[ovirt-users] intel_iommu=on kvm-intel.nested=1 deactivates rp_filter kernel option

Hello, I have two kind of hosts: * some with default ovirt node 4.4 kernel settings * some with custom kernel settings including intel_iommu=on kvm-intel.nested=1 I can't open vm console from the second category host when binding from a different vlan because the host is unreacheable But if I set sysctl -w net.ipv4.conf.all.rp_filter=2, I can bind the host and open a vm console. I didn't test if this behaviour is because of Hostdev Passthrough & SR-IOV or Nested Virtualization. Is it an expected behaviour or a bug? -- Nathanaël Blanchet Supervision réseau SIRE 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr