* [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? @ 2013-08-22 20:44 Stephan von Krawczynski 2013-08-22 21:49 ` Marek Kierdelewicz 0 siblings, 1 reply; 6+ messages in thread From: Stephan von Krawczynski @ 2013-08-22 20:44 UTC (permalink / raw) To: bridge; +Cc: netdev Hello all, first it seemed a trivial question to me, but since I could not find anybody being neither able to answer this question nor giving a short config example I'd like to ask here, maybe this is the right place. My general idea is to bridge tagged vlan packets from a physical interface (intel) to a virtual interface (virtio in qemu) and not losing the tags, so the qemu guest can use vconfig and friends to get some vlan interfaces. Is this possible and are there any additional steps necessary besides the usual bridge configuration? What bothers me especially is the vlan filtering done by nics which can prevent to even receive the packets from the LAN. And on the other side of course can the bridge code forward packets including tags so that virtio is able to handle them? -- Regards, Stephan ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? 2013-08-22 20:44 [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? Stephan von Krawczynski @ 2013-08-22 21:49 ` Marek Kierdelewicz 2013-08-22 22:19 ` Stephen Hemminger 0 siblings, 1 reply; 6+ messages in thread From: Marek Kierdelewicz @ 2013-08-22 21:49 UTC (permalink / raw) To: Stephan von Krawczynski; +Cc: netdev, bridge Hi, >My general idea is to bridge tagged vlan packets from a physical >interface (intel) to a virtual interface (virtio in qemu) and not >losing the tags, so the qemu guest can use vconfig and friends to get >some vlan interfaces. Is this possible and are there any additional >steps necessary besides the usual bridge configuration? I'm using this setup with KVM virtualization (Qemu's successor). It didn't work with default nic type for guest (realtek I think) as 802.1q tags were not preserved properly in one of the directions. I don't remember specifics. Anyway using e1000 driver instead of default fixed it. Works like a charm. Best regards, Marek Kierdelewicz ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? 2013-08-22 21:49 ` Marek Kierdelewicz @ 2013-08-22 22:19 ` Stephen Hemminger 2013-08-23 4:22 ` Stephan von Krawczynski 0 siblings, 1 reply; 6+ messages in thread From: Stephen Hemminger @ 2013-08-22 22:19 UTC (permalink / raw) To: Marek Kierdelewicz; +Cc: bridge, Stephan von Krawczynski, netdev On Thu, 22 Aug 2013 23:49:41 +0200 Marek Kierdelewicz <marek@piasta.pl> wrote: > Hi, > > >My general idea is to bridge tagged vlan packets from a physical > >interface (intel) to a virtual interface (virtio in qemu) and not > >losing the tags, so the qemu guest can use vconfig and friends to get > >some vlan interfaces. Is this possible and are there any additional > >steps necessary besides the usual bridge configuration? > > I'm using this setup with KVM virtualization (Qemu's successor). It > didn't work with default nic type for guest (realtek I think) as 802.1q > tags were not preserved properly in one of the directions. I don't > remember specifics. Anyway using e1000 driver instead of default fixed > it. Works like a charm. KVM e1000 Vnic doesn't do VLAN offloading at least in my experience. Virtio works fine. ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? 2013-08-22 22:19 ` Stephen Hemminger @ 2013-08-23 4:22 ` Stephan von Krawczynski 2013-08-23 4:58 ` Jeff Kirsher 0 siblings, 1 reply; 6+ messages in thread From: Stephan von Krawczynski @ 2013-08-23 4:22 UTC (permalink / raw) To: Stephen Hemminger; +Cc: Marek Kierdelewicz, bridge, netdev On Thu, 22 Aug 2013 15:19:41 -0700 Stephen Hemminger <stephen@networkplumber.org> wrote: > On Thu, 22 Aug 2013 23:49:41 +0200 > Marek Kierdelewicz <marek@piasta.pl> wrote: > > > Hi, > > > > >My general idea is to bridge tagged vlan packets from a physical > > >interface (intel) to a virtual interface (virtio in qemu) and not > > >losing the tags, so the qemu guest can use vconfig and friends to get > > >some vlan interfaces. Is this possible and are there any additional > > >steps necessary besides the usual bridge configuration? > > > > I'm using this setup with KVM virtualization (Qemu's successor). It > > didn't work with default nic type for guest (realtek I think) as 802.1q > > tags were not preserved properly in one of the directions. I don't > > remember specifics. Anyway using e1000 driver instead of default fixed > > it. Works like a charm. > > KVM e1000 Vnic doesn't do VLAN offloading at least in my experience. > Virtio works fine. Ok guys, here is one of the major questions in this issue: How did you manage to convince the _host_ interface driver (in my setup "igb" from intel) to get the vlan tagged packets from the LAN port. igb has a vlan filter function built in and reads _no_ tagged packets at all if the driver does not tell it to. And in case of "up-ing" the interface for attachment to a bridge it does not configure this vlan filter. How is this expected to work? -- Regards, Stephan ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? 