From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephen Hemminger Subject: Re: How do you setup a VM in Promiscuous Mode using PCI Pass-Through (SR-IOV)? Date: Thu, 14 May 2015 16:47:19 -0700 Message-ID: <20150514164719.7b68b0ef@urahara> References: <9478F0FB69DAA249AF0A9BDA1E6ED95218817AB9@US70TWXCHMBA07.zam.alcatel-lucent.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: "dev@dpdk.org" To: "Assaad, Sami (Sami)" Return-path: Received: from mail-pd0-f180.google.com (mail-pd0-f180.google.com [209.85.192.180]) by dpdk.org (Postfix) with ESMTP id E90BA5A38 for ; Fri, 15 May 2015 01:47:46 +0200 (CEST) Received: by pdea3 with SMTP id a3so2803421pde.1 for ; Thu, 14 May 2015 16:47:46 -0700 (PDT) In-Reply-To: <9478F0FB69DAA249AF0A9BDA1E6ED95218817AB9@US70TWXCHMBA07.zam.alcatel-lucent.com> List-Id: patches and discussions about DPDK List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" On Thu, 14 May 2015 21:38:24 +0000 "Assaad, Sami (Sami)" wrote: > Hello, > > My Hardware consists of the following: > - DL380 Gen 9 Server supporting two Haswell Processors (Xeon CPU E5-2680 v3 @ 2.50GHz) > - An x540 Ethernet Controller Card supporting 2x10G ports. > > Software: > - CentOS 7 (3.10.0-229.1.2.el7.x86_64) > - DPDK 1.8 > > I want all the network traffic received on the two 10G ports to be transmitted to my VM. The issue is that the Virtual Function / Physical Functions have setup the internal virtual switch to only route Ethernet packets with destination MAC address matching the VM virtual interface MAC. How can I configure my virtual environment to provide all network traffic to the VM...i.e. set the virtual functions for both PCI devices in Promiscuous mode? > > [ If a l2fwd-vf example exists, this would actually solve this problem ... Is there a DPDK l2fwd-vf example available? ] > > > Thanks in advance. > > Best Regards, > Sami Assaad. This is a host side (not DPDK) issue. Intel PF driver will not allow guest (VF) to go into promiscious mode since it would allow traffic stealing which is a security violation.