On 2022-07-21 13:59, Vladimir Oltean wrote:

On Sun, Jul 17, 2022 at 05:53:22PM +0200, netdev@kapio-technology.com 
wrote:

quoted

quoted

3. What happens to packets with a DA matching the zero-DPV entry, are
they also discarded in hardware? If so, here we differ from the bridge
driver implementation where such packets will be forwarded according to
the locked entry and egress the locked port

I understand that egress will follow what is setup with regard to UC, 
MC and
BC, though I haven't tested that. But no replies will get through of 
course
as long as the port hasn't been opened for the iface behind the locked 
port.

Here, should we be rather fixing the software bridge, if the current
behavior is to forward packets towards locked FDB entries?

Yes, I think that locked entries should block egress to the respective 
hosts behind the locked port, which should be fixed in the bridge.