ixgbe: add flow control ethertype to the anti-spoofing filter

Browse source

This patch makes sure that flow control packets initiated by the VF are
dropped and reported as spoofed.

Flow control packets can be used to limit the throughput or as DOS
attack when generated from a VF. Flow control is not supported per VF
hence any pause frames generated from a VF are considered malicious.

Also cleaned up indentation and some redundant comments.

Signed-off-by: Emil Tantilov <emil.s.tantilov@intel.com>
Tested-by: Krishneil Singh <krishneil.k.singh@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>

...

This commit is contained in:

Emil Tantilov 2015-08-20 15:31:20 -07:00 • committed by Jeff Kirsher

parent 06a24dd6c2

commit f079fa005a

2 changed files with 15 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

drivers/net/ethernet/intel/ixgbe/ixgbe_main.c

View file

4

drivers/net/ethernet/intel/ixgbe/ixgbe_type.h

View file