]> git.baikalelectronics.ru Git - kernel.git/commit
ixgbe: add flow control ethertype to the anti-spoofing filter
authorEmil Tantilov <emil.s.tantilov@intel.com>
Thu, 20 Aug 2015 22:31:20 +0000 (15:31 -0700)
committerJeff Kirsher <jeffrey.t.kirsher@intel.com>
Wed, 14 Oct 2015 06:46:49 +0000 (23:46 -0700)
commit832582e56a847225778e7d672a05dbf9a6dcb517
tree4eae77386f462f456cf43a70951c17bffd482b57
parentb9800b1d44a1a3527502347b101d741a614e1100
ixgbe: add flow control ethertype to the anti-spoofing filter

This patch makes sure that flow control packets initiated by the VF are
dropped and reported as spoofed.

Flow control packets can be used to limit the throughput or as DOS
attack when generated from a VF. Flow control is not supported per VF
hence any pause frames generated from a VF are considered malicious.

Also cleaned up indentation and some redundant comments.

Signed-off-by: Emil Tantilov <emil.s.tantilov@intel.com>
Tested-by: Krishneil Singh <krishneil.k.singh@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c
drivers/net/ethernet/intel/ixgbe/ixgbe_type.h