[Intel-wired-lan] Does a VF know that it is "trusted"?

Shannon Nelson shannon.nelson at oracle.com
Tue May 15 18:13:23 UTC 2018


On 5/15/2018 10:58 AM, Wyborny, Carolyn wrote:
> No, the intent is that the VF does not know its trusted or not.  It asks and if it *is* trusted, then the PF grants the request.  VF only knows if the request was granted or not.  That is the current design anyway.  Mitch can probably comment more.
> 

Thanks - that's what I thought, but wanted to be sure.  The case I have 
in mind is where the VF might advertise additional netdev features if it 
knows it is trusted.  Obviously, I'm thinking about IPsec offloads, but 
I would think this could apply to other features as well.

The problem I see is that right now, if IPsec offload capability is 
added to the VF, but only allowed when trusted, the VF must blindly 
advertise its support even if the PF is just going to NAK the request. 
That leads to a poor user experience.

Hmmm...

sln


> Thanks,
> 
> Carolyn
> 
>> -----Original Message-----
>> From: Intel-wired-lan [mailto:intel-wired-lan-bounces at osuosl.org] On Behalf
>> Of Skidmore, Donald C
>> Sent: Tuesday, May 15, 2018 10:30 AM
>> To: Shannon Nelson <shannon.nelson at oracle.com>; Intel Wired LAN <intel-
>> wired-lan at lists.osuosl.org>
>> Subject: Re: [Intel-wired-lan] Does a VF know that it is "trusted"?
>>
>> For ixgbevf at least it isn't told it is "trusted" or not.  But you could ask for
>> something that would require it to be and based on the reply you should be
>> able to infer.
>>
>> -Don
>>
>>> -----Original Message-----
>>> From: Intel-wired-lan [mailto:intel-wired-lan-bounces at osuosl.org] On
>> Behalf Of
>>> Shannon Nelson
>>> Sent: Tuesday, May 15, 2018 10:24 AM
>>> To: Intel Wired LAN <intel-wired-lan at lists.osuosl.org>
>>> Subject: [Intel-wired-lan] Does a VF know that it is "trusted"?
>>>
>>> If the admin has set the trusted attribute on a VF, e.g.
>>> 	ip link set dev eth4 vf 1 trust on
>>> does the vf know it is trusted?
>>>
>>> Is there an accepted (and simple?) way for the VF to check for its trust
>> level?
>>>
>>> sln
>>> --
>>> ==================================================
>>> Shannon Nelson           shannon.nelson at oracle.com
>>> Parents can't afford to be squeamish
>>> _______________________________________________
>>> Intel-wired-lan mailing list
>>> Intel-wired-lan at osuosl.org
>>> https://lists.osuosl.org/mailman/listinfo/intel-wired-lan
>> _______________________________________________
>> Intel-wired-lan mailing list
>> Intel-wired-lan at osuosl.org
>> https://lists.osuosl.org/mailman/listinfo/intel-wired-lan


More information about the Intel-wired-lan mailing list