Nikolay Aleksandrov
7d850abd5f
net: bridge: add support for port isolation
...
This patch adds support for a new port flag - BR_ISOLATED. If it is set
then isolated ports cannot communicate between each other, but they can
still communicate with non-isolated ports. The same can be achieved via
ACLs but they can't scale with large number of ports and also the
complexity of the rules grows. This feature can be used to achieve
isolated vlan functionality (similar to pvlan) as well, though currently
it will be port-wide (for all vlans on the port). The new test in
should_deliver uses data that is already cache hot and the new boolean
is used to avoid an additional source port test in should_deliver.
Signed-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Reviewed-by: Toshiaki Makita <makita.toshiaki@lab.ntt.co.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-05-25 14:37:20 -04:00
..
netfilter
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-05-21 16:01:54 -04:00
br.c
net: bridge: Notify about !added_by_user FDB entries
2018-05-03 13:46:47 -04:00
br_arp_nd_proxy.c
bridge: suppress nd pkts on BR_NEIGH_SUPPRESS ports
2017-10-08 21:12:04 -07:00
br_device.c
net: bridge: disable bridge MTU auto tuning if it was set manually
2018-03-31 22:19:00 -04:00
br_fdb.c
net: bridge: Notify about !added_by_user FDB entries
2018-05-03 13:46:47 -04:00
br_forward.c
net: bridge: add support for port isolation
2018-05-25 14:37:20 -04:00
br_if.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-05-04 09:58:56 -04:00
br_input.c
net: bridge: add support for port isolation
2018-05-25 14:37:20 -04:00
br_ioctl.c
net: bridge: add notifications for the bridge dev on vlan change
2017-11-02 15:53:40 +09:00
br_mdb.c
net: use rtnl_register_module where needed
2017-12-04 11:32:39 -05:00
br_multicast.c
net: bridge: Send notification when host join/leaves a group
2017-11-10 13:41:40 +09:00
br_netfilter_hooks.c
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
br_netfilter_ipv6.c
br_netlink.c
net: bridge: add support for port isolation
2018-05-25 14:37:20 -04:00
br_netlink_tunnel.c
bridge: netlink: make setlink/dellink notifications more accurate
2017-10-29 11:03:43 +09:00
br_nf_core.c
xfrm: Move dst->path into struct xfrm_dst
2017-11-30 09:54:26 -05:00
br_private.h
net: bridge: add support for port isolation
2018-05-25 14:37:20 -04:00
br_private_stp.h
br_private_tunnel.h
bridge: netlink: make setlink/dellink notifications more accurate
2017-10-29 11:03:43 +09:00
br_stp.c
net: bridge: add notifications for the bridge dev on vlan change
2017-11-02 15:53:40 +09:00
br_stp_bpdu.c
net: introduce __skb_put_[zero, data, u8]
2017-06-20 13:30:14 -04:00
br_stp_if.c
net: bridge: add notifications for the bridge dev on vlan change
2017-11-02 15:53:40 +09:00
br_stp_timer.c
net: bridge: Convert timers to use timer_setup()
2017-11-03 15:42:49 +09:00
br_switchdev.c
net: bridge: Notify about !added_by_user FDB entries
2018-05-03 13:46:47 -04:00
br_sysfs_br.c
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
br_sysfs_if.c
net: bridge: add support for port isolation
2018-05-25 14:37:20 -04:00
br_vlan.c
net: bridge: Allow bridge master in br_vlan_get_info()
2018-05-10 17:50:51 -04:00
br_vlan_tunnel.c
bridge: vlan_tunnel: explicitly reset metadata attrs to NULL on failure
2017-02-17 13:33:41 -05:00
Kconfig
Makefile
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00