Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Install nftables and move the default conifuration in ebtables.filter.cfg to nftables.conf. #21344

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Minkang-Tsai
Copy link

@Minkang-Tsai Minkang-Tsai commented Jan 7, 2025

What I did
Replace the ebtables with nftables.

Why I did it
Nftables can configure the more detailed rule to filter packets.

How I verified it
Execute "nft list ruleset bridge" command

table bridge filter {
        chain INPUT {
                type filter hook input priority filter; policy accept;
        }

        chain FORWARD {
                type filter hook forward priority filter; policy accept;
                ether daddr 01:80:c2:00:00:00 counter packets 0 bytes 0 drop
                ether type arp counter packets 0 bytes 0 drop
                ether type vlan vlan type 0x0806  counter packets 0 bytes 0 drop
                ether daddr & 01:00:00:00:00:00 == 01:00:00:00:00:00 counter packets 0 bytes 0 drop
        }

        chain OUTPUT {
                type filter hook output priority filter; policy accept;
        }
}

@Minkang-Tsai Minkang-Tsai requested a review from lguohan as a code owner January 7, 2025 04:00
@mssonicbld
Copy link
Collaborator

/azp run Azure.sonic-buildimage

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@Minkang-Tsai
Copy link
Author

/azp run Azure.sonic-buildimage

Copy link

Commenter does not have sufficient privileges for PR 21344 in repo sonic-net/sonic-buildimage

@Minkang-Tsai
Copy link
Author

@mssonicbld Could you help me trigger a build?

@Minkang-Tsai
Copy link
Author

@prsunny I have resolved the conflict. Please help me review this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants