Hardware bypass

MITIGATOR supports hardware bypass of Silicom adapters.

Tested adapters:

Necessary steps:

  1. Compile and install the bypass driver.
  2. Manage the creation of a control device before starting MITIGATOR.
  3. Check availability of bypass for the MITIGATOR.

All commands are executed as root.

Driver assembly

The assembly must be done on the target system or on an identical distribution.

  1. Install the packages required for the build:

    apt install -y gcc make dkms linux-headers-amd64
    
  2. Download driver source code from our public repository, extract the archive and go to it.

  3. Build and install the driver:

    make -f Makefile.dkms
    

Creation of a control device

  1. Create file /etc/systemd/system/mitigator.service.d/bypass.conf with following content:

    [Service]
    ExecStartPre=/bin/bpctl_start
    

Availability check

Reboot MITIGATOR:

systemctl daemon-reload
docker-compose down && docker-compose up -d

The «Hardware bypass» card will appear on the instance settings page.