From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.0 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id D45F3C3E8C6 for ; Thu, 6 Aug 2020 11:05:15 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id C901722D2C for ; Thu, 6 Aug 2020 11:05:14 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=messagingengine.com header.i=@messagingengine.com header.b="SF0bxCFn" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728846AbgHFHtX (ORCPT ); Thu, 6 Aug 2020 03:49:23 -0400 Received: from wout3-smtp.messagingengine.com ([64.147.123.19]:48151 "EHLO wout3-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728829AbgHFHtT (ORCPT ); Thu, 6 Aug 2020 03:49:19 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id A746F1029; Thu, 6 Aug 2020 03:49:13 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Thu, 06 Aug 2020 03:49:13 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=q7DxaO PJVaS8LWtXNtIORn1WxTk8Oijh/Ce2HabIUXc=; b=SF0bxCFnNaM/7Jt5VxZ09r 8URVNapfCPI52RE9SzuHaAtEgWpHaBhwb+eu6R+KX6VniUMCLo4uuENLfIj1Lj54 In7DSiZ6Gqzj/35LaCxk2qDcRnLckbAeVyF3ATZHkX1om6lSkd4YjT6GkTk0/J7V 4bMzKLoEoYuBEYtOuvYqQ3gHMtzCeBJhLQToUHrcCc8BP8RblgH7wqS34W9zbhzy 8kMHy5lFinfULI2HTTb4Fs8ytEyG2V3TtRr8lXL0jteZZjEjXPC/o4CCf+h5g/Us lZDdihwY4i2QOvxOdZm+rsP08IxQonaXbUIxbcyfeqYFeCA5iXf2n4LrN4RuxgcA == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduiedrjeelgdduvdejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesthdtre dttddtvdenucfhrhhomhepkfguohcuufgthhhimhhmvghluceoihguohhstghhsehiugho shgthhdrohhrgheqnecuggftrfgrthhtvghrnheptdffkeekfeduffevgeeujeffjefhte fgueeugfevtdeiheduueeukefhudehleetnecukfhppeejledrudekuddriedrvdduleen ucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehiughosh gthhesihguohhstghhrdhorhhg X-ME-Proxy: Received: from localhost (bzq-79-181-6-219.red.bezeqint.net [79.181.6.219]) by mail.messagingengine.com (Postfix) with ESMTPA id 6962930600B4; Thu, 6 Aug 2020 03:49:12 -0400 (EDT) Date: Thu, 6 Aug 2020 10:49:09 +0300 From: Ido Schimmel To: Swarm NameRedacted Cc: netdev@vger.kernel.org Subject: Re: Packet not rerouting via different bridge interface after modifying destination IP in TC ingress hook Message-ID: <20200806074909.GA2624653@shredder> References: <20200805081951.4iznjdgudulitamc@chillin-at-nou.localdomain> <20200805133922.GB1960434@lunn.ch> <20200805201204.vsnav57fmgqkkpxf@chillin-at-nou.localdomain> <20200806063336.GA2621096@shredder> <20200806070011.fmqvd4hekpehx425@chillin-at-nou.localdomain> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200806070011.fmqvd4hekpehx425@chillin-at-nou.localdomain> Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org On Thu, Aug 06, 2020 at 07:00:15AM +0000, Swarm NameRedacted wrote: > Not sure this applies. There's no NAT since everything is on the same > subnet. IIUC, packet is received on eth0, you then change the DMAC to SMAC on ingress (among other things) and then packet continues to the bridge. The bridge checks the DMAC and sees that the packet is supposed to be forwarded out of eth0. Since it's also the ingress interface the packet is dropped. To overcome this you need to enable hairpin.