how to blacklist PCIe device

[pts2800]

Hello all! And happy Friday-eve!

First I just want to start by saying I'm a TrueNAS Noob, I'm coming from unRAID. I tried googling the problem but came up with nothing.

Long story short, I'm trying to create a PfSense VM, which will be directly attached to my modem/ONT box. I'm currently trying to figure out how to isolate the IOMMU groups of the NIC so it can't be used or seen by the host. I noticed you can isolate a GPU from the UI, but you can't isolate other devices/IOMMU groups.

my Ethernet IOMMU groups:

Code:

root@truenas[~]# lspci | grep Ethernet
04:00.0 Ethernet controller: Intel Corporation I210 Gigabit Network Connection (rev 03)
05:00.0 Ethernet controller: Intel Corporation I210 Gigabit Network Connection (rev 03)
63:00.0 Ethernet controller: Intel Corporation Ethernet Controller X710/X557-AT 10GBASE-T (rev 01)
63:00.1 Ethernet controller: Intel Corporation Ethernet Controller X710/X557-AT 10GBASE-T (rev 01)
63:00.2 Ethernet controller: Intel Corporation Ethernet Controller X710/X557-AT 10GBASE-T (rev 01)
63:00.3 Ethernet controller: Intel Corporation Ethernet Controller X710/X557-AT 10GBASE-T (rev 01)

I'd like to isolate the following 2:

Code:

63:00.2 Ethernet controller: Intel Corporation Ethernet Controller X710/X557-AT 10GBASE-T (rev 01)
63:00.3 Ethernet controller: Intel Corporation Ethernet Controller X710/X557-AT 10GBASE-T (rev 01)

Thanks in advanced!

 

[TempleHasFallen]

I'm also looking for a way to isolate the my ethernet controllers to be able to pass them through to a VM.

There is an open ticket over at jira related to this here, but there doesn't seem to be any progress yet:

[NAS-114636] - iXsystems TrueNAS Jira

ixsystems.atlassian.net