Re: [pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-11-11 Thread DERUMIER, Alexandre
Le jeudi 11 novembre 2021 à 11:40 +0100, Thomas Lamprecht a écrit : On 24.09.21 10:48, Alexandre Derumier wrote: Currently, if bridge receive an unknown dest mac (network bug/attack/..), we are flooding packets to all bridge ports. This can waste cpu time, even more with firewall enabled. Also, if

Re: [pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-11-11 Thread Josef Johansson
On 11/11/21 11:40, Thomas Lamprecht wrote: > On 24.09.21 10:48, Alexandre Derumier wrote: >> Currently, if bridge receive an unknown dest mac (network bug/attack/..), >> we are flooding packets to all bridge ports. >> >> This can waste cpu time, even more with firewall enabled. >> Also, if firewall

Re: [pve-devel] [PATCH pve-common 0/2] add disable bridge learning feature

2021-11-11 Thread Thomas Lamprecht
On 24.09.21 10:48, Alexandre Derumier wrote: > Currently, if bridge receive an unknown dest mac (network bug/attack/..), > we are flooding packets to all bridge ports. > > This can waste cpu time, even more with firewall enabled. > Also, if firewall is used with reject action, the src mac of RST >