Skip to content

[kvm]Preventing ebtables cfg to be applied on VM#38

Closed
dgsudharsan wants to merge 1 commit intomasterfrom
ebtables_vs
Closed

[kvm]Preventing ebtables cfg to be applied on VM#38
dgsudharsan wants to merge 1 commit intomasterfrom
ebtables_vs

Conversation

@dgsudharsan
Copy link
Copy Markdown
Owner

Why I did it

To fix https://github.com/Azure/sonic-buildimage/issues/11381

Preventing ebtables rules to be applied on VM image. The ebtables rules in SONiC are added to prevent ARP as well as L2 forwarding to be blocked in linux kernel since the hardware will take care of the actual L2 forward. However this is not the case with KVM where linux needs to forward even L2 packets

How I did it

Added check in docker_image_ctl.j2 to apply the ebtables rules only when platform is not vs which is set for KVM

How to verify it

Loaded KVM image built with the changes and verified ebtables are not present

Before

root@sonic:~# ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 3, policy: ACCEPT
-d BGA -j DROP
-p ARP -j DROP
-p 802_1Q --vlan-encap ARP -j DROP

Bridge chain: OUTPUT, entries: 0, policy: ACCEPT
root@sonic:~#

After

ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 0, policy: ACCEPT

Bridge chain: OUTPUT, entries: 0, policy: ACCEPT

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111
  • 202205

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

@dgsudharsan dgsudharsan deleted the ebtables_vs branch March 9, 2023 01:50
dgsudharsan pushed a commit that referenced this pull request Mar 17, 2025
…lly (sonic-net#639)

#### Why I did it
src/sonic-swss
```
* 4baf54f - (HEAD -> 202412, origin/202412) SRv6: add dscp_mode configuration for MySID entry (#38) (6 hours ago) [mssonicbld]
* ff491ba - [SRv6] Add support for SRv6 VPN (#37) (9 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
dgsudharsan pushed a commit that referenced this pull request Mar 17, 2025
… automatically (sonic-net#702)

#### Why I did it
src/sonic-platform-common
```
* c8eac22 - (HEAD -> 202412, origin/202412) [code sync] Merge code from sonic-net/sonic-platform-common:202411 to 202412 (#38) (21 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
dgsudharsan pushed a commit that referenced this pull request Mar 17, 2025
…tomatically (sonic-net#899)

#### Why I did it
src/sonic-linux-kernel
```
* b1aeb41 - (HEAD -> 202412, origin/HEAD, origin/202412) [code sync] Merge code from sonic-net/sonic-linux-kernel:202411 to 202412 (#38) (20 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
vivekrnv pushed a commit that referenced this pull request Apr 2, 2025
…sonic-net#22193)

#### Why I did it
src/dhcpmon
```
* 749c7e5 - (HEAD -> master, origin/master, origin/HEAD) Update DB separator for per-interface counter (#38) (23 hours ago) [Yaqiang Zhu]
```
#### How I did it
#### How to verify it
#### Description for the changelog
dgsudharsan pushed a commit that referenced this pull request May 12, 2025
…omatically (sonic-net#928)

#### Why I did it
src/sonic-swss-common
```
* 0087183 - (HEAD -> 202412, origin/HEAD, origin/202412) Merge pull request #38 from mssonicbld/sonicbld/202412-merge (35 hours ago) [mssonicbld]
* e32b71e - Merge branch '202411' of https://github.com/sonic-net/sonic-swss-common into 202412 (2 days ago) [Sonic Automation]
* 3bc4141 - [FC] remove FLEX_COUNTER_DELAY_STATUS_FIELD (sonic-net#982) (3 weeks ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
dgsudharsan pushed a commit that referenced this pull request May 12, 2025
…tically (sonic-net#937)

#### Why I did it
src/sonic-sairedis
```
* 8930167 - (HEAD -> 202412, origin/HEAD, origin/202412) [FC] Fix the update failure in switch debug counters (#38) (3 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
dgsudharsan pushed a commit that referenced this pull request Jun 14, 2025
…tically (sonic-net#22803)

#### Why I did it
src/sonic-dash-api
```
* 573485d - (HEAD -> master, origin/master, origin/HEAD) Update pipeline to use Bookworm and Ubuntu 24.04 (#38) (6 days ago) [Saikrishna Arcot]
```
#### How I did it
#### How to verify it
#### Description for the changelog
dgsudharsan pushed a commit that referenced this pull request Dec 16, 2025
…test HEAD automatically (sonic-net#1554)

#### Why I did it
src/sonic-platform-daemons
```
* b68357c - (HEAD -> 202412, origin/202412) [xcvrd] Create TRANSCEIVER_FIRMWARE_INFO table for all subports (#38) (9 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants