From mboxrd@z Thu Jan 1 00:00:00 1970 From: Gleb Natapov Subject: Re: [PATCH net-next v3 0/5]: ixgbevf: Allow querying VFs RSS indirection table and key Date: Tue, 6 Jan 2015 08:55:35 +0200 Message-ID: <20150106065535.GM29889@cloudius-systems.com> References: <1420467311-6680-1-git-send-email-vladz@cloudius-systems.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Vlad Zolotarov , netdev@vger.kernel.org, avi@cloudius-systems.com, jeffrey.t.kirsher@intel.com To: Greg Rose Return-path: Received: from mail-wi0-f179.google.com ([209.85.212.179]:53178 "EHLO mail-wi0-f179.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751797AbbAFGzk (ORCPT ); Tue, 6 Jan 2015 01:55:40 -0500 Received: by mail-wi0-f179.google.com with SMTP id ex7so4723072wid.12 for ; Mon, 05 Jan 2015 22:55:39 -0800 (PST) Content-Disposition: inline In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: On Mon, Jan 05, 2015 at 03:54:52PM -0800, Greg Rose wrote: > On Mon, Jan 5, 2015 at 6:15 AM, Vlad Zolotarov > wrote: > > Add the ethtool ops to VF driver to allow querying the RSS indirection table > > and RSS Random Key. > > > > - PF driver: Add new VF-PF channel commands. > > - VF driver: Utilize these new commands and add the corresponding > > ethtool callbacks. > > > > New in v3: > > - Added a missing support for x550 devices. > > - Mask the indirection table values according to PSRTYPE[n].RQPL. > > - Minimized the number of added VF-PF commands. > > > > New in v2: > > - Added a detailed description to patches 4 and 5. > > > > New in v1 (compared to RFC): > > - Use "if-else" statement instead of a "switch-case" for a single option case. > > More specifically: in cases where the newly added API version is the only one > > allowed. We may consider using a "switch-case" back again when the list of > > allowed API versions in these specific places grows up. > > > > Vlad Zolotarov (5): > > ixgbe: Add a RETA query command to VF-PF channel API > > ixgbevf: Add a RETA query code > > ixgbe: Add GET_RSS_KEY command to VF-PF channel commands set > > ixgbevf: Add RSS Key query code > > ixgbevf: Add the appropriate ethtool ops to query RSS indirection > > table and key > > > > drivers/net/ethernet/intel/ixgbe/ixgbe_mbx.h | 10 ++ > > drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 91 +++++++++++++++ > > drivers/net/ethernet/intel/ixgbevf/ethtool.c | 43 +++++++ > > drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +- > > drivers/net/ethernet/intel/ixgbevf/mbx.h | 10 ++ > > drivers/net/ethernet/intel/ixgbevf/vf.c | 132 ++++++++++++++++++++++ > > drivers/net/ethernet/intel/ixgbevf/vf.h | 2 + > > 7 files changed, 291 insertions(+), 1 deletion(-) > > I've given this code a review and I don't see a way to > set a policy in the PF driver as to whether this request should be > allowed or not. We cannot enable this query by default - it is a > security risk. To make this acceptable you need to do a > couple of things. > Can you please elaborate on the security risk this information poses? Is toeplitz hash function cryptographically strong enough so that VF cannot reconstruct the hash key from hash result provided in packet descriptor? The abstract of this paper [1] claims it is not, but I do not have access to the full article unfortunately hence the question. [1] http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=5503170&url=http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D5503170 -- Gleb.