netdev - Re: [Bonding Draft Proposal] Add lacp_prio Support for ad

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <aGTjXpYYXIMfl9N6@fedora>
Date: Wed, 2 Jul 2025 07:44:30 +0000
From: Hangbin Liu <liuhangbin@...il.com>
To: Jay Vosburgh <jv@...sburgh.net>
Cc: Andrew Lunn <andrew+netdev@...n.ch>,
	"David S. Miller" <davem@...emloft.net>,
	Eric Dumazet <edumazet@...gle.com>,
	Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>,
	Jiri Pirko <jiri@...nulli.us>, netdev@...r.kernel.org
Subject: Re: [Bonding Draft Proposal] Add lacp_prio Support for ad_select?

Hi Jay,
On Tue, Jul 01, 2025 at 10:08:56AM -0700, Jay Vosburgh wrote:
> 	It looks like lacp_find_new_agg_lead() runs though all of the
> ports in all of the aggregators and chooses the aggregator with the
> "best" port of all.

Yes, based on the ad_select policy.

> 
> 	One downside if we were to adapt this logic or something similar
> to bonding is that there's currently no way to set the Port Priority of
> interfaces in the bond.  There is a "prio" that can be set via ip set
> ... type bond_slave prio X, which is IFLA_BOND_SLAVE_PRIO, but that's a
> failover priority, not the LACP Port Priority.

How about adding a similar parameter, e.g., ad_actor_port_prio?
Currently, the actor port priority is initialized directly as 0xFF.
We could introduce a per-port ad_actor_port_prio to be used in the
ad_select policy.

I understand that, according to the IEEE standard, port priority is used to
select the best port among multiple ports within a single aggregator.
However, since the IEEE standard doesn't define how to select between two
aggregators, we could repurpose this value similarly to how the bandwidth
and count options work in the current ad_select policy.

> 
> 	So right now, if the above logic were put into bonding, the
> local selection criteria would end up based entirely on the port number,
> which isn't configurable, and so doesn't seem especially better than
> what we have now.

[...]
> 
> 	From the above, I suspect we'll have to add some additional
> configuration parameters somewhere.  It would be nice if the System
> Priority were configurable on a per-aggregator basis, but that seems
> complicated from a UI perspective (other than something like a mapping
> of agg ID to system prio).

Thanks
Hangbin