replies
SYeo3
Valued Contributor I
979 Views

Hi tonychung,

Thank you for contacting Intel. We'll further check on this.

I apologize for the delay.

Sincerely,

Sandy

0 Kudos
SYeo3
Valued Contributor I
979 Views

Hi tonychung,

Can you also provide your network adapter models, those using igb and ixgbe drivers? Thanks.

Sincerely,

Sandy

0 Kudos
TChun9
Beginner
979 Views

ixgbe:

06:00.0 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 01)

06:00.1 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 01)

igb:

01:00.0 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)

01:00.1 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)

I created the igb patch first and later created the ixgbe patch which seems to much simple. So the igb.patch can be simplified just like the ixgbe patch.

However, is this reasonable thing to do? Do I miss anything?

0 Kudos
SYeo3
Valued Contributor I
979 Views

Hi tonychung,

Please confirm what would you like to achieve with the patch? Is it to disable anti-spoofing or allow guest to set MAC Address?

Sincerely,

Sandy

0 Kudos
TChun9
Beginner
979 Views

The goal is to allow guest to set MAC address and still pass traffic ( disable anti-spoofing).

For ixgbevf, guest can set MAC address but no traffic is allowed.

For igbvf, guest cannot even set MAC address!

The patches allow guest to set MAC address after the admin turn spoofchk off on the host.

It is not practical for an admin to set the MAC address for the guest on the host.

The guest need to set the VRRP MAC address that happen during a failover.

0 Kudos
SYeo3
Valued Contributor I
979 Views

Hi tonychung,

Thanks for the clarification. We'll check on it.

Sincerely,

Sandy

0 Kudos
SYeo3
Valued Contributor I
979 Views

Hi tonychung,

 

We are unable to support on your configuration. We suggest to submit your inquiry to https://sourceforge.net/ sourceforge mailing list.

 

Sincerely,

 

Sandy

 

0 Kudos
Reply