Hardware bypass

MITIGATOR supports hardware bypass of Silicom adapters.

Tested adapters:

• PE2G4BPI35LA Quad Port Copper Gigabit Ethernet PCI Express Bypass Server Adapter Intel® i350AM4 Based

• PE2G6BPI35 Six Port Copper Gigabit Ethernet PCI Express Bypass Server Adapter Intel® i350AM4 Based

• PE210G2BPI9 Dual Port Fiber 10 Gigabit Ethernet PCI Express Bypass Server Adapter Intel® 82599ES Based

• PE310G4BPI71 Quad Port Fiber 10 Gigabit Ethernet PCI Express Bypass Server Adapter Intel® XL710BM1 Based

• PE340G2BPI71 Dual Port Fiber 40 Gigabit Ethernet PCI Express Bypass Server Adapter Intel® XL710 Based

• P4CG2BPI81 Dual Port Fiber 100 Gigabit Ethernet PCI Express Gen 4.0 Bypass Server Adapter Intel® E810 Based

Necessary steps:

1. Compile and install the bypass driver.
2. Manage the creation of a control device before starting MITIGATOR.
3. Check availability of bypass for the MITIGATOR.

All commands are executed as root.

Driver assembly

The assembly must be done on the target system or on an identical distribution.

1. Install the packages required for the build:

   apt install -y gcc make dkms linux-headers-amd64

2. Download driver source code from our public repository, extract the archive and go to it.

3. Build and install the driver:

   make -f Makefile.dkms

Creation of a control device

1. Create file /etc/systemd/system/mitigator.service.d/bypass.conf with following content:

   [Service]
   ExecStartPre=/bin/bpctl_start

Availability check

Reboot MITIGATOR:

systemctl daemon-reload
systemctl restart mitigator

The «Hardware bypass» card will appear on the instance settings page.