Re: [PATCH net-next v1 1/1] net: bridge: ensure that link-local traffic cannot unlock a locked port

On Thu, Jul 21, 2022 at 1:45 PM Vladimir Oltean olteanv@gmail.com wrote:

On Sun, Jul 17, 2022 at 09:20:57PM +0200, Hans S wrote:

I'm only pointing out the obvious here, we need an opt in for MAB, and the implemented behavior I've seen here kind of points to mapping this to "+learning +locked", where the learning process creates locked FDB entries.

I can go with the reasoning for the opt in for MAB, but disabling link local learning system wide I don't think is a good idea, unless someone can ensure me that it does not impact something else. In general locked ports should never learn from link local, which is a problem if they do, which suggests to me that this patch should eventually be accepted as the best solution.