From mboxrd@z Thu Jan 1 00:00:00 1970 From: Richard Weinberger Subject: Re: [PATCH 1/1] bridge: remove BR_GROUPFWD_RESTRICTED for arbitrary forwarding of reserved addresses Date: Mon, 01 Oct 2018 20:16:22 +0200 Message-ID: <3581745.3NPUBHfd8z@blindfold> References: <1420505776-26827-1-git-send-email-bernhard.thaler@wvnet.at> <9331d9d8-fb4b-36f3-9484-fc80f579e617@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7Bit Cc: Richard Weinberger , Stephen Hemminger , bernhard.thaler@wvnet.at, "David S. Miller" , bridge@lists.linux-foundation.org, netdev@vger.kernel.org, David Gstir To: Florian Fainelli Return-path: Received: from lithops.sigma-star.at ([195.201.40.130]:60762 "EHLO lithops.sigma-star.at" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726441AbeJBAz1 (ORCPT ); Mon, 1 Oct 2018 20:55:27 -0400 In-Reply-To: <9331d9d8-fb4b-36f3-9484-fc80f579e617@gmail.com> Sender: netdev-owner@vger.kernel.org List-ID: Florian, Am Montag, 1. Oktober 2018, 18:24:25 CEST schrieb Florian Fainelli: > If all you are doing is forwarding anything, one thing I experimented > with before is the following: > > # tc qdisc add dev eth1 handle ffff: ingress > # tc qdisc add dev eth3 handle ffff: ingress > # tc filter add dev eth3 parent ffff: u32 \ > > match u32 0 0 \ > > action mirred egress redirect dev eth1 > # tc filter add dev eth1 parent ffff: u32 \ > > match u32 0 0 \ > > action mirred egress redirect dev eth3 > # ifconfig eth3 promisc > # ifconfig eth1 promisc > > and this works just fine actually, bypassing the bridge layer entirely. Yeah, mirred is a powerful knife. :-) In my case it is too low level since I utilize the netfilter functionality of the bridge layer. Thanks, //richard