5. NVIDIA MLX5 Common Driver
NVIDIA acquired Mellanox Technologies in 2020. The DPDK documentation and code might still include instances of or references to Mellanox trademarks (like BlueField and ConnectX) that are now NVIDIA trademarks.
The mlx5 common driver library (librte_common_mlx5) provides support for NVIDIA ConnectX-4, NVIDIA ConnectX-4 Lx, NVIDIA ConnectX-5, NVIDIA ConnectX-6, NVIDIA ConnectX-6 Dx, NVIDIA ConnectX-6 Lx, NVIDIA ConnectX-7, NVIDIA BlueField, NVIDIA BlueField-2 and NVIDIA BlueField-3 families of 10/25/40/50/100/200 Gb/s adapters.
For security reasons and to enhance robustness, this driver only handles virtual memory addresses. The way resources allocations are handled by the kernel, combined with hardware specifications that allow handling virtual memory addresses directly, ensure that DPDK applications cannot access random physical memory (or memory that does not belong to the current process).
There are different levels of objects and bypassing abilities which are used to get the best performance:
- Verbs is a complete high-level generic API
- Direct Verbs is a device-specific API
- DevX allows accessing firmware objects
- Direct Rules manages flow steering at the low-level hardware layer
On Linux, above interfaces are provided by linking with libibverbs and libmlx5. See Linux Prerequisites for installation.
On Windows, DevX is the only requirement from the above list. See Windows Prerequisites for DevX SDK package installation.
One mlx5 device can be probed by a number of different PMDs.
To select a specific PMD, its name should be specified as a device parameter
In order to allow probing by multiple PMDs,
several classes may be listed separated by a colon.
class=crypto:regex will probe both Crypto and RegEx PMDs.
5.2.1. Supported Classes
class=compressfor NVIDIA MLX5 Compress Driver.
class=cryptofor NVIDIA MLX5 Crypto Driver.
class=ethfor NVIDIA MLX5 Ethernet Driver.
class=regexfor NVIDIA MLX5 RegEx Driver.
class=vdpafor NVIDIA MLX5 vDPA Driver.
By default, the mlx5 device will be probed by the
vdpaPMDs cannot be probed at the same time. All other combinations are possible.
- On Windows, only
5.3. Compilation Prerequisites
5.3.1. Linux Prerequisites
This driver relies on external libraries and kernel drivers for resources allocations and initialization. The following dependencies are not part of DPDK and must be installed separately:
User space Verbs framework used by
librte_common_mlx5. This library provides a generic interface between the kernel and low-level user space drivers such as
It allows slow and privileged operations (context initialization, hardware resources allocations) to be managed by the kernel and fast operations to never leave user space.
Low-level user space driver library for NVIDIA devices, it is automatically loaded by
This library basically implements send/receive calls to the hardware queues.
They provide the kernel-side Verbs API and low level device drivers that manage actual hardware initialization and resources sharing with user-space processes.
Unlike most other PMDs, these modules must remain loaded and bound to their devices:
mlx5_core: hardware driver managing NVIDIA devices and related Ethernet kernel network devices.
mlx5_ib: InfiniBand device driver.
ib_uverbs: user space driver for Verbs (entry point for
NVIDIA MLNX_OFED/EN releases include firmware updates.
Because each release provides new features, these updates must be applied to match the kernel modules and libraries they come with.
Libraries and kernel modules can be provided either by the Linux distribution, or by installing NVIDIA MLNX_OFED/EN which provides compatibility with older kernels.
126.96.36.199. Upstream Dependencies
The mlx5 kernel modules are part of upstream Linux. The minimal supported kernel version is 4.14. For 32-bit, version 4.14.41 or above is required.
The libraries libibverbs and libmlx5 are part of
It is packaged by most of Linux distributions.
The minimal supported rdma-core version is 16.
For 32-bit, version 18 or above is required.
The rdma-core sources can be downloaded at https://github.com/linux-rdma/rdma-core
It is possible to build rdma-core as static libraries starting with version 21:
CFLAGS=-fPIC cmake -DENABLE_STATIC=1 -DNO_PYVERBS=1 -DNO_MAN_PAGES=1 -GNinja ..
