Re: Connection tracking and vlan
From: Eric Dumazet <hidden>
Date: 2009-10-30 15:31:53
From: Eric Dumazet <hidden>
Date: 2009-10-30 15:31:53
Herbert Xu a écrit :
Adayadil Thomas [off-list ref] wrote:quoted
If two connections have same 5 tuple, src ip, dst ip, src port, dst port, protocol(tcp/udp) but on different vlans (different vlan id), does the conntrack separate these ?Probably not. Patrick, can you confirm this?
Very strange, this question about vlan looks like discussion we had yesterday (or the day before...) about interfaces (versus packet defragmentation) "IP conntracking" is about IP, and [V]LAN doesnt matter at all at this protocol level. Same thing if you have two interfaces, eth0 & eth1 : IP conntrack tuples dont include interface name/index