Re: [E1000-devel] i40e driver - trusted VF features

[Laurent D. <lau...@gm...>]

FYI - this was the answer on the same ML :)

Kepczynski, Tomasz <tom...@in...>
Tue, May 12, 8:13 AM
to me
Polish
English

Translate message
Turn off for: Polish
Hi Dumont

There is PF enforced limit on a number of allowed VLANs per UNTRUSTED VF -
to prevent malicious VF from grabbing all resources and as you noted - it
is set to 8 VLANs.

Trusted VF is allowed to get as many VLANs as possible - to HW limits.
Please note this could mean other VFs may not get them AT ALL.

Tomek


On Thu, Oct 8, 2020 at 6:58 PM Laurent Dumont <lau...@gm...>
wrote:

> There was one other feature that seem to be enabled when a VF is trusted :
> more than 8 vlans on a single VF (while not using vlan filters)
>
> It seems to be highly dependent on drivers/firmware/NIC cards to pass more
> than 8 vlans on a single VF, we had to set it trusted.
>
> On Thu, Oct 8, 2020 at 6:54 PM Fujinaka, Todd <tod...@in...>
> wrote:
>
>> I checked around and was told that promiscuous mode and MAC manipulation
>> are the features that are enabled. At this time, there aren't any other
>> features.
>>
>> Todd Fujinaka
>> Software Application Engineer
>> Data Center Group
>> Intel Corporation
>> tod...@in...
>>
>> -----Original Message-----
>> From: Majcher Wojciech - Hurt <Woj...@or...>
>> Sent: Tuesday, October 6, 2020 6:21 AM
>> To: e10...@li...
>> Subject: [E1000-devel] i40e driver - trusted VF features
>>
>> Hello,
>>
>> I am wondering if there is any information/document about what exact
>> features are turned on while switching VF into trust mode? I've found docs
>> saying only that trust mode allows "for example" promisc mode on VF or MAC
>> address manipulation. I would like to know all the features of trusted VF
>> in comparison to untrusted VF.
>>
>> My i40e driver version: 2.3.2-k
>>
>> Thank you in advance.
>>
>> BR,
>> Wojciech
>>
>>
>>
>> _______________________________________________
>> E1000-devel mailing list
>> E10...@li...
>> https://lists.sourceforge.net/lists/listinfo/e1000-devel
>> To learn more about Intel Ethernet, visit
>> https://forums.intel.com/s/topic/0TO0P00000018NbWAI/intel-ethernet
>>
>>
>> _______________________________________________
>> E1000-devel mailing list
>> E10...@li...
>> https://lists.sourceforge.net/lists/listinfo/e1000-devel
>> To learn more about Intel Ethernet, visit
>> https://forums.intel.com/s/topic/0TO0P00000018NbWAI/intel-ethernet
>>
>