netdev - [PATCH iproute2-next 00/10] bridge: fdb: add extended flush support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Wed,  8 Jun 2022 15:29:11 +0300
From:   Nikolay Aleksandrov <razor@...ckwall.org>
To:     netdev@...r.kernel.org
Cc:     dsahern@...il.com, stephen@...workplumber.org, roopa@...dia.com,
        Nikolay Aleksandrov <razor@...ckwall.org>
Subject: [PATCH iproute2-next 00/10] bridge: fdb: add extended flush support

Hi,
This set adds support for the new bulk delete flag to allow fdb flushing
for specific entries which are matched based on the supplied options.
The new bridge fdb subcommand is "flush", and as can be seen from the
commits it allows to delete entries based on many different criteria:
 - matching vlan
 - matching port
 - matching all sorts of flags (combinations are allowed)

There are also examples for each option in the respective commit messages.

Examples:
$ bridge fdb flush dev swp2 master vlan 100 dynamic
 [ delete all dynamic entries with port swp2 and vlan 100 ]
$ bridge fdb flush dev br0 vlan 1 static
 [ delete all static entries in br0's fdb table ]
$ bridge fdb flush dev swp2 master extern_learn nosticky
 [ delete all entries with port swp2 which have extern_learn set and
   don't have the sticky flag set ]
$ bridge fdb flush dev br0 brport br0 vlan 100 permanent
 [ delete all entries pointing to the bridge itself with vlan 100 ]
$ bridge fdb flush dev swp2 master nostatic nooffloaded
 [ delete all entries with port swp2 which are not static and not
   offloaded ]

If keyword is specified and after that nokeyword is specified obviously
the nokeyword would override keyword.

Thanks,
 Nik

Nikolay Aleksandrov (10):
  bridge: fdb: add new flush command
  bridge: fdb: add flush vlan matching
  bridge: fdb: add flush port matching
  bridge: fdb: add flush [no]permanent entry matching
  bridge: fdb: add flush [no]static entry matching
  bridge: fdb: add flush [no]dynamic entry matching
  bridge: fdb: add flush [no]added_by_user entry matching
  bridge: fdb: add flush [no]extern_learn entry matching
  bridge: fdb: add flush [no]sticky entry matching
  bridge: fdb: add flush [no]offloaded entry matching

 bridge/fdb.c      | 142 +++++++++++++++++++++++++++++++++++++++++++++-
 man/man8/bridge.8 |  83 +++++++++++++++++++++++++++
 2 files changed, 224 insertions(+), 1 deletion(-)

-- 
2.35.1