[ovirt-users] intel_iommu=on kvm-intel.nested=1 deactivates rp_filter kernel option

1 Apr 2021

      Hello,

I have two kind of hosts:

  * some with default ovirt node 4.4 kernel settings
  * some with custom kernel settings including intel_iommu=on
    kvm-intel.nested=1

I can't open vm console from the second category host when binding from 
a different vlan because the host is unreacheable

But if I set sysctl -w net.ipv4.conf.all.rp_filter=2, I can bind the 
host and open a vm console.

I didn't test if this behaviour is because of Hostdev Passthrough & 
SR-IOV or Nested Virtualization.

Is it an expected behaviour or a bug?

-- 
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 	
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanchet@abes.fr