Hi Paul,

May I know the purpose of  "trustGuestRxFilters='yes'" setting in your configuration? 
Refer to [1], currently this "trustGuestRxFilters" parameter  is only supported for the virtio device model and for macvtap connections on the host.
The hostdev type interface may not support it.
Thank you.

[1]https://libvirt.org/formatdomain.html#network-interfaces

BR,
Yalan


On Sat, Jan 20, 2024 at 4:04 PM Paul B. Henson <henson@acm.org> wrote:
We've been running Debian 11 for a while, using sr-iov:

<network>
  <name>sr-iov-intel-10G-1</name>
  <uuid>6bdaa4c8-e720-4ea0-9a50-91cb7f2c83b1</uuid>
  <forward mode='hostdev' managed='yes'>
    <pf dev='eth2'/>
  </forward>
</network>

and allocating vf's from the pool:

    <interface type='network' trustGuestRxFilters='yes'>
      <mac address='52:54:00:08:da:5b'/>
      <source network='sr-iov-intel-10G-1'/>
      <vlan>
        <tag id='50'/>
      </vlan>
      <model type='virtio'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>
    </interface>

After upgrading to Debian 12, when I try to start any vm which uses the
trustGuestRxFilters option, it fails to start with the message:

error: internal error: unable to execute QEMU command 'query-rx-filter':
invalid net client name: hostdev0

If I remove the option, it starts fine (but of course is broken
functionality wise as the option wasn't there just for fun :) ).

Any thoughts on what's going on here? The Debian 12 versions are:

libvirt-daemon/stable,now 9.0.0-4
qemu-system-x86/stable,now 1:7.2+dfsg-7+deb12u3

I see Debian 12 backports has version 8.1.2+ds-1~bpo12+1 of qemu, but no
newer versions of libvirt. I haven't tried the backports version to
see if that resolves the problem.

Thanks much...
_______________________________________________
Users mailing list -- users@lists.libvirt.org
To unsubscribe send an email to users-leave@lists.libvirt.org