bhyve passthru: Malicious Driver Detection event

Finn Enok ixbug at riseup.net
Tue Nov 20 15:56:04 UTC 2018


Hi,

I'd like to setup passthru for an Intel NIC using SR-IOV Virtual Functions (VFs):

4 VFs:
 - 3 VFs for VMs (passthru)
 - 1 VF for the host

ixlv0 on the host works fine until I boot the first VM, which causes
the host to loose connectivity.

/var/log/messages gets filled with these entries when starting the VM which has
one of the VFs assigned:


kernel: ixl1: Malicious Driver Detection event 0 on TX queue 777, pf number 1
kernel: ixl1: MDD TX event is for this function!
kernel: ixl1: Malicious Driver Detection event 1 on RX queue 776, pf number 64
kernel: ixl1: MDD RX event is for this function!


Is this a driver bug or configuration issue on my side?


thanks!
Finn

FreeBSD 11.2
NIC: Intel X710-DA2


"vm passthru" output shows the 3 ppt devices as "READY Yes"

from the log during bootup:
---------------------------
kernel: pci3: <network, ethernet> at device 0.81 (no driver attached)
kernel: pci3: <network, ethernet> at device 0.82 (no driver attached)
kernel: pci3: <network, ethernet> at device 0.83 (no driver attached)


/etc/iov/ixl1.conf
-------------------
PF {
	  device : "ixl1";
	  num_vfs : 4;
}

DEFAULT {
	  passthrough :	true;
}

#VF for use by host
VF-0 {
	passthrough : false;
}



debian vm config:
-------------

loader="grub"
cpu=1
memory=512M
disk0_type="ahci-hd"
disk0_name="disk0.img"
grub_run_partition="1"
grub_run_dir="/boot/grub"
passthru0="2/0/81"
uuid=...


ixl1 related log entries when booting:
---------------------------------------

kernel: ixl1: <Intel(R) Ethernet Connection 700 Series PF Driver, Version - 1.9.13> mem 0xf8800000-0xf8ffffff,0xf9800000-0xf9807fff irq 32 at device 0.1 numa-domain 0 on pci3
kernel: ixl1: using 1024 tx descriptors and 1024 rx descriptors
kernel: ixl1: fw 6.0.48442 api 1.7 nvm 6.01 etid 800035cf oem 1.262.0
kernel: ixl1: PF-ID[1]: VFs 64, MSIX 129, VF MSIX 5, QPs 768, I2C
kernel: ixl1: Using MSIX interrupts with 9 vectors
kernel: ixl1: Allocating 8 queues for PF LAN VSI; 8 queues active
kernel: ixl1: PCI Express Bus: Speed 8.0GT/s Width x8
kernel: ixl1: SR-IOV ready
kernel: ixl1: netmap queues/slots: TX 8/1024, RX 8/1024
kernel: ixl1: The device is not iWARP enabled








ixl0 should not be relevant but I'm including the log lines here as well (from bootup):

kernel: ixl0: <Intel(R) Ethernet Connection 700 Series PF Driver, Version - 1.9.13> mem 0xf9000000-0xf97fffff,0xf9808000-0xf980ffff irq 32 at device 0.0 numa-domain 0 on pci3
kernel: ixl0: using 1024 tx descriptors and 1024 rx descriptors
kernel: ixl0: fw 6.0.48442 api 1.7 nvm 6.01 etid 800035cf oem 1.262.0
kernel: ixl0: PF-ID[0]: VFs 64, MSIX 129, VF MSIX 5, QPs 768, I2C
kernel: ixl0: Using MSIX interrupts with 9 vectors
kernel: ixl0: Allocating 8 queues for PF LAN VSI; 8 queues active
kernel: ixl0: PCI Express Bus: Speed 8.0GT/s Width x8
kernel: ixl0: SR-IOV ready


More information about the freebsd-virtualization mailing list