]> git.baikalelectronics.ru Git - kernel.git/commit
ixgbe: add flow control ethertype to the anti-spoofing filter
authorEmil Tantilov <emil.s.tantilov@intel.com>
Thu, 20 Aug 2015 22:31:20 +0000 (15:31 -0700)
committerJeff Kirsher <jeffrey.t.kirsher@intel.com>
Wed, 14 Oct 2015 06:46:49 +0000 (23:46 -0700)
commit55f40ca08140f5bb9975492faae1dfe84c3e4762
tree4eae77386f462f456cf43a70951c17bffd482b57
parentc59a532c727b8322e90fc7326b3a2409f8dc9efe
ixgbe: add flow control ethertype to the anti-spoofing filter

This patch makes sure that flow control packets initiated by the VF are
dropped and reported as spoofed.

Flow control packets can be used to limit the throughput or as DOS
attack when generated from a VF. Flow control is not supported per VF
hence any pause frames generated from a VF are considered malicious.

Also cleaned up indentation and some redundant comments.

Signed-off-by: Emil Tantilov <emil.s.tantilov@intel.com>
Tested-by: Krishneil Singh <krishneil.k.singh@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c
drivers/net/ethernet/intel/ixgbe/ixgbe_type.h