On 08/05/18 02:43 PM, Alex Williamson wrote:
Yes, GPUs seem to be leading the pack in implementing ATS. So now
dumb question, why not simply turn off the IOMMU and thus ACS? The
argument of using the IOMMU for security is rather diminished if we're
specifically enabling devices to poke one another directly and clearly
this isn't favorable for device assignment either. Are there target
systems where this is not a simple kernel commandline option? Thanks,
Well, turning off the IOMMU doesn't necessarily turn off ACS. We've run
into some bios's that set the bits on boot (which is annoying).
I also don't expect people will respond well to making the IOMMU and P2P
exclusive. The IOMMU is often used for more than just security and on
many platforms it's enabled by default. I'd much rather allow IOMMU use
but have fewer isolation groups in much the same way as if you had PCI
bridges that didn't support ACS.