4 Commits

Author	SHA1	Message	Date
arheneus@marvell.com	f136fd0623	[ebtbles] Replace binary config file to text config file for ebtables (#5252) ... Issue: Binary ebtables config file is CPU arch dependent Fix: Load the text config during firsttime boot and Generate the binary persistent atomic file Signed-off-by: Antony Rheneus <arheneus@marvell.com>	2020-09-03 17:27:07 -07:00
wangshengjun	bed4a799df	[ebtables]add the filter rule for ARP packets with vlan tag: (#3945) ... 1. ebtables -t filter -A FORWARD -p 802_1Q --vlan-encap 0806 -j DROP The ARP packet with vlan tag can't match the default rule. Signed-off-by: wangshengjun <wangshengjun@asterfusion.com>	2020-05-06 20:03:09 -07:00
Guohan Lu	e479a56db3	[baseimage]: setup ebtables.service in buster image ... ebtables is not enabled by default in buster Signed-off-by: Guohan Lu <lguohan@gmail.com>	2020-04-17 04:51:51 +00:00
Ying Xie	9efcf1759a	[ebtables] install ebtables in base image and install filter rules (#2805) ... - Add ebtables package, and install some filter rules: 1. ebtables -A FORWARD -d BGA -j DROP 2. ebtables -A FORWARD -p ARP -j DROP Basically, we let the ARP packets in the VLAN being forwarded by the ASIC, kernel gets a copy of these ARP packets and the forwarding from Kenerl gets dropped. So there is always only one copy of ARP/response in the VLAN. Signed-off-by: Ying Xie <ying.xie@microsoft.com>	2019-05-09 09:44:41 -07:00