On 2016年12月06日 18:59, Peter Xu wrote: > On Tue, Dec 06, 2016 at 04:27:39PM +0800, Lan Tianyu wrote: > > [...] > >>> >>>> User space driver(E.G DPDK) also can enable/disable >>>> IOVA for device dynamically. >>> >>> Could you provide more detailed (or any pointer) on how to do that? I >>> did try to find it myself, I see an VFIO_IOMMU_ENABLE ioctl, but looks >>> like it is for ppc only. >> >> No, I just give an example that user space may do that but no more >> research. But since Qemu already can enable device's IOVA, other user >> application also should can do that with the same VFIO interface, right? > > AFAIU we can't do that at least on x86. We can use vfio interface to > bind group into container, but we should not be able to dynamically > disable IOMMU protection. IIUC That needs to taint the kernel. > > The only way I know is that we probe vfio-pci with no-iommu mode, in > that case, we disabled IOMMU, but we can never dynamically enable it > as well. > > Please correct me if I am wrong.
Actually, disabling device's IOVA doesn't require to disable kernel global DMA protect and just clear device's VTD context entry in the context table. Go though IOMMU and VFIO code, find this will happen when call VFIO_GROUP_UNSET_CONTAINER ioctl and it will be called when destroy VM or unplug assigned device in Qemu. Please help to double check. Call trace: __vfio_group_unset_container() vfio_iommu_type1_detach_group() iommu_detach_group() dmar_remove_one_dev_info() __dmar_remove_one_dev_info() domain_context_clear() The legacy KVM device assign code also will call iommu_detach_device() when deassign a device. >From device emulation view, we need to make sure correct register emulation regardless of guest behavior. > > Thanks, > > -- peterx > -- Best regards Tianyu Lan
