Configure external network traffic with a PCI passthrough to allow Virtual Network Sensor to monitor data.
NoteThe following instructions are valid as of October 2023.
These instructions are only for Virtual Network Sensors deployed on a KVM host
machine.
|
Before you begin, make sure you have prepared a vSwitch.
Procedure
- Access Terminal on the host machine.
- Verify if IOMMU is turned on.You can use one of two methods to check if IOMMU is turned on or off.
-
cat /proc/cmdlineExample output if IOMMU is on:
intel_iommu=on
-
dmesg | grep -i mmuExample output if IOMMU is on:
iommu: Default domain type: Passthrough
-
- If IOMMU is turned off, configure grub and reboot.
- Configure grub.sudo grubby --update-kernel ALL --args 'intel_iommu=on iommu=pt'
- Reboot the machine.sudo reboot
- After reboot completes, verify that IOMMU is turned on.cat /proc/cmdline or dmesg | grep -i mmu
- Configure grub.
- Check
bus-info
of the network interface you want to use for PCI passthrough.ethtool -i eth1An example output is:bus-info: 0000:1b:00.0
Note
The example code useseth1
as the target network interface. You can choose the network interface that best suits the needs of your deployment. - Find the iommu group of the PCI passthrough network interface.dmesg | grep '0000:1b:00.0'
- Get the PCI info of other iommu group members.For example, if the network interface is in group 8, use the command:dmesg | grep 'iommu group 8'
- Detach all iommu group members.sudo virsh nodedev-detach <pci-info>For example, to detach the eth1 port example used in these steps, use the command sudo virsh nodedev-detach pci_0000_1b_00_0
- On the host machine, open the Virtual Machine Manager.
- Double-click your Virtual Network Sensor.
- Click Add Hardware.
- Go to PCI Host Device and select the position of the PCI
passthrough.If you were using the example in the previous steps, you would need to locate and click on 0000:1b:00.0.
- Click Finish.