Re: [RFC net-next 1/1] net: sched: protect against loops in TC filter hooks

2019-05-28 Thread John Hurley
On Fri, May 24, 2019 at 7:32 PM Daniel Borkmann wrote: > > On 05/24/2019 06:05 PM, John Hurley wrote: > > TC hooks allow the application of filters and actions to packets at both > > ingress and egress of the network stack. It is possible, with poor > > configuration, that this can produce loops w

Re: [RFC net-next 1/1] net: sched: protect against loops in TC filter hooks

2019-05-26 Thread Jamal Hadi Salim
On 2019-05-24 2:32 p.m., Daniel Borkmann wrote: On 05/24/2019 06:05 PM, John Hurley wrote: TC hooks allow the application of filters and actions to packets at both ingress and egress of the network stack. It is possible, with poor configuration, that this can produce loops whereby an ingress hoo

Re: [RFC net-next 1/1] net: sched: protect against loops in TC filter hooks

2019-05-24 Thread Daniel Borkmann
On 05/24/2019 06:05 PM, John Hurley wrote: > TC hooks allow the application of filters and actions to packets at both > ingress and egress of the network stack. It is possible, with poor > configuration, that this can produce loops whereby an ingress hook calls > a mirred egress action that has an

Re: [RFC net-next 1/1] net: sched: protect against loops in TC filter hooks

2019-05-24 Thread Stephen Hemminger
On Fri, 24 May 2019 17:05:46 +0100 John Hurley wrote: > TC hooks allow the application of filters and actions to packets at both > ingress and egress of the network stack. It is possible, with poor > configuration, that this can produce loops whereby an ingress hook calls > a mirred egress action

[RFC net-next 1/1] net: sched: protect against loops in TC filter hooks

2019-05-24 Thread John Hurley
TC hooks allow the application of filters and actions to packets at both ingress and egress of the network stack. It is possible, with poor configuration, that this can produce loops whereby an ingress hook calls a mirred egress action that has an egress hook that redirects back to the first ingres