lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Mon, 11 Apr 2022 08:45:36 -0700
From:   Stephen Hemminger <>
To:     Boris Sukholitko <>
Cc:, "David S . Miller" <>,
        Jakub Kicinski <>,
        Jamal Hadi Salim <>,
        Cong Wang <>,
        Jiri Pirko <>,
        "Gustavo A . R . Silva" <>,
        Vladimir Oltean <>,
        Eric Dumazet <>,
        zhang kai <>,
        Yoshiki Komachi <>,
        Ilya Lifshits <>
Subject: Re: [PATCH iproute2-next 0/2] flower: match on the number of vlan

On Mon, 11 Apr 2022 16:32:00 +0300
Boris Sukholitko <> wrote:

> Hi,
> Our customers in the fiber telecom world have network configurations
> where they would like to control their traffic according to the number
> of tags appearing in the packet.
> For example, TR247 GPON conformance test suite specification mostly
> talks about untagged, single, double tagged packets and gives lax
> guidelines on the vlan protocol vs. number of vlan tags.
> This is different from the common IT networks where 802.1Q and 802.1ad
> protocols are usually describe single and double tagged packet. GPON
> configurations that we work with have arbitrary mix the above protocols
> and number of vlan tags in the packet.
> The following patch series implement number of vlans flower filter. They
> add num_of_vlans flower filter as an alternative to vlan ethtype protocol
> matching. The end result is that the following command becomes possible:
> tc filter add dev eth1 ingress flower \
>   num_of_vlans 1 vlan_prio 5 action drop
> The corresponding kernel patches are being sent separately.
> Thanks,
> Boris.

Maybe something custom like this is better done by small BPF program?

Powered by blists - more mailing lists