New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[net 2.0] Reverse path filtering #4444

Open

4 tasks

ripatel-fd opened this issue Mar 10, 2025 · 0 comments

Labels

Contributor

ripatel-fd commented Mar 10, 2025 •

edited

Loading

The net tile currently accepts traffic for all dst IPs.
Should be filtered according to route table, possibly with rp_filter.

This is a release blocker.

Implementation notes:

Add a new fib4 containing only local routes (fib_local)
Add optional fib4 filter for reverse path (eliminate local routes that don't meet criteria for rp_filter)
Add config option for reverse path filter
Install fib_local to RX path

ripatel-fd added the Priority: High label

ripatel-fd changed the title ~~[net 2.0] Dst IP filter~~ [net 2.0] Reverse path filtering

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment