netdev - Re: vrf and multicast is broken in some cases

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <fe89273d-106b-f02b-2a13-a819b234f086@gmail.com>
Date:   Wed, 15 Jan 2020 15:53:53 -0700
From:   David Ahern <dsahern@...il.com>
To:     Ben Greear <greearb@...delatech.com>,
        Ido Schimmel <idosch@...sch.org>
Cc:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Re: vrf and multicast is broken in some cases

On 1/15/20 2:09 PM, Ben Greear wrote:
> For the vrf.txt referenced above, it would be nice if it mentioned that
> if you do NOT add the default route, it will skip to the main table
> and use it's gateway.  I was visualizing VRF as a self contained thing
> that would not do such a thing.

The in-tree documentation needs an update.

Every tutorial I have given on VRF mentions that it is implemented as
policy routing meaning FIB lookups follow the FIB rules. You say 'main'
table but really it leaves the l3mdev rule and drops to the next rule
which in your case is the main table.