Re: [pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-11-11 Thread DERUMIER, Alexandre
Le jeudi 11 novembre 2021 à 11:40 +0100, Thomas Lamprecht a écrit : On 24.09.21 10:48, Alexandre Derumier wrote: Currently, if bridge receive an unknown dest mac (network bug/attack/..), we are flooding packets to all bridge ports. This can waste cpu time, even more with firewall enabled. Also, if

Re: [pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-11-11 Thread Josef Johansson
On 11/11/21 11:40, Thomas Lamprecht wrote: > On 24.09.21 10:48, Alexandre Derumier wrote: >> Currently, if bridge receive an unknown dest mac (network bug/attack/..), >> we are flooding packets to all bridge ports. >> >> This can waste cpu time, even more with firewall enabled. >> Also, if firewall

Re: [pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-11-11 Thread Thomas Lamprecht
On 24.09.21 10:48, Alexandre Derumier wrote: > Currently, if bridge receive an unknown dest mac (network bug/attack/..), > we are flooding packets to all bridge ports. > > This can waste cpu time, even more with firewall enabled. > Also, if firewall is used with reject action, the src mac of RST >

[pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-09-24 Thread Alexandre Derumier
Currently, if bridge receive an unknown dest mac (network bug/attack/..), we are flooding packets to all bridge ports. This can waste cpu time, even more with firewall enabled. Also, if firewall is used with reject action, the src mac of RST packet is the original unknown dest mac. (This can block