lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <52F79990.3000400@mojatatu.com> Date: Sun, 09 Feb 2014 10:06:56 -0500 From: Jamal Hadi Salim <jhs@...atatu.com> To: "netdev@...r.kernel.org" <netdev@...r.kernel.org> CC: vyasevic@...hat.com, Stephen Hemminger <stephen@...workplumber.org>, Scott Feldman <sfeldma@...ulusnetworks.com>, John Fastabend <john.r.fastabend@...el.com> Subject: RFC: bridge get fdb by bridge device This patch allows something equivalent to "brctl showmacs <bridge device>" with iproute2 syntax "bridge link br <bridge device>" Filtering by bridge is done in the kernel. The current setup doesnt scale when you have many bridges each with large fdbs (preliminary fix with the kernel patch). iproute2 allows filtering by bridge port, example: "bridge link br br1234 dev port1234" but the filtering is done in user space. In a future patch i would like to do the port filtering in the kernel. As well, adding a MAC filter in the kernel makes sense. Kernel patch is against net-next. cheers, jamal View attachment "bridge-fdb-filter1" of type "text/plain" (2009 bytes) View attachment "iprt-fdb-brfilter1" of type "text/plain" (1897 bytes)
Powered by blists - more mailing lists