| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20120816.145501.2026059988735122378.davem@davemloft.net> Date: Thu, 16 Aug 2012 14:55:01 -0700 (PDT) From: David Miller <davem@...emloft.net> To: jhs@...atatu.com Cc: jasowang@...hat.com, netdev@...r.kernel.org, linux-kernel@...r.kernel.org Subject: Re: [net V2] act_mirred: do not drop packets when fails to mirror it From: Jamal Hadi Salim <jhs@...atatu.com> Date: Thu, 16 Aug 2012 08:11:47 -0400 > On Thu, 2012-08-16 at 14:44 +0800, Jason Wang wrote: >> We drop packet unconditionally when we fail to mirror it. This is not intended >> in some cases. Consdier for kvm guest, we may mirror the traffic of the bridge >> to a tap device used by a VM. When kernel fails to mirror the packet in >> conditions such as when qemu crashes or stop polling the tap, it's hard for the >> management software to detect such condition and clean the the mirroring >> before. This would lead all packets to the bridge to be dropped and break the >> netowrk of other virtual machines. >> >> To solve the issue, the patch does not drop packets when kernel fails to mirror >> it, and only drop the redirected packets. >> >> Signed-off-by: Jason Wang <jasowang@...hat.com> > > Signed-off-by: Jamal Hadi Salim <jhs@...atatu.com> Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists