[Intel-wired-lan] [PATCH] ixgbe: add flow control ethertype to the anti-spoofing filter

Singh, Krishneil K krishneil.k.singh at intel.com
Wed Sep 9 19:43:53 UTC 2015


-----Original Message-----
From: Intel-wired-lan [mailto:intel-wired-lan-bounces at lists.osuosl.org] On Behalf Of Emil Tantilov
Sent: Thursday, August 20, 2015 3:31 PM
To: intel-wired-lan at lists.osuosl.org
Subject: [Intel-wired-lan] [PATCH] ixgbe: add flow control ethertype to the anti-spoofing filter

This patch makes sure that flow control packets initiated by the VF are dropped and reported as spoofed.

Flow control packets can be used to limit the throughput or as DOS attack when generated from a VF. Flow control is not supported per VF hence any pause frames generated from a VF are considered malicious.

Also cleaned up indentation and some redundant comments.

Signed-off-by: Emil Tantilov <emil.s.tantilov at intel.com>
---
 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c |   16 +++++++++++-----
 drivers/net/ethernet/intel/ixgbe/ixgbe_type.h |    4 ++++
 2 files changed, 15 insertions(+), 5 deletions(-)

Tested-by: Krishneil Singh <krishneil.k.singh at intel.com>

_______________________________________________
Intel-wired-lan mailing list
Intel-wired-lan at lists.osuosl.org
http://lists.osuosl.org/mailman/listinfo/intel-wired-lan


More information about the Intel-wired-lan mailing list