[OpenWrt-Devel] [PATCH] Allow VLAN filtering if needed.

Felix Fietkau nbd at nbd.name
Thu Nov 15 10:34:08 EST 2018

On 2018-11-15 16:11, Jonathan Thibault wrote:
> Greetings,
> I would like to propose enabling CONFIG_BRIDGE_VLAN_FILTERING on OpenWRT 
> releases.
> This allows us to use the bridge as a managed switch and gracefully 
> handle mixed tagged and untagged frames. Prior to this, the only 
> alternative was creating one bridge per vlan which quickly becomes a 
> nightmare and still won't let you mix both tagged and untagged frames on 
> the physical port without some complex ebtables magic.
> This is in line with the notion that OpenWRT is the network go-to swiss 
> army knife when you need a nice set-and-forget, low maintenance box to 
> handle a specific task.
> Current builds of the ip-bridge package already fully support this 
> feature so the only requirement is enabling the kernel config.
> This is disabled by default so existing bridge configurations will not 
> be affected.  This patch only gives the ability to turn it on with an 
> 'ip link' command.  If there is interest, I could look into making the 
> feature accessible via uci configuration.
> It causes about 3.1% hit on raw bridging speed, which is relatively 
> trivial considering that I had to use 300 byte packets to strain the CPU 
> enough to notice a slowdown at all.  The ER8 would chug along at wire 
> speed otherwise, and that's using only one core.  Since the typical 
> bridge use case on OpenWRT is wireless, I doubt it would be noticeable 
> at all.
> diff --git a/target/linux/generic/config-4.14 
> b/target/linux/generic/config-4.14
> index aa227ec6bf..a385fe3f24 100644
> --- a/target/linux/generic/config-4.14
> +++ b/target/linux/generic/config-4.14
> @@ -623,7 +623,7 @@ CONFIG_BRIDGE=y
>   # CONFIG_BRIDGE_EBT_STP is not set
>   # CONFIG_BRIDGE_EBT_T_NAT is not set
> -# CONFIG_BRIDGE_EBT_VLAN is not set
Wrong config symbol?

- Felix

openwrt-devel mailing list
openwrt-devel at lists.openwrt.org

More information about the openwrt-devel mailing list