> From: Xuan Zhuo <>
> Sent: Tuesday, August 8, 2023 9:47 AM
> I don't care whether swtich is introduced or not. Because we have no
> dependencies on it.
>
> My requirement is to implement ip restriction which is very important for cloud
> scenarios.
>
These restrictions are needed for PF and VFs both, so can this be implemented outside of the PF and VF in your environment?
> I think the gap is, I don't care how it's implemented. Because for me, it can be
> supported by switch rx, tx filter or virtio-net device. I'd love to hear everyone's
> opinions.
>
One proven model is to have virtio-net device to have switch object that exposes flow filters capability, if at all this is needed in your env.