188.8.131.52. NVIDIA MLNX_OFED/EN
The kernel modules and libraries are packaged with other tools in NVIDIA MLNX_OFED or NVIDIA MLNX_EN. The minimal supported versions are:
- NVIDIA MLNX_OFED version: 4.5 and above.
- NVIDIA MLNX_EN version: 4.5 and above.
- Firmware version:
- ConnectX-4: 12.21.1000 and above.
- ConnectX-4 Lx: 14.21.1000 and above.
- ConnectX-5: 16.21.1000 and above.
- ConnectX-5 Ex: 16.21.1000 and above.
- ConnectX-6: 20.27.0090 and above.
- ConnectX-6 Dx: 22.27.0090 and above.
- ConnectX-6 Lx: 26.27.0090 and above.
- ConnectX-7: 28.33.2028 and above.
- BlueField: 18.25.1010 and above.
- BlueField-2: 24.28.1002 and above.
- BlueField-3: 32.36.3126 and above.
The firmware, the libraries libibverbs, libmlx5, and mlnx-ofed-kernel modules are packaged in NVIDIA MLNX_OFED. After downloading, it can be installed with this command:
NVIDIA MLNX_EN is a smaller package including what is needed for DPDK. After downloading, it can be installed with this command:
After installing, the firmware version can be checked:
Several versions of NVIDIA MLNX_OFED/EN are available. Installing the version this DPDK release was developed and tested against is strongly recommended. Please check the “Tested Platforms” section in the Release Notes.
5.3.2. Windows Prerequisites
The mlx5 PMDs rely on external libraries and kernel drivers for resource allocation and initialization.
184.108.40.206. DevX SDK Installation
The DevX SDK must be installed on the machine building the Windows PMD. Additional information can be found at How to Integrate Windows DevX in Your Development Environment. The minimal supported WinOF2 version is 2.60.
5.4. Compilation Options
5.4.1. Compilation on Linux
The ibverbs libraries can be linked with this PMD in a number of ways,
configured by the
ibverbs_link build option:
- The PMD depends on some .so files.
- Split the dependencies glue in a separate library
loaded when needed by dlopen (see
MLX5_GLUE_PATH). It makes dependencies on libibverbs and libmlx5 optional, and has no performance impact.
- Embed static flavor of the dependencies libibverbs and libmlx5 in the PMD shared library or the executable static binary.
5.4.2. Compilation on Windows
The DevX SDK location must be set through CFLAGS/LDFLAGS, either:
meson.exe setup "-Dc_args=-I\"%DEVX_INC_PATH%\"" "-Dc_link_args=-L\"%DEVX_LIB_PATH%\"" ...
set CFLAGS=-I"%DEVX_INC_PATH%" && set LDFLAGS=-L"%DEVX_LIB_PATH%" && meson.exe setup ...
5.5. Environment Configuration
5.5.1. Linux Environment
The kernel network interfaces are brought up during initialization. Forcing them down prevents packets reception.
The ethtool operations on the kernel interfaces may also affect the PMD.
Some runtime behaviours may be configured through environment variables.
- If built with
ibverbs_link=dlopen, list of directories in which to search for the rdma-core “glue” plug-in, separated by colons or semi-colons.
If Verbs is used (DevX disabled), HW queue doorbell register mapping. The value 0 means non-cached IO mapping, while 1 is a regular memory mapping.
With regular memory mapping, the register is flushed to HW usually when the write-combining buffer becomes full, but it depends on CPU design.
220.127.116.11. SR-IOV Virtual Function with MLNX_OFED/EN
SR-IOV must be enabled on the NIC. It can be checked in the following command:
mlxconfig -d <mst device> query | grep SRIOV_EN
If needed, configure SR-IOV:
mlxconfig -d <mst device> set SRIOV_EN=1 NUM_OF_VFS=16
mlxfwreset -d <mst device> reset
After doing the change, restart the driver:
service openibd restart
Then the virtual functions can be instantiated:
echo [num_vfs] > /sys/class/infiniband/mlx5_0/device/sriov_numvfs
18.104.22.168. Sub-Function with MLNX_OFED/EN
Sub-Function is a portion of the PCI device, it has its own dedicated queues. An SF shares PCI-level resources with other SFs and/or with its parent PCI function.
MLNX_OFED version >= 5.4-0.3.3.0
Configure SF feature:
# Run mlxconfig on both PFs on host and ECPFs on BlueField. mlxconfig -d <mst device> set PER_PF_NUM_SF=1 PF_TOTAL_SF=252 PF_SF_BAR_SIZE=12
Enable switchdev mode:
mlxdevm dev eswitch set pci/<DBDF> mode switchdev
Add SF port:
mlxdevm port add pci/<DBDF> flavour pcisf pfnum 0 sfnum <sfnum> Get SFID from output: pci/<DBDF>/<SFID>
Modify MAC address:
mlxdevm port function set pci/<DBDF>/<SFID> hw_addr <MAC>
Activate SF port:
mlxdevm port function set pci/<DBDF>/<ID> state active
Devargs to probe SF device:
22.214.171.124. Enable Switchdev Mode
Switchdev mode is a mode in E-Switch, that binds between representor and VF or SF. Representor is a port in DPDK that is connected to a VF or SF in such a way that assuming there are no offload flows, each packet that is sent from the VF or SF will be received by the corresponding representor. While each packet that is sent to a representor will be received by the VF or SF.
After configuring VF, the device must be unbound:
printf "<device pci address>" > /sys/bus/pci/drivers/mlx5_core/unbind
Then switchdev mode is enabled:
echo switchdev > /sys/class/net/<net device>/compat/devlink/mode
The device can be bound again at this point.
126.96.36.199. Run as Non-Root
Hugepage and resource limit setup are documented
in the common Linux guide.
This PMD can operate without access to physical addresses,
therefore it does not require
SYS_ADMIN to access
Note that this requirement may still come from other drivers.
Below are additional capabilities that must be granted to the application with the reasons for the need of each capability:
- For raw Ethernet queue allocation through the kernel driver.
- For device configuration, like setting link status or MTU.
- For using group 1 and above (software steering) in Flow API.
They can be manually granted for a specific executable file:
setcap cap_net_raw,cap_net_admin,cap_sys_rawio+ep <executable>
Alternatively, a service manager or a container runtime may configure the capabilities for a process.
5.5.2. Windows Environment
WinOF2 version 2.60 or higher must be installed on the machine.
188.8.131.52. WinOF2 Installation
The driver can be downloaded from the following site: WINOF2.
184.108.40.206. DevX Enablement
DevX for Windows must be enabled in the Windows registry.
DevxFsRules must be set.
Additional information can be found in the WinOF2 user manual.
5.5.3. Firmware Configuration
Firmware features can be configured as key/value pairs.
The command to set a value is:
mlxconfig -d <device> set <key>=<value>
The command to query a value is:
mlxconfig -d <device> query <key>
The device name for the command
mlxconfig can be either the PCI address,
or the mst device name found with:
Below are some firmware configurations listed.
LINK_TYPE_P1 LINK_TYPE_P2 value: 1=Infiniband 2=Ethernet 3=VPI(auto-sense)
the maximum number of SR-IOV virtual functions:
enable DevX (required by Direct Rules and other features):
aggressive CQE zipping:
L3 VXLAN and VXLAN-GPE destination UDP port:
IP_OVER_VXLAN_EN=1 IP_OVER_VXLAN_PORT=<udp dport>
enable VXLAN-GPE tunnel flow matching:
FLEX_PARSER_PROFILE_ENABLE=0 or FLEX_PARSER_PROFILE_ENABLE=2
enable IP-in-IP tunnel flow matching:
enable MPLS flow matching:
enable ICMP(code/type/identifier/sequence number) / ICMP6(code/type) fields matching:
enable Geneve flow matching:
FLEX_PARSER_PROFILE_ENABLE=0 or FLEX_PARSER_PROFILE_ENABLE=1
enable Geneve TLV option flow matching:
FLEX_PARSER_PROFILE_ENABLE=0 or FLEX_PARSER_PROFILE_ENABLE=8
enable GTP flow matching:
enable eCPRI flow matching:
enable dynamic flex parser for flex item:
enable realtime timestamp format:
allow locking hairpin RQ data buffer in device memory:
5.6. Device Arguments
The driver can be configured per device.
