Skip to content

Draft: RFC: use vlan_filtering on inbr to use single bridge vethsetup NS

David Jaša requested to merge dj/vethsetup-single-bridge into main

using vlan_filtering on inbr, it's possible to:

  • connect all traffic on eth10p to specific VLAN on other ports of inbr
  • expose this VLAN and thus traffic from eth10 on subinterface of masq
  • use this VLAN tag for DHCP & IPv6-enabled VLAN tags on eth{1..9}

In other words: there would be two L2 networks available on inbr:

  • one on eth[1-9] and masq (with bridge port priorities unchanged)
  • other on eth[1-9].100, eth10 and masq.100 (which is still called by now misnomer simbr)

This setup should not make any functional change for current tests while allowing testing of IP autoconfiguration on VLAN subinterfaces of eth[1-9]. It shouldn't change performance either as there can only be slight performance drop while retagging as per [1], e.g. if there was heavy traffic between eth10 and simbr that's actually masqp.100, but it isn't case of our tests

[1] https://developers.redhat.com/blog/2017/09/14/vlan-filter-support-on-bridge#summary

Merge request reports