bridge: Add vlan filtering infrastructure
Adds an optional infrustructure component to bridge that would allow native vlan filtering in the bridge. Each bridge port (as well as the bridge device) now get a VLAN bitmap. Each bit in the bitmap is associated with a vlan id. This way if the bit corresponding to the vid is set in the bitmap that the packet with vid is allowed to enter and exit the port. Write access the bitmap is protected by RTNL and read access protected by RCU. Vlan functionality is disabled by default. Signed-off-by: Vlad Yasevich <vyasevic@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:

committed by
David S. Miller

parent
2222299748
commit
243a2e63f5
@@ -691,6 +691,24 @@ static ssize_t store_nf_call_arptables(
|
||||
static DEVICE_ATTR(nf_call_arptables, S_IRUGO | S_IWUSR,
|
||||
show_nf_call_arptables, store_nf_call_arptables);
|
||||
#endif
|
||||
#ifdef CONFIG_BRIDGE_VLAN_FILTERING
|
||||
static ssize_t show_vlan_filtering(struct device *d,
|
||||
struct device_attribute *attr,
|
||||
char *buf)
|
||||
{
|
||||
struct net_bridge *br = to_bridge(d);
|
||||
return sprintf(buf, "%d\n", br->vlan_enabled);
|
||||
}
|
||||
|
||||
static ssize_t store_vlan_filtering(struct device *d,
|
||||
struct device_attribute *attr,
|
||||
const char *buf, size_t len)
|
||||
{
|
||||
return store_bridge_parm(d, buf, len, br_vlan_filter_toggle);
|
||||
}
|
||||
static DEVICE_ATTR(vlan_filtering, S_IRUGO | S_IWUSR,
|
||||
show_vlan_filtering, store_vlan_filtering);
|
||||
#endif
|
||||
|
||||
static struct attribute *bridge_attrs[] = {
|
||||
&dev_attr_forward_delay.attr,
|
||||
@@ -731,6 +749,9 @@ static struct attribute *bridge_attrs[] = {
|
||||
&dev_attr_nf_call_iptables.attr,
|
||||
&dev_attr_nf_call_ip6tables.attr,
|
||||
&dev_attr_nf_call_arptables.attr,
|
||||
#endif
|
||||
#ifdef CONFIG_BRIDGE_VLAN_FILTERING
|
||||
&dev_attr_vlan_filtering.attr,
|
||||
#endif
|
||||
NULL
|
||||
};
|
||||
|
Reference in New Issue
Block a user