fm10k Linux* Base Driver for the Intel(R) Ethernet Switch FM10000 Host Interface =============================================================================== =============================================================================== October 1, 2015 =============================================================================== Contents -------- - Overview - Building and Installation - Command Line Parameters - Intel(R) fm10k Ethernet Flow Director - Additional Features & Configurations - Known Issues ================================================================================ Important Notes --------------- Configuring SR-IOV for improved network security ------------------------------------------------ In a virtualized environment, on Intel(R) Server Adapters that support SR-IOV, the virtual function (VF) may be subject to malicious behavior. Software- generated layer two frames, like IEEE 802.3x (link flow control), IEEE 802.1Qbb (priority based flow-control), and others of this type, are not expected and can throttle traffic between the host and the virtual switch, reducing performance. To resolve this issue, configure all SR-IOV enabled ports for VLAN tagging. This configuration allows unexpected, and potentially malicious, frames to be dropped. Overview -------- This document describes the fm10k Linux* Base Driver for the Intel(R) Ethernet Switch FM10000 Host Interface. The Linux* base driver supports the following kernel versions: 2.6.32 and newer Driver information can be obtained using ethtool, lspci, and iproute2 ip command. Instructions on updating ethtool can be found in the section Additional Configurations later in this document. ================================================================================ Building and Installation ------------------------- To build a binary RPM* package of this driver, run 'rpmbuild -tb fm10k-.tar.gz', where is the version number for the driver tar file. NOTES: - For the build to work properly, the currently running kernel MUST match the version and configuration of the installed kernel sources. If you have just recompiled the kernel reboot the system before building. - RPM functionality has only been tested in Red Hat distributions. 1. Move the base driver tar file to the directory of your choice. For example, use '/home/username/fm10k' or '/usr/local/src/fm10k'. 2. Untar/unzip the archive, where is the version number for the driver tar file: tar zxf fm10k-.tar.gz 3. Change to the driver src directory, where is the version number for the driver tar: cd fm10k-/src/ 4. Compile the driver module: # make install The binary will be installed as: /lib/modules//kernel/drivers/net/fm10k/fm10k.[k]o The install location listed above is the default location. This may differ for various Linux distributions. 5. Load the module using the modprobe command: modprobe [parameter=port1_value,port2_value] Make sure that any older fm10k drivers are removed from the kernel before loading the new module: rmmod fm10k; modprobe fm10k 6. Assign an IP address to the interface by entering the following, where ethX is the interface name that was shown in dmesg after modprobe: ip address add / dev ethX 7. Verify that the interface works. Enter the following, where IP_address is the IP address for another machine on the same subnet as the interface that is being tested: ping NOTE: For certain distributions like (but not limited to) RedHat Enterprise Linux 7 and Ubuntu, once the driver is installed the initrd/initramfs file may need to be updated to prevent the OS loading old versions of the fm10k driver. The dracut utility may be used on RedHat distributions: # dracut --force For Ubuntu: # update-initramfs -u ================================================================================ Command Line Parameters ----------------------- If the driver is built as a module, the following optional parameters are used by entering them on the command line with the modprobe command using this syntax: modprobe fm10k [