IPsec packets are dropped or fail to pass with QAT enabled

There is a known incompatibility between QAT and VT-d on some platforms which can prevent IPsec traffic from passing when QAT acceleration is enabled. See VT-d/IOMMU for details.

Console DMA / PTE Read access Error Messages

Errors similar to the following may appear on the console:

[110772.063766] DMAR: [DMA Read] Request device [04:01.0] fault addr 406482000
   [fault reason 06] PTE Read access is not set
[110773.059440] DMAR: DRHD: handling fault status reg 102

The cause is likely an incompatibility between an enabled QAT device and VT-d in the BIOS. See VT-d/IOMMU for details.

Console Messages Obscure Prompts

When connected to the console of a TNSR device, such as the serial console, the kernel may output messages to the terminal which obscure prompts or other areas of the screen. This is normal and an expected effect when using the console directly.

To work around this intended behavior, use one of the following methods:

  • Press Ctrl-L to clear or redraw the screen without the messages.

  • Press Enter to receive a new prompt.

  • Run sudo dmesg -D from a shell prompt or with the TNSR host shell command, which will disable kernel output to all consoles.

  • Connect to the TNSR device using SSH instead of the console.

Console Terminal Size

When connected to the console of a TNSR device via serial connection, the size of the terminal may not properly be detected by the TNSR CLI. This can result in unexpected behavior, such as auto complete printing exceedingly long lines.

To correct this behavior, manually set the size of the terminal with stty, for example: stty cols 80. This can be run on a shell prompt before starting the TNSR CLI or placed in ~/.bash_profile or similar shell startup files.

For a more complete workaround, use the following script instead which will detect the terminal size dynamically rather than hardcoding a specific value:

Download: resizewin.sh
1#!/bin/sh
2old=$(stty -g)
3stty raw -echo min 0 time 5
4printf '\0337\033[r\033[999;999H\033[6n\0338' > /dev/tty
5IFS='[;R' read -r _ rows cols _ < /dev/tty
6stty "$old"
7stty cols "$cols" rows "$rows"

Create a copy of that script on the TNSR system, make it executable, and then run it from a shell startup script. For example:

$ chmod u+x resizewin.sh
$ echo "~/resizewin.sh" >> ~/.bash_profile