Hello all,
I have been facing the same issue as in this post: ConnectX-4 Double-tagging and QinQ.
Long story short:
- An openstack VM is bound to SRIOV VF.
- Double tagged traffic reaches the SRIOV interface, external tag is stripped (vlan configured on the VF) and packet with the internal vlan tag reaches the VM successfully (ARP packet in our case).
- On the other hand, when the VM replies (ARP reply), we can see the outgoing packet from a VM trace (with the internal vlan tag correctly configured), but no packet exits from the SRIOV interface (we expect a double-tagged packet). This is also verified by sniffing the network interfaces on the core network equipment.
Any clues on this?
More info:
- Mellanox Technologies MT27710 Family [ConnectX-4 Lx]
- driver: mlx5_core and version: 5.0-0
- firmware-version: 14.24.1000 (MT_2470111034)
- Configured spoof check to off and trust to on,: vf 3 MAC xx:xx:xx:xx:xx:xx, vlan 610, spoof checking off, link-state enable, trust on, query_rss of