On 16-09-25 09:35 PM, Florian Westphal wrote:
Jamal Hadi Salim <j...@mojatatu.com> wrote:
Realize didnt respond to this. Seems very simple to fix:
if skb->dev->ifindex and m->tcfm_dev->ifindex are the
same, then you can drop the packet.
Yes, but I think we get same issue when we deal with stacked
interfaces, and redirect is to e.g. vlan on top of physical device.
And we have such loops even without tc, for instance when placing
both veth ends in same bridge :-(
For egress->egress the xmit recursion should help (maybe an
audit needs to be done).
For the case Shmulik is trying to achieve I am not sure that
would help.
In general, catching such a loop (or broadcast), if cheap should
be attempted.
cheers,
jamal