From: "Toke Høiland-Jørgensen" <toke@redhat.com>
To: Topi Wala <walatopi@gmail.com>, xdp-newbies@vger.kernel.org
Subject: Re: NDv6 and xdp-filter
Date: Tue, 22 Sep 2020 13:28:11 +0200 [thread overview]
Message-ID: <874knqoxtg.fsf@toke.dk> (raw)
In-Reply-To: <CAOfgOftdYJF7yc8HQWCPvfLkuBcd3VRjgNK6vwV7ampuW+TKTw@mail.gmail.com>
Topi Wala <walatopi@gmail.com> writes:
> Hi,
>
> I've installed an xdp-filter (dny_all) on my tap interface (and am
> only letting through L2 packets that match my src/dst mac), and it
> still lets through NDv6 traffic. Do L2 multicast packets not get
> "received" by the xdp filter? Running tcpdump inside Qemu linux
> connected to this tap interface shows me NDv6 multicast packets from
> the ToR switch.
All packets should be received by the XDP program; but only in the
ingress direction. So what do mean "running tcpdump inside the qemu
instance"? That sounds like you're talking about packets going *out* of
the TAP interface from the host PoV? XDP won't see those (you'll have to
run the program on the physical interface).
-Toke
prev parent reply other threads:[~2020-09-22 11:28 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-09-22 2:27 NDv6 and xdp-filter Topi Wala
2020-09-22 11:28 ` Toke Høiland-Jørgensen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=874knqoxtg.fsf@toke.dk \
--to=toke@redhat.com \
--cc=walatopi@gmail.com \
--cc=xdp-newbies@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.