anchor.diff:      vendor: "<vendor_code>" <9>
       deviceID: "<device_id>" <10>
       pfNames: ["<pf_name>", ...] <11>
  -    rootDevices: ["<pci_bus_id>", "..."] <12>
  -  deviceType: <device_type> <13>
  -  isRdma: false <14>
  -  linkType: <link_type> <15>
  +    rootDevices: ["<pci_bus_id>", ...] <12>
  +    netFilter: "<filter_string>" <13>
  +  deviceType: <device_type> <14>
  +  isRdma: false <15>
  +  linkType: <link_type> <16>
   ----
  -<1> The name for the CR object.
  +<1> The name for the custom resource object.
   
   <2> The namespace where the SR-IOV Operator is installed.
   
  -<3> The resource name of the SR-IOV device plug-in. You can create multiple `SriovNetworkNodePolicy` objects for a resource name.
  +<3> The resource name of the SR-IOV device plug-in. You can create multiple SR-IOV network node policies for a resource name.
   
  -<4> The node selector to select which nodes are configured.
  -Only SR-IOV network devices on selected nodes are configured. The SR-IOV
  -Container Network Interface (CNI) plug-in and device plug-in are deployed on only selected nodes.
  +<4> The node selector specifies the nodes to configure. Only SR-IOV network devices on the selected nodes are configured. The SR-IOV Container Network Interface (CNI) plug-in and device plug-in are deployed on selected nodes only.
   
  -<5> Optional: An integer value between `0` and `99`. A smaller number gets higher priority, so a priority of `10` is higher than a priority of `99`. The default value is `99`.
  +<5> Optional: The priority is an integer value between `0` and `99`. A smaller value receives higher priority. For example, a priority of `10` is a higher priority than `99`. The default value is `99`.
   
  -<6> Optional: The maximum transmission unit (MTU) of the virtual function. The maximum MTU value can vary for different NIC models.
  +<6> Optional: The maximum transmission unit (MTU) of the virtual function. The maximum MTU value can vary for different network interface controller (NIC) models.
   
  -<7> The number of the virtual functions (VF) to create for the SR-IOV physical network device. For an Intel Network Interface Card (NIC), the number of VFs cannot be larger than the total VFs supported by the device. For a Mellanox NIC, the number of VFs cannot be larger than `128`.
  +<7> The number of the virtual functions (VF) to create for the SR-IOV physical network device. For an Intel network interface controller (NIC), the number of VFs cannot be larger than the total VFs supported by the device. For a Mellanox NIC, the number of VFs cannot be larger than `128`.
   
  -<8> The `nicSelector` mapping selects the device for the Operator to configure. You do not have to specify values for all the parameters. It is recommended to identify the network device with enough precision to avoid selecting a device unintentionally.
  -If you specify `rootDevices`, you must also specify a value for `vendor`, `deviceID`, or `pfNames`.
  -If you specify both `pfNames` and `rootDevices` at the same time, ensure that they point to the same device.
  +<8> The NIC selector identifies the device for the Operator to configure. You do not have to specify values for all the parameters. It is recommended to identify the network device with enough precision to avoid selecting a device unintentionally.
  ++
  +If you specify `rootDevices`, you must also specify a value for `vendor`, `deviceID`, or `pfNames`. If you specify both `pfNames` and `rootDevices` at the same time, ensure that they refer to the same device. If you specify a value for `netFilter`, then you do not need to specify any other parameter because a network ID is unique.
   
  -<9> Optional: The vendor hex code of the SR-IOV network device. The only allowed values are `8086` and `15b3`.
  +<9> Optional: The vendor hexadecimal code of the SR-IOV network device. The only allowed values are `8086` and `15b3`.
   
  -<10> Optional: The device hex code of SR-IOV network device. The only allowed values are `158b`, `1015`, and `1017`.
  +<10> Optional: The device hexadecimal code of the SR-IOV network device. The only allowed values are `158b`, `1015`, and `1017`.
   
   <11> Optional: An array of one or more physical function (PF) names for the device.
   
  -<12> An array of one or more PCI bus addresses for the PF of the device. Provide the address in the following format: `0000:02:00.1`.
  +<12> Optional: An array of one or more PCI bus addresses for the PF of the device. Provide the address in the following format: `0000:02:00.1`.
   
