Re: [vpp-dev] loopback admin status

2019-07-17 Thread Neale Ranns via Lists.Fd.Io

Hi Matt,

Sounds like exactly what we need.

/neale

De : Matthew Smith 
Date : mercredi 17 juillet 2019 à 14:52
À : "Neale Ranns (nranns)" 
Cc : vpp-dev 
Objet : Re: [vpp-dev] loopback admin status

Hi Neale,

Thanks for your reply.

I noticed that there is a function for IPv6 named 
ip6_sw_interface_admin_up_down() in src/vnet/ip/ip6_forward.c which seems like 
it iterates the IPv6 addresses on an interface and adds or deletes the routes 
for each address if the interface is brought up or down. So maybe this is 
already handled for IPv6? If I'm understanding that correctly, do you think it 
would be appropriate to add a similar function for IPv4 and register it with 
VNET_SW_INTERFACE_ADMIN_UP_DOWN_FUNCTION()?

-Matt


On Wed, Jul 17, 2019 at 3:33 AM Neale Ranns (nranns) 
mailto:nra...@cisco.com>> wrote:

Hi Matt,

I would tend to agree with you. The interface’s IP addresses should not be 
programmed in the FIB if the interface is down.

/neale


De : mailto:vpp-dev@lists.fd.io>> au nom de "Matthew Smith 
via Lists.Fd.Io<http://Lists.Fd.Io>" 
mailto:netgate@lists.fd.io>>
Répondre à : "mgsm...@netgate.com<mailto:mgsm...@netgate.com>" 
mailto:mgsm...@netgate.com>>
Date : mardi 16 juillet 2019 à 21:42
À : vpp-dev mailto:vpp-dev@lists.fd.io>>
Cc : "vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>" 
mailto:vpp-dev@lists.fd.io>>
Objet : [vpp-dev] loopback admin status

Hi,

If I create a loopback interface and configure an IP address on it, I am able 
to ping that IP address from another host regardless of whether the admin 
status of the loopback is up or down. Is that intentional? I'm trying to figure 
out if this is something that can be "fixed" or if the current behavior is the 
way it's supposed to be.

If I use a loopback as an endpoint for services and want to take the services 
offline temporarily, it would be convenient to be able to take the interface 
down and have the services effectively be disabled.

-Matt

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13516): https://lists.fd.io/g/vpp-dev/message/13516
Mute This Topic: https://lists.fd.io/mt/32495454/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] loopback admin status

2019-07-17 Thread Matthew Smith via Lists.Fd.Io
Hi Neale,

Thanks for your reply.

I noticed that there is a function for IPv6 named
ip6_sw_interface_admin_up_down() in src/vnet/ip/ip6_forward.c which seems
like it iterates the IPv6 addresses on an interface and adds or deletes the
routes for each address if the interface is brought up or down. So maybe
this is already handled for IPv6? If I'm understanding that correctly, do
you think it would be appropriate to add a similar function for IPv4 and
register it with VNET_SW_INTERFACE_ADMIN_UP_DOWN_FUNCTION()?

-Matt


On Wed, Jul 17, 2019 at 3:33 AM Neale Ranns (nranns) 
wrote:

>
>
> Hi Matt,
>
>
>
> I would tend to agree with you. The interface’s IP addresses should not be
> programmed in the FIB if the interface is down.
>
>
>
> /neale
>
>
>
>
>
> *De : * au nom de "Matthew Smith via Lists.Fd.Io"
> 
> *Répondre à : *"mgsm...@netgate.com" 
> *Date : *mardi 16 juillet 2019 à 21:42
> *À : *vpp-dev 
> *Cc : *"vpp-dev@lists.fd.io" 
> *Objet : *[vpp-dev] loopback admin status
>
>
>
> Hi,
>
>
>
> If I create a loopback interface and configure an IP address on it, I am
> able to ping that IP address from another host regardless of whether the
> admin status of the loopback is up or down. Is that intentional? I'm trying
> to figure out if this is something that can be "fixed" or if the current
> behavior is the way it's supposed to be.
>
>
>
> If I use a loopback as an endpoint for services and want to take the
> services offline temporarily, it would be convenient to be able to take the
> interface down and have the services effectively be disabled.
>
>
>
> -Matt
>
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13515): https://lists.fd.io/g/vpp-dev/message/13515
Mute This Topic: https://lists.fd.io/mt/32495454/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] loopback admin status

2019-07-17 Thread Neale Ranns via Lists.Fd.Io

Hi Matt,

I would tend to agree with you. The interface’s IP addresses should not be 
programmed in the FIB if the interface is down.

/neale


De :  au nom de "Matthew Smith via Lists.Fd.Io" 

Répondre à : "mgsm...@netgate.com" 
Date : mardi 16 juillet 2019 à 21:42
À : vpp-dev 
Cc : "vpp-dev@lists.fd.io" 
Objet : [vpp-dev] loopback admin status

Hi,

If I create a loopback interface and configure an IP address on it, I am able 
to ping that IP address from another host regardless of whether the admin 
status of the loopback is up or down. Is that intentional? I'm trying to figure 
out if this is something that can be "fixed" or if the current behavior is the 
way it's supposed to be.

If I use a loopback as an endpoint for services and want to take the services 
offline temporarily, it would be convenient to be able to take the interface 
down and have the services effectively be disabled.

-Matt

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13513): https://lists.fd.io/g/vpp-dev/message/13513
Mute This Topic: https://lists.fd.io/mt/32495454/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] loopback admin status

2019-07-16 Thread Matthew Smith via Lists.Fd.Io
Hi,

If I create a loopback interface and configure an IP address on it, I am
able to ping that IP address from another host regardless of whether the
admin status of the loopback is up or down. Is that intentional? I'm trying
to figure out if this is something that can be "fixed" or if the current
behavior is the way it's supposed to be.

If I use a loopback as an endpoint for services and want to take the
services offline temporarily, it would be convenient to be able to take the
interface down and have the services effectively be disabled.

-Matt
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13512): https://lists.fd.io/g/vpp-dev/message/13512
Mute This Topic: https://lists.fd.io/mt/32495454/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-