|
Notice: Intel® does not support the use of Virtual Machine (VM) Direct Assignment or SR-IOV with Intel quad port server adapters.
Affected Adapters: Intel® PRO/1000 MT Quad Port Server Adapter Intel® PRO/1000 GT Quad Port Server Adapter Intel® PRO/1000 PT Quad Port Server Adapter Intel® PRO/1000 PF Quad Port Server Adapter Intel® PRO/1000 PT Quad Port Low Profile Server Adapter Intel® Gigabit ET Quad Port Server Adapter
Issue: Intel’s quad port server adapters listed above use a PCI-e bridge to connect ports A & B to ports C & D. The PCI-e bridge used in these network adapters do not support ACS (Access Control Service), which restricts unauthorized communication across the bridge.
Potential Risk: Using VM Direct Assignment or SR-IOV with adapters that utilize a PCI-e bridge that does not support ACS allows for the possibility of a compromised/malicious VM sending traffic across the bridge that places packets in the wrong memory space. This has the potential for corrupting unprotected devices or VM memory.
Recommendation: The Intel® Gigabit ET Quad Port Server Adapter remains the best solution for Virtualization, where SR-IOV and Direct Assignment are not used. In configurations where SR-IOV or Direct Assignment and four ports are desired, then Intel recommends using two Dual Port Server Adapters. If a quad port adapter is required, Intel recommends that you do not implement Direct Assignment or SR-IOV.
This applies to:
|