I'm passing through a VF from my Intel X722-based NIC to a firewall (OPNsense) qemu vm which uses CARP for high-availability.
However, due to filtering by the PF, the packets destined to the virtual CARP MAC addresses do not reach the VF/guest.
This is "by design" and if such functionality is intended, the PF must be configured in a certain way (https://www.kernel.org/doc/Documentation/networking/i40e.rst VLAN Packet Steering).
However, either the version of ethtool in Proxmox or the used driver version (2.8.20-k) in the Kernel does not support this special configuration:
Would be possible to update the affected component(s)? I will try to compile the Intel driver out-of-tree (latest is 2.10.19.82) to see if this resolves the issue.
Not directly Proxmox related, but related. If someone has an idea I'd be grateful.
On the host (proxmox) I receive kernel messages like:
which (as per above doc) would require:
However, "ip link" does not exist in FreeBSD/OPNsense.
However, due to filtering by the PF, the packets destined to the virtual CARP MAC addresses do not reach the VF/guest.
This is "by design" and if such functionality is intended, the PF must be configured in a certain way (https://www.kernel.org/doc/Documentation/networking/i40e.rst VLAN Packet Steering).
However, either the version of ethtool in Proxmox or the used driver version (2.8.20-k) in the Kernel does not support this special configuration:
ethtool -set-priv-flags <interface-name> vf-true-promisc-support on
Would be possible to update the affected component(s)? I will try to compile the Intel driver out-of-tree (latest is 2.10.19.82) to see if this resolves the issue.
Not directly Proxmox related, but related. If someone has an idea I'd be grateful.
On the host (proxmox) I receive kernel messages like:
i40e 0000:b5:00.2: Error I40E_AQ_RC_ENOSPC, forcing overflow promiscuous on VF 0
i40e 0000:b5:00.2: Error I40E_AQ_RC_ENOSPC adding RX filters on VF 0, please set promiscuous on manually for VF 0
which (as per above doc) would require:
ip link set <interface> promisc on
ip link set <interface> allmulticast on
However, "ip link" does not exist in FreeBSD/OPNsense.
ifconfig <interface> promisc
should be the equivalent for the first, but I cannot find anything for "allmulticast on"