netdev - Re: [PATCH net-next 0/4] mlxsw: Support traffic redirection from a locked bridge port

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 14 Aug 2023 07:20:22 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Petr Machata <petrm@...dia.com>
Cc: davem@...emloft.net, edumazet@...gle.com, kuba@...nel.org,
 pabeni@...hat.com, netdev@...r.kernel.org, idosch@...dia.com,
 mlxsw@...dia.com
Subject: Re: [PATCH net-next 0/4] mlxsw: Support traffic redirection from a locked
 bridge port

Hello:

This series was applied to netdev/net-next.git (main)
by David S. Miller <davem@...emloft.net>:

On Fri, 11 Aug 2023 17:13:54 +0200 you wrote:
> Ido Schimmel writes:
> 
> It is possible to add a filter that redirects traffic from the ingress
> of a bridge port that is locked (i.e., performs security / SMAC lookup)
> and has learning enabled. For example:
> 
>  # ip link add name br0 type bridge
>  # ip link set dev swp1 master br0
>  # bridge link set dev swp1 learning on locked on mab on
>  # tc qdisc add dev swp1 clsact
>  # tc filter add dev swp1 ingress pref 1 proto ip flower skip_sw src_ip 192.0.2.1 action mirred egress redirect dev swp2
> 
> [...]

Here is the summary with links:
  - [net-next,1/4] mlxsw: core_acl_flex_actions: Add IGNORE_ACTION
    https://git.kernel.org/netdev/net-next/c/d0d449c74764
  - [net-next,2/4] mlxsw: spectrum_flower: Disable learning and security lookup when redirecting
    https://git.kernel.org/netdev/net-next/c/0433670e136a
  - [net-next,3/4] mlxsw: spectrum: Stop ignoring learning notifications from redirected traffic
    https://git.kernel.org/netdev/net-next/c/9793a5a9c493
  - [net-next,4/4] selftests: forwarding: Add test case for traffic redirection from a locked port
    https://git.kernel.org/netdev/net-next/c/38c43a1ce758

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html