[virtio-dev] virtio-net ip restriction.

2023-08-08 Thread Xuan Zhuo
## Background For cloud, the ip restriction is important. Because the user of the vm is untrustworthy. One user may use the ip of another to config the netdevice to receive and send packets. So we need to restrict the ip traffic of the device(or port). ## Implement Now we have these choice: 1.

[virtio-dev] RE: RE: RE: RE: RE: RE: [virtio-comment] RE: RE: RE: RE: [RFC] virtio-net: support access and control the member devices

2023-08-08 Thread Parav Pandit
> From: Xuan Zhuo > Sent: Tuesday, August 8, 2023 12:15 PM > > At that point, there may be two functions, PF and switching PF, switching PF > filters the traffic of the PF. > > > > Anyways, I am just not finding it useful enough at current point in time > > for us > as far mature alternatives

[virtio-dev] Re: RE: RE: RE: RE: RE: [virtio-comment] RE: RE: RE: RE: [RFC] virtio-net: support access and control the member devices

2023-08-08 Thread Xuan Zhuo
On Tue, 8 Aug 2023 04:16:59 +, Parav Pandit wrote: > > > From: Jason Wang > > Sent: Tuesday, August 8, 2023 9:21 AM > > > > The idea is to introduce filters on the new virtio switch object for tx > > > and rx > > both. > > > > It can be done in this way for sure but the question is why it

[virtio-dev] Re: RE: RE: RE: RE: [virtio-comment] RE: RE: RE: RE: [RFC] virtio-net: support access and control the member devices

2023-08-08 Thread Xuan Zhuo
On Tue, 8 Aug 2023 13:21:23 +0800, Jason Wang wrote: > On Tue, Aug 8, 2023 at 12:38 PM Parav Pandit wrote: > > > > > > > From: Jason Wang > > > Sent: Tuesday, August 8, 2023 10:03 AM > > > > > > This option because it is in use by very big and mature eco system of > > > > multiple > > > sw