Skip to content

bridge: Prevent unicast ARP/NS packets from being suppressed by bridge

Petr Machata bridge netdev 1 version Applied

Status from this message: This series was applied to netdev/net-next.git (main)

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 2 repliesApplied 2/2

Patches in v1 All 2 applied

#Subject and filesSizeRepliesApplied
1/2net: bridge: Prevent unicast ARP/NS packets from being suppressed by bridgenet/bridge/br_arp_nd_proxy.c+7 -01 replyApplied
2/2selftests: test_bridge_neigh_suppress: Test unicast ARP/NS with suppressiontools/testing/selftests/net/test_bridge_neigh_suppress.sh+125 -01 replyApplied

Reviews trailers per patch

All 2 patches have a Reviewed-by or Acked-by.

PatchIdo SchimmelNikolay Aleksandrov
1/2R-b A-b
2/2R-b A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH net-next 0/2] bridge: Prevent unicast ARP/NS packets from being suppressed by bridge

From: Amit Cohen <[email protected]>

Currently, unicast ARP requests/NS packets are replied by bridge when suppression is enabled, then they are also forwarded, which results two replicas of ARP reply/NA - one from the bridge and second from the target.

The purpose of ARP/ND suppression is to reduce flooding in the broadcast domain, which is not relevant for unicast packets. In addition, the use case of unicast ARP/NS is to poll a specific host, so it does not make sense to have the switch answer on behalf of the host.

Forward ARP requests/NS packets and prevent the bridge from replying to them.

Patch set overview:
Patch #1 prevents unicast ARP/NS packets from being suppressed by bridge Patch #2 adds test cases for unicast ARP/NS with suppression enabled

Amit Cohen (2):
net: bridge: Prevent unicast ARP/NS packets from being suppressed by
bridge
selftests: test_bridge_neigh_suppress: Test unicast ARP/NS with
suppression

 net/bridge/br_arp_nd_proxy.c                  |   7 +
 .../net/test_bridge_neigh_suppress.sh         | 125 ++++++++++++++++++
 2 files changed, 132 insertions(+)
Signature · 1 line
2.47.0