  -<13> Optional: The driver type for the virtual functions. The only allowed values are `netdevice` and `vfio-pci`. The default value is `netdevice`.
  +<13> Optional: The platform-specific network filter. The only supported platform is {rh-openstack-first}. Acceptable values use the following format: `openstack/NetworkID:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`. Replace `xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx` with the value from the `/var/config/openstack/latest/network_data.json` metadata file.
  +
  +<14> Optional: The driver type for the virtual functions. The only allowed values are `netdevice` and `vfio-pci`. The default value is `netdevice`.
   +
  -[NOTE]
  -====
  -For a Mellanox card to work in Data Plane Development Kit (DPDK) mode on bare metal nodes, use the `netdevice` driver type and set `isRdma` to `true`.
  -====
  +For a Mellanox NIC to work in Data Plane Development Kit (DPDK) mode on bare metal nodes, use the `netdevice` driver type and set `isRdma` to `true`.
   
  -<14> Optional: Whether to enable remote direct memory access (RDMA) mode. The default value is `false`.
  +<15> Optional: Whether to enable remote direct memory access (RDMA) mode. The default value is `false`.
   +
  -[NOTE]
  -====
  -If the `isRDMA` parameter is set to `true`, you can continue to use the RDMA enabled VF as a normal network device.
  -A device can be used in either mode.
  -====
  +If the `isRDMA` parameter is set to `true`, you can continue to use the RDMA-enabled VF as a normal network device. A device can be used in either mode.
   
  -<15> Optional: The link type for the VFs. You can specify one of the following values: `eth` or `ib`. `eth` is ethernet and `ib` is InfiniBand. The default value is `eth` if it is not explicitly set. When `linkType` is set to `ib`, `isRdma` will be set to `true` by SR-IOV Network Operator webhook automatically. When `linkType` is set to `ib`, `deviceType` should not be set to `vfio-pci`.
  +<16> Optional: The link type for the VFs. You can specify one of the following values: `eth` or `ib`. Specify `eth` for Ethernet or `ib` for InfiniBand. The default value is `eth`.
  ++
  +When `linkType` is set to `ib`, `isRdma` is automatically set to `true` by the SR-IOV Network Operator webhook. When `linkType` is set to `ib`, `deviceType` should not be set to `vfio-pci`.
   
   [id="sr-iov-network-node-configuration-examples_{context}"]
   == SR-IOV network node configuration examples
   
  -The following example describes the configuration for an IB device:
  +The following example describes the configuration for an InfiniBand device:
   
  -.Example configuration for an IB device
  +.Example configuration for an InfiniBand device
   [source,yaml]
   ----
   apiVersion: sriovnetwork.openshift.io/v1
  
positive.code: [id="nw-sriov-networknodepolicy-object_{context}"]
  = SR-IOV network node configuration object
  
  You specify the SR-IOV network device configuration for a node by defining an `SriovNetworkNodePolicy` object. The object is part of the `sriovnetwork.openshift.io` API group.
  
  The following YAML describes an `SriovNetworkNodePolicy` object:
  
  [source,yaml]
  ----
  
negative.code:   linkType: ib
    isRdma: true
  ----
  
  The following example describes the configuration for an SR-IOV network device in a {rh-openstack} virtual machine:
  
  .Example configuration for an SR-IOV device in a virtual machine
  [source,yaml]
  ----
  apiVersion: sriovnetwork.openshift.io/v1
  kind: SriovNetworkNodePolicy
  metadata:
    name: policy-sriov-net-openstack-1
    namespace: openshift-sriov-network-operator
  spec:
    resourceName: sriovnic1
    nodeSelector:
      feature.node.kubernetes.io/network-sriov.capable: "true"
    numVfs: 1 <1>
    nicSelector:
      vendor: "15b3"
      deviceID: "101b"
      netFilter: "openstack/NetworkID:ea24bd04-8674-4f69-b0ee-fa0b3bd20509" <2>
  ----
  
  <1> The `numVfs` field is always set to `1` when configuring the node network policy for a virtual machine.
  
  <2> The `netFilter` field must refer to a network ID when the virtual machine is deployed on {rh-openstack}. Valid values for `netFilter` are available from an `SriovNetworkNodeState` object.
  