From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ido Schimmel Subject: Re: [PATCH 1/1] bridge: remove BR_GROUPFWD_RESTRICTED for arbitrary forwarding of reserved addresses Date: Mon, 1 Oct 2018 21:25:26 +0300 Message-ID: <20181001182526.GA28369@splinter> References: <1420505776-26827-1-git-send-email-bernhard.thaler@wvnet.at> <9331d9d8-fb4b-36f3-9484-fc80f579e617@gmail.com> <3581745.3NPUBHfd8z@blindfold> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Florian Fainelli , Richard Weinberger , Stephen Hemminger , bernhard.thaler@wvnet.at, "David S. Miller" , bridge@lists.linux-foundation.org, netdev@vger.kernel.org, David Gstir To: Richard Weinberger Return-path: Received: from out3-smtp.messagingengine.com ([66.111.4.27]:48235 "EHLO out3-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726317AbeJBBEg (ORCPT ); Mon, 1 Oct 2018 21:04:36 -0400 Content-Disposition: inline In-Reply-To: <3581745.3NPUBHfd8z@blindfold> Sender: netdev-owner@vger.kernel.org List-ID: On Mon, Oct 01, 2018 at 08:16:22PM +0200, Richard Weinberger wrote: > Florian, > > Am Montag, 1. Oktober 2018, 18:24:25 CEST schrieb Florian Fainelli: > > If all you are doing is forwarding anything, one thing I experimented > > with before is the following: > > > > # tc qdisc add dev eth1 handle ffff: ingress > > # tc qdisc add dev eth3 handle ffff: ingress > > # tc filter add dev eth3 parent ffff: u32 \ > > > match u32 0 0 \ > > > action mirred egress redirect dev eth1 > > # tc filter add dev eth1 parent ffff: u32 \ > > > match u32 0 0 \ > > > action mirred egress redirect dev eth3 > > # ifconfig eth3 promisc > > # ifconfig eth1 promisc > > > > and this works just fine actually, bypassing the bridge layer entirely. > > Yeah, mirred is a powerful knife. :-) > > In my case it is too low level since I utilize the netfilter functionality of > the bridge layer. You can use mirred only for the specific packets you care about and let the rest continue to the bridge.