Re: RE: RE: RE: RE: RE: RE: RE: [virtio-comment] RE: RE: RE: RE: [RFC] virtio-net: support access and control the member devices

[Xuan Zhuo <xuanzhuo@linux.alibaba.com>]

On Tue, 8 Aug 2023 04:34:18 +0000, Parav Pandit <parav@nvidia.com> wrote:
>
> > From: Xuan Zhuo <xuanzhuo@linux.alibaba.com>
> > Sent: Tuesday, August 8, 2023 9:47 AM
>
> > I don't care whether swtich is introduced or not. Because we have no
> > dependencies on it.
> >
> > My requirement is to implement ip restriction which is very important for cloud
> > scenarios.
> >
> These restrictions are needed for PF and VFs both, so can this be implemented outside of the PF and VF in your environment?


I see.

The point is that we want to config by the virtio admin queue (or cvq).
So we want introduce this feature to the virtio.
We will expose this function to the users.
We want the user uses a standard way to config the ip restrictions.

Thanks.

>
> > I think the gap is, I don't care how it's implemented. Because for me, it can be
> > supported by switch rx, tx filter or virtio-net device. I'd love to hear everyone's
> > opinions.
> >
> One proven model is to have virtio-net device to have switch object that exposes flow filters capability, if at all this is needed in your env.
>