From: Amit Cohen <amco...@nvidia.com> Currently, unicast ARP requests/NS packets are replied by bridge when suppression is enabled, then they are also forwarded, which results two replicas of ARP reply/NA - one from the bridge and second from the target.
The purpose of ARP/ND suppression is to reduce flooding in the broadcast domain, which is not relevant for unicast packets. In addition, the use case of unicast ARP/NS is to poll a specific host, so it does not make sense to have the switch answer on behalf of the host. Forward ARP requests/NS packets and prevent the bridge from replying to them. Patch set overview: Patch #1 prevents unicast ARP/NS packets from being suppressed by bridge Patch #2 adds test cases for unicast ARP/NS with suppression enabled Amit Cohen (2): net: bridge: Prevent unicast ARP/NS packets from being suppressed by bridge selftests: test_bridge_neigh_suppress: Test unicast ARP/NS with suppression net/bridge/br_arp_nd_proxy.c | 7 + .../net/test_bridge_neigh_suppress.sh | 125 ++++++++++++++++++ 2 files changed, 132 insertions(+) -- 2.47.0