Re: [PATCH net-next v3 0/5]: ixgbevf: Allow querying VFs RSS indirection table and key

On Tue, Jan 6, 2015 at 12:13 PM, Vlad Zolotarov
[off-list ref] wrote:

On 01/06/15 20:22, Greg Rose wrote:

quoted

[snip]

quoted

I have not reached any such conclusion - let me reiterate:  I have no
idea.  It is not my area of expertise.  However, to take the lowest
risk route just add a policy hook so that a system admin can turn the
feature on through the PF driver (which is acknowledged as secure) if
they wish then there is no worry.

NP. Let's move on.

quoted

quoted

However I don't want to argue about any longer. Let's move on.

Let's clarify one thing about this "hook". Do u agree that it should
cover
only the cases when VF shares the mentioned above data with PF - namely
for
all devices but x550?

Look at how spoof checking is turned off/on for each VF using the "ip
link set" commands.  That's what I'm envisioning - some way to decide
on a per VF basis which VFs should be allowed to perform the query.

I will but let's agree that x550 VFs should be out of this since their RSS
indirection table and Key belong to the specific domain and don't impose any
even theoretical thread.

Sounds good to me.

Thanks!

- Greg

thanks,
vlad

quoted

Thanks,

- Greg