From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1N33zO-0000rN-0b for qemu-devel@nongnu.org; Wed, 28 Oct 2009 04:34:42 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1N33zJ-0000qu-G6 for qemu-devel@nongnu.org; Wed, 28 Oct 2009 04:34:41 -0400 Received: from [199.232.76.173] (port=33512 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1N33zJ-0000qr-8O for qemu-devel@nongnu.org; Wed, 28 Oct 2009 04:34:37 -0400 Received: from mx1.redhat.com ([209.132.183.28]:27266) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1N33zI-0000fy-Rn for qemu-devel@nongnu.org; Wed, 28 Oct 2009 04:34:37 -0400 Date: Wed, 28 Oct 2009 10:34:29 +0200 From: Gleb Natapov Subject: Re: [Qemu-devel] accidental mistyping of command line kills networking Message-ID: <20091028083429.GS29477@redhat.com> References: <4AE7460D.7050807@us.ibm.com> <4AE761D9.7040401@us.ibm.com> <4AE769A3.9080205@codemonkey.ws> <4AE7E4D6.1000008@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4AE7E4D6.1000008@redhat.com> List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Avi Kivity Cc: Beth Kon , qemu-devel On Wed, Oct 28, 2009 at 08:29:42AM +0200, Avi Kivity wrote: > On 10/27/2009 11:44 PM, Anthony Liguori wrote: > > > >It's actually not okay. You're creating a bridge with two tap > >devices on the bridge that happen to be connected in qemu by a > >vlan. If one tap device receives a packet, qemu is going to > >forward that packet to the other tap device, which will in turn > >send the packet to the bridge which in turn sends it to the first > >tap device. > > > >Resulting in an infinite networking loop. > > > > It shouldn't kill networking though. If a guest has two nics > connected to the same host bridge (a reasonable configuration), and > then connects these two nics through its own bridge, it creates the > same sort of loop. If that kills networking, we have a > guest-initiated DoS (not that the userspace-initiated DoS was much > better). > That's what STP is for. -- Gleb.