A single argument list can be used for a device managed by multiple PMDs.
The parameters must be passed through the EAL option
as examples below:
Each device class PMD has its own list of specific arguments, and below are the arguments supported by the common mlx5 layer.
Select the classes of the drivers that should probe the device. See Classes for more explanation and details.
The default value is
A nonzero value enables extending memseg when registering DMA memory. If enabled, the number of entries in MR (Memory Region) lookup table on datapath is minimized and it benefits performance. On the other hand, it worsens memory utilization because registered memory is pinned by kernel driver. Even if a page in the extended chunk is freed, that doesn’t become reusable until the entire memory is freed.
Enabled by default.
A nonzero value enables implicit registration of DMA memory of all mempools except those having
RTE_MEMPOOL_F_NON_IO. This flag is set automatically for mempools populated with non-contiguous objects or those without IOVA. The effect is that when a packet from a mempool is transmitted, its memory is already registered for DMA in the PMD and no registration will happen on the data path. The tradeoff is extra work on the creation of each mempool and increased HW resource use if some mempools are not used with MLX5 devices.
Enabled by default.
A non-zero value enables the PMD memory management allocating memory from system by default, without explicit rte memory flag.
By default, the PMD will set this value to 0.
The rdma core library can map doorbell register in two ways, depending on the environment variable “MLX5_SHUT_UP_BF”:
- As regular cached memory (usually with write combining attribute), if the variable is either missing or set to zero.
- As non-cached memory, if the variable is present and set to not “0” value.
The same doorbell mapping approach is implemented directly by PMD in UAR generation for queues created with DevX.
The type of mapping may slightly affect the send queue performance, the optimal choice strongly relied on the host architecture and should be deduced practically.
sq_db_ncis set to zero, the doorbell is forced to be mapped to regular memory (with write combining), the PMD will perform the extra write memory barrier after writing to doorbell, it might increase the needed CPU clocks per packet to send, but latency might be improved.
sq_db_ncis set to one, the doorbell is forced to be mapped to non cached memory, the PMD will not perform the extra write memory barrier after writing to doorbell, on some architectures it might improve the performance.
sq_db_ncis set to two, the doorbell is forced to be mapped to regular memory, the PMD will use heuristics to decide whether a write memory barrier should be performed. For bursts with size multiple of recommended one (64 pkts) it is supposed the next burst is coming and no need to issue the extra memory barrier (it is supposed to be issued in the next coming burst, at least after descriptor writing). It might increase latency (on some hosts till the next packets transmit) and should be used with care. The PMD uses heuristics only for Tx queue, for other semd queues the doorbell is forced to be mapped to regular memory as same as
sq_db_ncis set to 0.
sq_db_ncis omitted, the preset (if any) environment variable “MLX5_SHUT_UP_BF” value is used. If there is no “MLX5_SHUT_UP_BF”, the default
sq_db_ncvalue is zero for ARM64 hosts and one for others.
File descriptor of
ibv_contextcreated outside the PMD. PMD will use this FD to import remote CTX. The
cmd_fdis obtained from the
ibv_context->cmd_fdmember, which must be dup’d before being passed. This parameter is valid only if
pd_handleparameter is specified.
By default, the PMD will create a new
When FD comes from another process, it is the user responsibility to share the FD between the processes (e.g. by SCM_RIGHTS).
Protection domain handle of
ibv_pdcreated outside the PMD. PMD will use this handle to import remote PD. The
pd_handlecan be achieved from the original PD by getting its
ibv_pd->handlemember value. This parameter is valid only if
cmd_fdparameter is specified, and its value must be a valid kernel handle for a PD object in the context represented by given
By default, the PMD will allocate a new PD.
ibv_pd->handlemember is different than