From nobody Mon Jul 28 19:55:36 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4brTjw222hz63QKK for ; Mon, 28 Jul 2025 19:55:48 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mx-01.divo.sbone.de (mx-01.divo.sbone.de [IPv6:2003:a:140a:2200:6:594:fffe:19]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (prime256v1) client-digest SHA256) (Client CN "mx-01.divo.sbone.de", Issuer "E5" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4brTjt2QWFz3yH7; Mon, 28 Jul 2025 19:55:46 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zabbadoz.net header.s=20240622 header.b=jEPVnYzr; spf=pass (mx1.freebsd.org: domain of bzeeb-lists@lists.zabbadoz.net designates 2003:a:140a:2200:6:594:fffe:19 as permitted sender) smtp.mailfrom=bzeeb-lists@lists.zabbadoz.net; dmarc=pass (policy=none) header.from=zabbadoz.net Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:4902:0:7404:2:1025]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx-01.divo.sbone.de (Postfix) with ESMTPS id 1CE77A64805; Mon, 28 Jul 2025 19:55:33 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=zabbadoz.net; s=20240622; t=1753732533; bh=NTF2jIrUEEI+YtIq1n1r/u6rBULStDmfeRPVUEZwYbg=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=jEPVnYzrKIfIb0plzmLo8ZMkV3y9maKs1b2q1Z+uNBoMGFg7Nr+POzdS3RzQpNeFR uHvQMFFmWqEZ3xHDzOl5M40tq3SBxuAOcXK4tB2hlWdRhIhWKF9eT7K8cyw/OtSdsk wOn5ieWCRiwD6bhs5ZBhmTNi1rLGWp3XvLMe40G6OizerlAo41GJahqwT/k3LFy0Y6 utSlRZH5vIyM+j87p7Xn5dbcsoT0kCHtoIWEHk29Y7YiUz1LE8DzLACadtmTkeMQvl kHgRObCaRwH0S/qdHaO8GEpTDeOmy00Eqof9ANsxkTrsZ7Wl/ztgtuPfAgyNc7Yg8b hbovOSj+WrwJ66icRMaf8DrnT1BdgXFwdwx3OshFi3HRNKWsN2lmGTIpip7A7e5anf xPV4/prljtioLU/XCfcUWDMmmucqe/DS7c89PfEB1vd8wWI8g29p7QU0zPdrK69qq/ 0kb6sVtBhqzCaWRFvaEgNjpxD/WPlIPBn/ao/lazpD4CjOKFR789zwj7FxDyy4VP5g nc4eEr42V1jpMgN652H4j9gcVAhRLWosq7EZJDgWRz1ROfJTI/+jiFVu4IurBzFFSn MjhqX2WjaoPbnPDX+W344ireVasb4fuS8w0qjqPSoxDhNSKrm57282mvSH414U5Y0n fCRCXf/t+Zoixn5/uhu42EUE= Received: from content-filter.t4-02.sbone.de (content-filter.t4-02.sbone.de [IPv6:fde9:577b:c1a9:4902:0:7404:2:2742]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPS id D608A2D029E1; Mon, 28 Jul 2025 19:55:37 +0000 (UTC) X-Virus-Scanned: amavisd-new at sbone.de Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:4902:0:7404:2:1025]) by content-filter.t4-02.sbone.de (content-filter.t4-02.sbone.de [IPv6:fde9:577b:c1a9:4902:0:7404:2:2742]) (amavisd-new, port 10024) with ESMTP id mkh-cYrqHi8I; Mon, 28 Jul 2025 19:55:36 +0000 (UTC) Received: from strong-iwl0.sbone.de (strong-iwl0.sbone.de [IPv6:fde9:577b:c1a9:4902:a66b:b6ff:fe40:39a9]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPSA id E0CB82D029D8; Mon, 28 Jul 2025 19:55:36 +0000 (UTC) Date: Mon, 28 Jul 2025 19:55:36 +0000 (UTC) From: "Bjoern A. Zeeb" To: Lexi Winter cc: net@freebsd.org Subject: Re: bridge gone wrong? In-Reply-To: <88846585-6r86-p832-sro5-n4q14n170p06@yvfgf.mnoonqbm.arg> Message-ID: <32qoq232-39q4-n64p-o6or-sq496o279155@yvfgf.mnoonqbm.arg> References: <88846585-6r86-p832-sro5-n4q14n170p06@yvfgf.mnoonqbm.arg> X-OpenPGP-Key-Id: 0x14003F198FEFA3E77207EE8D2B58B8F83CCF1842 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Spamd-Result: default: False [-2.99 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; SUBJECT_ENDS_QUESTION(1.00)[]; NEURAL_HAM_SHORT(-1.00)[-0.997]; NEURAL_HAM_LONG(-0.99)[-0.994]; DMARC_POLICY_ALLOW(-0.50)[zabbadoz.net,none]; R_DKIM_ALLOW(-0.20)[zabbadoz.net:s=20240622]; R_SPF_ALLOW(-0.20)[+ip6:2003:a:140a:2200:6:594:fffe:19]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:3320, ipnet:2003::/19, country:DE]; MISSING_XM_UA(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MLMMJ_DEST(0.00)[net@freebsd.org]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[zabbadoz.net:+] X-Rspamd-Queue-Id: 4brTjt2QWFz3yH7 X-Spamd-Bar: -- On Mon, 28 Jul 2025, Bjoern A. Zeeb wrote: Hi, > I wished we would have added vlan filtering/handling generically to > interfaces as a "sub-layer" stacking things properly but that's a > discussion for another decade I fear; but that's where I tink > "bridge went wrong" now. I am sorry for chosing the Subject and words here. I am also sorry for convoluting at least three things into one email, which certainly didn't help but put all under one topic, which wasn't my intention: (a) the sysctl change which triggered me noticing this work, (b) not fully understanding the current implementation and critizing rather than trying to get it clarified, (c) and acient memories from the past to improve and solve the network stack beyond the underlying problem here. As I said originally, I had missed (a) and I've even since found that it is perfectly documented beyond what I had already seen last night. My fault. For (b) thank you for the patient reply and the further work pointed out. I do not claim I fully understand all the bits yet but I know some pending change greatly clarified some of my misunderstandings and I hope you'll have the patience with me to explain the other bits (I'll start a separate conversation for that). When it comes to (c) that is a separate discussion to have. But it was a rude chosing of words of me in the subject and the text related to this. I did not mean to criticize all the hard work that went and goes into bridge at the moment. It is solving a real world problem that has been around for way too long. Thank you for doing it! /bz -- Bjoern A. Zeeb r15:7