netdev - RE: [Intel-wired-lan] [PATCH net] i40e: add devlink param to control VF MAC address limit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <IA3PR11MB8986BCBA2E243D2DE968D6A3E53DA@IA3PR11MB8986.namprd11.prod.outlook.com>
Date: Fri, 22 Aug 2025 19:41:06 +0000
From: "Loktionov, Aleksandr" <aleksandr.loktionov@...el.com>
To: "mheib@...hat.com" <mheib@...hat.com>, "intel-wired-lan@...ts.osuosl.org"
	<intel-wired-lan@...ts.osuosl.org>
CC: "Kitszel, Przemyslaw" <przemyslaw.kitszel@...el.com>, "Nguyen, Anthony L"
	<anthony.l.nguyen@...el.com>, "netdev@...r.kernel.org"
	<netdev@...r.kernel.org>
Subject: RE: [Intel-wired-lan] [PATCH net] i40e: add devlink param to control
 VF MAC address limit



> -----Original Message-----
> From: Intel-wired-lan <intel-wired-lan-bounces@...osl.org> On Behalf
> Of mheib@...hat.com
> Sent: Friday, August 22, 2025 1:40 AM
> To: intel-wired-lan@...ts.osuosl.org
> Cc: Kitszel, Przemyslaw <przemyslaw.kitszel@...el.com>; Nguyen,
> Anthony L <anthony.l.nguyen@...el.com>; netdev@...r.kernel.org;
> Mohammad Heib <mheib@...hat.com>
> Subject: [Intel-wired-lan] [PATCH net] i40e: add devlink param to
> control VF MAC address limit
> 
> From: Mohammad Heib <mheib@...hat.com>
> 
> This patch introduces a new devlink runtime parameter to control
> whether the VF MAC filter limit feature is enabled or disabled.
> 
> When the parameter is set to non-zero, the driver enforces the per-VF
> MAC filter limit calculated from the number of allocated VFs and
> ports.
> When the parameter is unset (zero), no limit is applied and behavior
> remains as before commit cfb1d572c986
>    ("i40e: Add ensurance of MacVlan resources for every trusted VF").
> 
> This implementation allows us to toggle the feature through devlink
> while preserving old behavior. In the future, the parameter can be
> extended to represent a configurable "max MACs per VF" value, but for
> now it acts as a simple on/off switch.
> 
> Example command to enable per-vf mac limit:
>  - devlink dev param set pci/0000:3b:00.0 name max_mac_per_vf \
> 	value 1 \
> 	cmode runtime
> 
> Fixes: cfb1d572c986 ("i40e: Add ensurance of MacVlan resources for
> every trusted VF")
> Signed-off-by: Mohammad Heib <mheib@...hat.com>
Reviewed-by: Aleksandr Loktionov <aleksandr.loktionov@...el.com>

...

> diff --git a/drivers/net/ethernet/intel/i40e/i40e.h
> b/drivers/net/ethernet/intel/i40e/i40e.h
> index 49aa4497efce..4a4cb55b6ce8 100644
> --- a/drivers/net/ethernet/intel/i40e/i40e.h
> +++ b/drivers/net/ethernet/intel/i40e/i40e.h
> @@ -574,6 +574,10 @@ struct i40e_pf {
>  	struct i40e_vf *vf;
>  	int num_alloc_vfs;	/* actual number of VFs allocated */
>  	u32 vf_aq_requests;
> +	/* If set to none-zero, the device reserves
“If set to none‑zero” → non‑zero, othervise fine for me.

...

> 2.50.1