]> git.ipfire.org Git - thirdparty/systemd.git/commit
network: bridge: add support for IFLA_BRPORT_LOCKED
authorJonas Gorski <jonas.gorski@bisdn.de>
Mon, 2 Dec 2024 10:54:09 +0000 (11:54 +0100)
committerJonas Gorski <jonas.gorski@bisdn.de>
Tue, 28 Jan 2025 09:38:01 +0000 (10:38 +0100)
commita434de60568b0f34c07de4f97af6cdc33d4fd2a2
treedfcec7c8146e21972028df249dcbc548ece86dca
parentd7de242ce78ae2782ac483da76204d305ff49ac7
network: bridge: add support for IFLA_BRPORT_LOCKED

Since linux commit a21d9a670d81103db7f788de1a4a4a6e4b891a0b ("net:
bridge: Add support for bridge port in locked mode"), included since
v5.18,  it is possible to set bridge ports to locked.

Locked ports do not learn automatically, and discard any traffic from
unknown source MACs. To allow traffic, the userspace authenticator is
expected to create fdb entries for authenticated hosts.

Add support to systemd-network for setting the new attribute for bridge
ports.
man/systemd.network.xml
src/libsystemd/sd-netlink/netlink-types-rtnl.c
src/network/networkd-network-gperf.gperf
src/network/networkd-network.c
src/network/networkd-network.h
src/network/networkd-setlink.c
test/test-network/conf/26-bridge-slave-interface-2.network
test/test-network/systemd-networkd-tests.py