That’s the OPs reply, not the AI.

Funny thing, time.is uses Cloudflare, and I only found out because of the outage.

Yeah thats fair enough. The ACS override patch should still have better isolation and speed than anything else you can do without native ACS, the security implications are just it’s theoretically possible to intercept another PCIe device’s traffic through the NIC; you can read more here.

SR-IOV works by presenting one device as many, which you can passthrough one of those to your VM. Meaning SR-IOV only works through PCIe passthrough, so you’d have to figure that out first. The GPU guides should get you most of the way there.

Some distros include an ACS patch into their kernel (e.g. Proxmox, and I think CachyOS), which lets you passthrough devices without hardware support (but lacking some security features).

I believe it might be possible to ‘passthrough’ the VF from the host without PCIe passthrough (I’ve only done this with containers though), but performance is often worse than just using a bridge.

Fun fact: there actually is an IP version 5, and the reason we went from v4 to v6.

Fair enough. It seems like vibrant visuals is possible with GPU spoofing, but I haven’t tried it.

You can also play the Android release fine with Waydroid.