netdev - Re: [RFC PATCH net-next 02/12] selftests: forwarding: Add a test for FDB learning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 15 Jan 2018 22:01:40 +0100
From:   Andrew Lunn <andrew@...n.ch>
To:     Ido Schimmel <idosch@...sch.org>
Cc:     Ido Schimmel <idosch@...lanox.com>, netdev@...r.kernel.org,
        linux-kselftest@...r.kernel.org, davem@...emloft.net,
        shuah@...nel.org, dsahern@...il.com, nikolay@...ulusnetworks.com,
        roopa@...ulusnetworks.com, andy@...yhouse.net, jiri@...lanox.com,
        mlxsw@...lanox.com, saeedm@...lanox.com, tariqt@...lanox.com,
        jhs@...atatu.com, lucasb@...atatu.com, f.fainelli@...il.com,
        vivien.didelot@...oirfairelinux.com, jakub.kicinski@...ronome.com,
        simon.horman@...ronome.com
Subject: Re: [RFC PATCH net-next 02/12] selftests: forwarding: Add a test for
 FDB learning

> Good idea. We can actually do that with only two ports. Disable flooding
> on port A, check packets with DMAC A don't egress the port. Inject a
> packet with SMAC A through port A, check packets with DMAC A egress the
> port.

Hi Ido

You could do it like that. But that is more testing that you can
disable flooding. And how often do users do that?

What does your marketing department tell you about typical users of
your switches? For DSA, we typically have 4 or 5 ports. 4 of those
ports are typically in one bridge, and the remaining port is used
alone. That is the sort of setup i test in DSA. Your switches
typically have 40 ports? Do your users setup 20 bridges each with two
ports?

I would test the use cases which people actually use. I expect people
setup a bridge with multiple ports, and they send traffic without
changing any defaults. So that setup is what i would test.

	Andrew