On Thu, Sep 21, 2023 at 03:34:03PM -0400, Michael S. Tsirkin wrote: > that's easy/practical. If instead VDPA gives the same speed with just > shadow vq then keeping this hack in vfio seems like less of a problem. > Finally if VDPA is faster then maybe you will reconsider using it ;) It is not all about the speed. VDPA presents another large and complex software stack in the hypervisor that can be eliminated by simply using VFIO. VFIO is already required for other scenarios. This is about reducing complexity, reducing attack surface and increasing maintainability of the hypervisor environment. Jason