Page MenuHomeVyOS Platform

VPP: limit VPP to validated NICs unless allow-unsupported-nics is set
Closed, ResolvedPublicFEATURE REQUEST

Description

Summary

Given our commitment to stability and the high sensitivity of VPP to the nuances of different NICs and drivers, we must ensure that VPP can only be activated on hardware and platforms that have been validated for its use.

Validated NICs for VPP

Below is a list of NICs where VPP activation is supported:

Filter TypeFilter ValueNIC Name/DescriptionPlatform Where NIC Can Be Found
PCI ID15b3:1019Mellanox Technologies MT28800 Family [ConnectX-5 Ex]Bare-metal
PCI ID15b3:101dMellanox Technologies MT2892 Family [ConnectX-6 Dx]Bare-metal
PCI ID15b3:101eMellanox Technologies ConnectX Family mlx5Gen Virtual FunctionOracle Cloud
PCI ID8086:1592Intel Corporation Ethernet Controller E810-C for QSFPBare-metal
PCI ID1ae0:0042Google, Inc. Compute Engine Virtual Ethernet [gVNIC]Google Cloud
PCI ID1af4:1000Red Hat, Inc. Virtio network deviceKVM-based hypervisors, including with Open vSwitch; Google Cloud
PCI ID1d0f:ec20Amazon.com, Inc. Elastic Network Adapter (ENA)AWS
Original Kernel Driverhv_netvscMicrosoft Hyper-V network interface cardMicrosoft Azure

VPP activation on any NICs not listed above is not supported and should be restricted.

Adding new NICs to the supported list

A key condition for adding new NICs to the list is that VyOS maintainers must have physical and permanent access to the NIC in question. VPP can be highly sensitive - there is often a significant difference between a NIC being visually recognized (with basic traffic passing through) and achieving stable, reliable performance. Proper validation is essential. Also, permanent access is mandatory for re-validation with new versions.

Details

Version
-
Is it a breaking change?
Behavior change
Issue type
Feature (new functionality)

Event Timeline

While I think this is right, I also think you should have a way to override this. If I really want to use an Intel X710 I think that should be possible. Maybe add some setting to allow unsupported cards?

I agree.

Some kind of "overrule" or "override" option should be available (along with some kind of "WARNING! Here there will be dragons!" when enabled if not on screen then at least in the logs).

But at the same time wont VPP fail on its own if you try to enable it on an unsupported NIC?

Also what is the source of the list provided by OP?

If its these docs then they seem to be highly broken/out of date?

https://my-vpp-docs.readthedocs.io/en/what-is-vpp/overview/whatisvpp/primarycharacteristicsofvpp.html#integrated-with-the-dpdk-fd-io-vpp-supports-existing-nic-devices-including

Or is it this one?

https://core.dpdk.org/supported/nics/

https://doc.dpdk.org/guides/nics/overview.html

Either way several models and drivers seems to be missing in the OP list vs the VPP list vs the DPDK list.

dmbaturin renamed this task from VPP: Limit compatible NICs to validated only to VPP: limit VPP to validated NICs unless allow-unsupported-nics is set.Mar 18 2026, 3:27 PM
dmbaturin changed Is it a breaking change? from Stricter validation to Behavior change.
dmbaturin changed Issue type from Internal change (not visible to end users) to Feature (new functionality).
Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.