Re: [dpdk-dev] [RFC PATCH 3/7] vfio/pci: Introduce VF token

2020-02-05 Thread Alex Williamson
On Wed, 5 Feb 2020 07:57:29 + "Liu, Yi L" wrote: > > From: Alex Williamson > > Sent: Wednesday, February 5, 2020 7:06 AM > > To: k...@vger.kernel.org > > Subject: [RFC PATCH 3/7] vfio/pci: Introduce VF token > > > > If we enable SR-IOV on a vfio-pci owned PF, the resulting VFs are not > > f

Re: [dpdk-dev] [RFC PATCH 3/7] vfio/pci: Introduce VF token

2020-02-05 Thread Liu, Yi L
> From: Alex Williamson > Sent: Wednesday, February 5, 2020 7:06 AM > To: k...@vger.kernel.org > Subject: [RFC PATCH 3/7] vfio/pci: Introduce VF token > > If we enable SR-IOV on a vfio-pci owned PF, the resulting VFs are not > fully isolated from the PF. The PF can always cause a denial of > ser

[dpdk-dev] [RFC PATCH 3/7] vfio/pci: Introduce VF token

2020-02-04 Thread Alex Williamson
If we enable SR-IOV on a vfio-pci owned PF, the resulting VFs are not fully isolated from the PF. The PF can always cause a denial of service to the VF, if not access data passed through the VF directly. This is why vfio-pci currently does not bind to PFs with SR-IOV enabled and does not provide a