You can configure a port to allow SR-IOV or DirectPath I/O passthrough and then create OpenStack instances that use physical hardware interfaces.


This feature is offered in VMware Integrated OpenStack Carrier Edition only. For more information, see VMware Integrated OpenStack Licensing.

This procedure uses OpenStack Neutron to enable passthrough for networking devices. For non-networking devices, see Configure Passthrough for Non-Networking Devices.


  • Verify that your OpenStack deployment is using VDS or NSX-V networking. Deployments with NSX-T do not support passthrough.

  • Enable SR-IOV or DirectPath I/O in vSphere:

  • Create a dedicated compute cluster for SR-IOV devices. DRS rules do not apply to these devices.

  • To persist the MAC address of a physical device, add its cluster as a compute node before enabling direct passthrough on the device. If direct passthrough has already been enabled, you can disable it, restart the cluster, and enable direct passthrough again.


  1. Log in to the OpenStack Management Server as viouser.
  2. Switch to the root user and load the cloudadmin.rc file.
    sudo su -
    source ~/cloudadmin.rc
  3. Log in to the OpenStack Management Server.
  4. Create a passthrough-enabled port.
    neutron port-create --tenant-id project-uuid --name port-name --vnic_type {direct | direct-physical} network-id




    Specify the UUID of the project for which to create the port. You can find the UUID of a project by running the openstack project list command.


    Enter a name for the port.


    Enter direct for SR-IOV or direct-physical for direct passthrough.


    Specify the UUID of the network on which to create the port. You can find the UUID of a network by running the openstack network list command.


    Port security is not supported for direct and direct-physical ports and will be automatically disabled for the port created.


You can now deploy passthrough-enabled virtual machines by configuring them with the port that you created during this procedure.