netdev - Re: [net-next PATCH] net: RFC3069, private VLAN proxy arp support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Thu, 07 Jan 2010 00:59:19 -0800 (PST)
From:	David Miller <davem@...emloft.net>
To:	hawk@...x.dk
Cc:	netdev@...r.kernel.org
Subject: Re: [net-next PATCH] net: RFC3069, private VLAN proxy arp support

From: Jesper Dangaard Brouer <hawk@...x.dk>
Date: Tue, 05 Jan 2010 16:50:47 +0100

> This is to be used together with switch technologies, like RFC3069,
> that where the individual ports are not allowed to communicate with
> each other, but they are allowed to talk to the upstream router.  As
> described in RFC 3069, it is possible to allow these hosts to
> communicate through the upstream router by proxy_arp'ing.
> 
> This patch basically allow proxy arp replies back to the same
> interface (from which the ARP request/solicitation was received).
> 
> Tunable per device via proc "proxy_arp_pvlan":
>   /proc/sys/net/ipv4/conf/*/proxy_arp_pvlan
> 
> This switch technology is known by different vendor names:
>  - In RFC 3069 it is called VLAN Aggregation.
>  - Cisco and Allied Telesyn call it Private VLAN.
>  - Hewlett-Packard call it Source-Port filtering or port-isolation.
>  - Ericsson call it MAC-Forced Forwarding (RFC Draft).
> 
> Signed-off-by: Jesper Dangaard Brouer <hawk@...x.dk>

Applied.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html