Comment by ADSSDA

Yes, DPDK (which VPP is built on) heavily utilizes IOMMU to provide host protection.

https://doc.dpdk.org/guides/linux_gsg/linux_drivers.html discusses it a bit.