[Bridge] [PATCH net-next 00/16] bridge: Limit number of MDB entries per port, port-vlan

2023-01-26 Thread Petr Machata via Bridge
The MDB maintained by the bridge is limited. When the bridge is configured for IGMP / MLD snooping, a buggy or malicious client can easily exhaust its capacity. In SW datapath, the capacity is configurable through the IFLA_BR_MCAST_HASH_MAX parameter, but ultimately is finite. Obviously a similar l

Re: [Bridge] [PATCH net-next 00/16] bridge: Limit number of MDB entries per port, port-vlan

2023-01-26 Thread Nikolay Aleksandrov
On January 26, 2023 7:01:08 PM GMT+02:00, Petr Machata wrote: >The MDB maintained by the bridge is limited. When the bridge is configured >for IGMP / MLD snooping, a buggy or malicious client can easily exhaust its >capacity. In SW datapath, the capacity is configurable through the >IFLA_BR_MCAST_