On Sun, Jul 17, 2022 at 05:53:22PM +0200, netdev@kapio-technology.com wrote:

quoted

3. What happens to packets with a DA matching the zero-DPV entry, are
they also discarded in hardware? If so, here we differ from the bridge
driver implementation where such packets will be forwarded according to
the locked entry and egress the locked port

I understand that egress will follow what is setup with regard to UC, MC and
BC, though I haven't tested that. But no replies will get through of course
as long as the port hasn't been opened for the iface behind the locked port.

Here, should we be rather fixing the software bridge, if the current
behavior is to forward packets towards locked FDB entries?