cablelabs / transparent-security

Transparent Security is a solution for identify the source devices of a DDoS attack and mitigates the attack in the customer premises or the access network. This solution leverages a P4 based programmable data plane for add in-band network telemetry (INT) for device identification and in-band mitigation.
https://www.cablelabs.com/vaccinate-your-network-to-prevent-the-spread-of-ddos-attacks
Apache License 2.0
32 stars 4 forks source link

Ensure L2 routing for IPv6 hosts #337

Closed spisarski closed 3 years ago

spisarski commented 3 years ago

What does this PR do?

Fixes #315 Manually added neighbor entry (IPv6 equivalent to ARP) to ip dev switch tunnel for IPv6 L2 ipv6_routing Removed -dip4 hook for destination MAC lookups (send_packets.py) and interface (receive_packets.py) in the test code. Now lookups are ocurring using the destination IP address from ARP cache for IPv4 & using get-mac library getmac.get_mac_address() for IPv6. Fixed IPv6 addresses in lab_trial topology (inet & host2 had same & ae was in a different subnet)

iperf3 will now work with IPv6 endpoints

Do you have any concerns with this PR?

no

How can the reviewer verify this PR?

Ensure CI doesn't fail

Any background context you want to provide?

Need to ensure IPv6 works like IPv6

Screenshots or logs (if appropriate)

Questions:

spisarski commented 3 years ago

Run Tofino Environment Build

spisarski commented 3 years ago

Run Tofino lab trial build

spisarski commented 3 years ago

Run Tofino core build

spisarski commented 3 years ago

Run Tofino lab trial build

spisarski commented 3 years ago

Run Tofino lab trial build

spisarski commented 3 years ago

Run Tofino core build