2013-08-23 4:22 ` Stephan von Krawczynski @ 2013-08-23 4:58 ` Jeff Kirsher 2013-08-26 10:21 ` Stephan von Krawczynski 0 siblings, 1 reply; 6+ messages in thread From: Jeff Kirsher @ 2013-08-23 4:58 UTC (permalink / raw) To: Stephan von Krawczynski, Carolyn Wyborny, mitch.a.williams Cc: Stephen Hemminger, Marek Kierdelewicz, bridge, netdev Adding Carolyn Wyborny (igb maintainer) and Mitch Williams (igbvf maintainer)... On Thu, Aug 22, 2013 at 9:22 PM, Stephan von Krawczynski <skraw@ithnet.com> wrote: > On Thu, 22 Aug 2013 15:19:41 -0700 > Stephen Hemminger <stephen@networkplumber.org> wrote: > >> On Thu, 22 Aug 2013 23:49:41 +0200 >> Marek Kierdelewicz <marek@piasta.pl> wrote: >> >> > Hi, >> > >> > >My general idea is to bridge tagged vlan packets from a physical >> > >interface (intel) to a virtual interface (virtio in qemu) and not >> > >losing the tags, so the qemu guest can use vconfig and friends to get >> > >some vlan interfaces. Is this possible and are there any additional >> > >steps necessary besides the usual bridge configuration? >> > >> > I'm using this setup with KVM virtualization (Qemu's successor). It >> > didn't work with default nic type for guest (realtek I think) as 802.1q >> > tags were not preserved properly in one of the directions. I don't >> > remember specifics. Anyway using e1000 driver instead of default fixed >> > it. Works like a charm. >> >> KVM e1000 Vnic doesn't do VLAN offloading at least in my experience. >> Virtio works fine. > > Ok guys, here is one of the major questions in this issue: > > How did you manage to convince the _host_ interface driver (in my setup "igb" > from intel) to get the vlan tagged packets from the LAN port. igb has a vlan > filter function built in and reads _no_ tagged packets at all if the driver > does not tell it to. And in case of "up-ing" the interface for attachment to a > bridge it does not configure this vlan filter. > How is this expected to work? > > -- > Regards, > Stephan > > -- > To unsubscribe from this list: send the line "unsubscribe netdev" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Cheers, Jeff ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? 2013-08-23 4:58 ` Jeff Kirsher @ 2013-08-26 10:21 ` Stephan von Krawczynski 0 siblings, 0 replies; 6+ messages in thread From: Stephan von Krawczynski @ 2013-08-26 10:21 UTC (permalink / raw) To: Jeff Kirsher Cc: bridge, Marek Kierdelewicz, mitch.a.williams, Stephen Hemminger, netdev, Carolyn Wyborny On Thu, 22 Aug 2013 21:58:58 -0700 Jeff Kirsher <jeffrey.t.kirsher@intel.com> wrote: > Adding Carolyn Wyborny (igb maintainer) and Mitch Williams (igbvf maintainer)... > > On Thu, Aug 22, 2013 at 9:22 PM, Stephan von Krawczynski > <skraw@ithnet.com> wrote: > > On Thu, 22 Aug 2013 15:19:41 -0700 > > Stephen Hemminger <stephen@networkplumber.org> wrote: > > > >> On Thu, 22 Aug 2013 23:49:41 +0200 > >> Marek Kierdelewicz <marek@piasta.pl> wrote: > >> > >> > Hi, > >> > > >> > >My general idea is to bridge tagged vlan packets from a physical > >> > >interface (intel) to a virtual interface (virtio in qemu) and not > >> > >losing the tags, so the qemu guest can use vconfig and friends to get > >> > >some vlan interfaces. Is this possible and are there any additional > >> > >steps necessary besides the usual bridge configuration? > >> > > >> > I'm using this setup with KVM virtualization (Qemu's successor). It > >> > didn't work with default nic type for guest (realtek I think) as 802.1q > >> > tags were not preserved properly in one of the directions. I don't > >> > remember specifics. Anyway using e1000 driver instead of default fixed > >> > it. Works like a charm. > >> > >> KVM e1000 Vnic doesn't do VLAN offloading at least in my experience. > >> Virtio works fine. > > > > Ok guys, here is one of the major questions in this issue: > > > > How did you manage to convince the _host_ interface driver (in my setup "igb" > > from intel) to get the vlan tagged packets from the LAN port. igb has a vlan > > filter function built in and reads _no_ tagged packets at all if the driver > > does not tell it to. And in case of "up-ing" the interface for attachment to a > > bridge it does not configure this vlan filter. > > How is this expected to work? > > > > -- > > Regards, > > Stephan Thanks Jeff, so, since we are all here now :-) who can explain how one can tell either the bridge or the attached network device to include certain VLAN IDs in its HW filters so that these can be forwarded through the bridge? From the current infos it looks like a cheap network card with no HW filters would just work (if I understood Stephen). But since most servers have either intel cards or intel onboard chips (and they are brilliant in performance btw) me and probably lots of others seem to need some solution that isn't currently available. I would love to see something that really allows the card to still use the filters and not switch it in complete promiscous mode so that every packets floats in. Any ideas? -- Regards, Stephan ^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2013-08-26 10:21 UTC | newest] Thread overview: 6+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2013-08-22 20:44 [Bridge] Can linux kernel bridge forward 802.1q tagged vlan packets? Stephan von Krawczynski 2013-08-22 21:49 ` Marek Kierdelewicz 2013-08-22 22:19 ` Stephen Hemminger 2013-08-23 4:22 ` Stephan von Krawczynski 2013-08-23 4:58 ` Jeff Kirsher 2013-08-26 10:21 ` Stephan von Krawczynski
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox