| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 21 May 2021 09:27:52 -0400 From: Jarod Wilson <jarod@...hat.com> To: linux-kernel@...r.kernel.org Cc: Jarod Wilson <jarod@...hat.com> Subject: [PATCH net-next v2 0/4] bonding/balance-alb: support VMs behind bridges better I've been further educated on a use case, where a bridge sits on top of a bond, with multiple vnetX interfaces attached to virtual machines, also acting as ports of the bridge. Each leg of the bond goes to a different switch, but there is NO mlag/vpc in play, the bonding driver has to handle traffic that loops back appropriately to avoid breaking transmission. Rather than adding some sort of mac filtering to balance-xor mode, we switched to using balance-alb, which already does some of this, and with the tweaks provided in this series, empirically seems to behave as desired in actual operation. v2 attempts to support srcmac-only hashing via a modparam instead of by adding yet another hashing mode, as well as cleaning up and clarifying commit messages. Jarod Wilson (4): bonding: add pure source-mac-based tx hashing option bonding/balance-lb: don't rewrite bridged non-local MACs bonding/balance-alb: don't tx balance multicast traffic either bonding/balance-alb: put all slaves into promisc Documentation/networking/bonding.rst | 13 +++++++++++++ drivers/net/bonding/bond_alb.c | 24 +++++++++++++++++++++--- drivers/net/bonding/bond_main.c | 23 +++++++++++++++-------- 3 files changed, 49 insertions(+), 11 deletions(-) -- 2.30.2
Powered by blists - more mailing lists