Re: [Devel] [PATCH v2 0/2] neighbour: fix possible DoS due to net iface start/stop loop

2022-08-11 Thread Jakub Kicinski
On Wed, 10 Aug 2022 19:08:38 +0300 Alexander Mikhalitsyn wrote: > include/net/neighbour.h | 1 + > net/core/neighbour.c| 46 + > 2 files changed, 38 insertions(+), 9 deletions(-) Which tree are these based on? They don't seem to apply cleanly

Re: [Devel] [PATCH v2 0/2] neighbour: fix possible DoS due to net iface start/stop loop

2022-08-11 Thread Jakub Kicinski
On Thu, 11 Aug 2022 17:51:32 +0300 Alexander Mikhalitsyn wrote: > On Thu, Aug 11, 2022 at 5:46 PM Jakub Kicinski wrote: > > On Wed, 10 Aug 2022 19:08:38 +0300 Alexander Mikhalitsyn wrote: > > > include/net/neighbour.h | 1 + > > > net/core/neighbour.c| 46

[Devel] [PATCH v2 0/2] neighbour: fix possible DoS due to net iface start/stop loop

2022-08-10 Thread Alexander Mikhalitsyn
Dear friends, Recently one of OpenVZ users reported that they have issues with network availability of some containers. It was discovered that the reason is absence of ARP replies from the Host Node on the requests about container IPs. Of course, we started from tcpdump analysis and noticed that