netdev - bnx2x + SR-IOV, no internal L2 switching

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 12 Feb 2014 14:33:55 +0100
From:	Yoann Juet <yoann.juet@...v-nantes.fr>
To:	netdev@...r.kernel.org
Subject: bnx2x + SR-IOV, no internal L2 switching

Hi all,

I'm conducting experiments on SR-IOV with Broadcom and Intel cards on 
debian/unstable with KVM hypervisor. On Broadcom cards (bnx2x module, 
BCM57810 devices), Virtual Functions (VFs) get running, Virtual Machines 
attached to such VFs inherit network connectivity with excellent 
performance.

However, VMs attached to VFs on the Broadcom Physical Functions (PFs) 
behave like they were connected to an ancient hub, not a L2 switch. It 
is as if there was no internal L2 switching on the Broadcom card to 
process VF <-> VF or VF <-> PF communications. As a result, a VM sees 
all inbound/outbound traffic from/to others VMs as well as traffic 
destined to the PF (for instance, the physical ethX has an IP address).

On the other hand, everything works like a charm with Intel cards (ixgbe 
module, 82599EB devices). Traffic between VFs or VF/PF is switched 
internally by the card.

I found very little literature about SR-IOV on Broadcom devices. I 
wonder if it's a normal behaviour, a misconfiguration on my side or 
perhaps a firmware/driver bug.

Have you seen this issue before ?

---
Kernel 3.12.9 (same behaviour with kernels 3.10.x)
	driver: bnx2x
	firmware-version: 7.8.17
Debian/unstable
	libvirt 1.2.1
	QEMU 1.7.0
---

Best regards,
-- 
Université de Nantes - Direction des Systèmes d'Information

View attachment "yoann_juet.vcf" of type "text/x-vcard" (366 bytes)

Download attachment "smime.p7s" of type "application/pkcs7-signature" (3256 bytes)