Re: [ovs-dev] [PATCH ovn] ovn-northd: Limit IPv6 ND NS/RA/RS to the local network.

2020-04-21 Thread Dumitru Ceara
On 4/20/20 5:13 PM, Numan Siddique wrote: > On Sat, Apr 18, 2020 at 3:24 AM Dumitru Ceara wrote: >> >> Neighbor solicitation packets for router owned IPs are replied to in >> table IN_IP_INPUT at a higher priority than flows relay IPv6 multicast >> traffic when needed. All other NS/NA packets rece

Re: [ovs-dev] [PATCH ovn] ovn-northd: Limit IPv6 ND NS/RA/RS to the local network.

2020-04-20 Thread Numan Siddique
On Sat, Apr 18, 2020 at 3:24 AM Dumitru Ceara wrote: > > Neighbor solicitation packets for router owned IPs are replied to in > table IN_IP_INPUT at a higher priority than flows relay IPv6 multicast > traffic when needed. All other NS/NA packets received at this point can > be safely dropped. > >

[ovs-dev] [PATCH ovn] ovn-northd: Limit IPv6 ND NS/RA/RS to the local network.

2020-04-17 Thread Dumitru Ceara
Neighbor solicitation packets for router owned IPs are replied to in table IN_IP_INPUT at a higher priority than flows relay IPv6 multicast traffic when needed. All other NS/NA packets received at this point can be safely dropped. However, router advertisement and router solicitation packets are p