Hardware bypass

MITIGATOR supports hardware bypass of Silicom and LR-Link adapters.

Tested Silicom adapters:

PE2G4BPI35LA Quad Port Copper 1G Ethernet PCIe Bypass Network Adapter (Intel i350AM4)
PE2G6BPI35 Six Port Copper 1G Ethernet PCIe Bypass Network Adapter (Intel i350AM4)
PE210G2BPI9 Dual Port Fiber 10G Ethernet PCIe Bypass Network Adapter (Intel 82599ES)
PE310G4BPI71 Quad Port Fiber 10G Ethernet PCIe Bypass Network Adapter (Intel XL710BM1)
PE340G2BPI71 Dual Port Fiber 40G Ethernet PCIe Bypass Network Adapter (Intel XL710)
P4CG2BPI81 Dual Port Fiber 100G Ethernet PCIe Gen 4.0 Bypass Network Adapter (Intel E810)

Tested LR-Link adapters:

LRES8003PF-BP-SR Quad Port 10G Multimode SR Dual-way PCIe Bypass Network Adapter (Intel XL710)

Setup

To enable hardware bypass support:

Compile and install the hardware bypass driver.
Configure the creation of the bypass control device before starting the MITIGATOR.
Check that hardware bypass control is present in the MITIGATOR.

All commands are executed as root.

Driver installation

The driver must be built on the target system or on an identical distributive.

Install the packages required for the build:

apt install -y gcc make dkms linux-headers-amd64

Download the driver source code from our public repository, extract the archive and go into extracted folder:
- For Silicom adapters.
- For LR-Link adapters.
Build and install the driver:
```
make -f Makefile.dkms
```

Creation of the control device

Create file /etc/systemd/system/mitigator.service.d/bypass.conf with following content:

[Service]
ExecStartPre=/bin/bpctl_start

Availability check

Start the MITIGATOR:

systemctl daemon-reload
systemctl restart mitigator

The «Hardware bypass» card will appear on the instance settings page.

Warning

Creation of the control device via bpctl_start script must be done before the binding of the ports of hardware bypass network cards to the DPDK driver (kernel module). Therefore, check that the MITIGATOR has not been started before configuring the hardware bypass. Otherwise stop the MITIGATOR and unbind the ports from the DPDK driver before this step.

Driver uninstallation

Hardware bypass driver may be uninstalled from the system if required.

Execute in driver source code folder:

make -f Makefile.dkms uninstall

Warning

To correctly uninstall the driver make sure that the MITIGATOR is stopped, the ports of hardware bypass network cards are not bound to the DPDK driver (kernel module), the control device is removed (via bpctl_stop script from the driver source code archive).