[libvirt-users] SR-IOV Trust Setting

Laine Stump laine at redhat.com
Wed Oct 10 13:50:01 UTC 2018


On 10/09/2018 08:08 PM, ]σ§έ Λιαςάη wrote:
> Is there a setting to allow/disable spoof checking and trust on VF from
> SR-IOV device? 
> Lookin
> at https://www.libvirt.org/formatdomain.html#elementsDriverBackendOptions can
> this be done through the driver element?
> 
> *<driver name='vhost' txmode='iothread' ioeventfd='on' event_idx='off'
> queues='5' rx_queue_size='256' tx_queue_size='256'> <host csum='off'
> gso='off' tso4='off' tso6='off' ecn='off' ufo='off' mrg_rxbuf='off'/>
> <guest csum='off' tso4='off' tso6='off' ecn='off' ufo='off'/> </driver>*
> 
> At the moment i have to manually run: 
> ip link set $_dev vf $vf spoofchk off
> ip link set $_dev vf $vf trust on
> 
> Is it possible to set this values from the xml file on a per interface
> basis?

spoofchk didn't exist in SRIOV network devices at the time support for
SRIOV VFs was added to libvirt, and in the time since spoofchk was
introduced, nobody has had any pressing need to add it. So no, there is
no way to set this bit for a VF from libvirt's XML (I hadn't even heard
of a separate "trust" setting, or maybe I've seen it but have forgotten.)




More information about the libvirt-users mailing list