<html><body><div style="font-family: Verdana; font-size: 10pt; color: #000000"><div><span style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;">>>you</span><br style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;"><span style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;">>>have a single tool managing tables containing the chains. Iow. bridge</span><br style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;"><span style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;">>>stuff still goes into the bridge tables, ip stuff into the ip tables,</span><br style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;"><span style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;" data-mce-style="color: #333333; font-family: monospace; font-size: 14.1599998474121px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none; background-color: #ffffff;">>>arp stuff into the arp tables.</span><br></div><div><br data-mce-bogus="1"></div><div>bridge log: (get forward working).</div><div><br data-mce-bogus="1"></div><div>: IN=fwln150i0 OUT=tap150i0 ARP HTYPE=1 PTYPE=0x0800 OPCODE=1 MACSRC=5a:1a:9a:dc:7c:09 IPSRC=10.3.95.78 MACDST=00:00:00:00:00:00 IPDST=10.3.95.44<br></div><div><br></div><div>so, yes, we have mac and ip, but don't have ip information about tcp/udp and port.</div><div>so it's really more like ebtables.</div><div><br data-mce-bogus="1"></div><div>we really need to use inet tables for rules. (and need to be able to make rules on physdevin|physdevoutt)</div><div>Jul 27 12:19:14 kvmtest1 kernel: [165625.946715] forward: IN=fwbr150i0 OUT=fwbr150i0 PHYSIN=fwln150i0 PHYSOUT=tap150i0 MAC=01:00:5e:00:00:fc:0e:d3:35:5a:1c:a5:08:00 SRC=10.3.95.20 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=14541 PROTO=UDP SPT=61150 DPT=5355 LEN=41 <br></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div data-marker="__SIG_PRE__"><table cellpadding="0" border="0" class="MsoNormalTable" style="font-family: 'Times New Roman';" data-mce-style="font-family: 'Times New Roman';"><tbody><tr><td style="padding: 0cm;" data-mce-style="padding: 0cm;"><p><span style="font-family: Calibri, sans-serif; color: #1f497d;" data-mce-style="font-family: Calibri, sans-serif; color: #1f497d;"><img width="211" height="150" src="http://www.odiso.com/wp-content/uploads/2014/03/odiso.png" data-mce-src="http://www.odiso.com/wp-content/uploads/2014/03/odiso.png"></span></p></td><td width="100%" style="width: 1679px; padding: 0cm 0cm 0cm 6pt;" data-mce-style="width: 1679px; padding: 0cm 0cm 0cm 6pt;"><table cellspacing="4" cellpadding="0" border="0" class="MsoNormalTable"><tbody><tr><td style="padding: 3pt;" data-mce-style="padding: 3pt;"><p><b><span style="font-size: 12.5pt; font-family: Calibri, sans-serif; color: #388bc6;" data-mce-style="font-size: 12.5pt; font-family: Calibri, sans-serif; color: #388bc6;">Alexandre</span></b> <b><span style="font-size: 12.5pt; font-family: Calibri, sans-serif; color: #424242;" data-mce-style="font-size: 12.5pt; font-family: Calibri, sans-serif; color: #424242;">Derumier</span></b> <span style="font-family: Calibri, sans-serif; color: #1f497d;" data-mce-style="font-family: Calibri, sans-serif; color: #1f497d;"><br></span><b><span style="font-size: 8pt; font-family: Calibri, sans-serif; color: #424242;" data-mce-style="font-size: 8pt; font-family: Calibri, sans-serif; color: #424242;">Ingénieur système et stockage</span></b></p></td></tr><tr><td style="padding: 3pt;" data-mce-style="padding: 3pt;"><p><b><span style="font-size: 8pt; font-family: Calibri, sans-serif; color: #424242;" data-mce-style="font-size: 8pt; font-family: Calibri, sans-serif; color: #424242;">Fixe :</span></b> <span style="font-size: 8pt; font-family: Calibri, sans-serif; color: #636466; text-align: right;" data-mce-style="font-size: 8pt; font-family: Calibri, sans-serif; color: #636466; text-align: right;">03 20 68 90 88</span> <span style="font-family: Calibri, sans-serif; color: #1f497d;" data-mce-style="font-family: Calibri, sans-serif; color: #1f497d;"><br></span><b><span style="font-size: 8pt; font-family: Calibri, sans-serif; color: #424242;" data-mce-style="font-size: 8pt; font-family: Calibri, sans-serif; color: #424242;">Fax :</span></b> <span style="font-size: 8pt; font-family: Calibri, sans-serif; color: #636466; text-align: right;" data-mce-style="font-size: 8pt; font-family: Calibri, sans-serif; color: #636466; text-align: right;">03 20 68 90 81</span></p></td></tr><tr><td style="padding: 3pt;" data-mce-style="padding: 3pt;"><p><span style="font-size: 7.5pt; font-family: Calibri, sans-serif; color: gray;" data-mce-style="font-size: 7.5pt; font-family: Calibri, sans-serif; color: gray;">45 Bvd du Général Leclerc 59100 Roubaix</span> <span style="font-family: Calibri, sans-serif; color: #1f497d;" data-mce-style="font-family: Calibri, sans-serif; color: #1f497d;"><br></span><span style="font-size: 7.5pt; font-family: Calibri, sans-serif; color: gray;" data-mce-style="font-size: 7.5pt; font-family: Calibri, sans-serif; color: gray;">12 rue Marivaux 75002 Paris</span></p></td></tr><tr><td style="padding: 3pt; line-height: 20px;" data-mce-style="padding: 3pt; line-height: 20px;"><a target="_blank" href="https://twitter.com/OdisoHosting" data-mce-href="https://twitter.com/OdisoHosting"><img src="http://www.odiso.com/wp-content/uploads/2014/03/Twitter.png" data-mce-src="http://www.odiso.com/wp-content/uploads/2014/03/Twitter.png"></a> <a target="_blank" href="https://twitter.com/mindbaz" data-mce-href="https://twitter.com/mindbaz"><img src="http://www.odiso.com/wp-content/uploads/2014/03/Twitter.png" data-mce-src="http://www.odiso.com/wp-content/uploads/2014/03/Twitter.png"></a> <a target="_blank" href="https://www.linkedin.com/company/odiso" data-mce-href="https://www.linkedin.com/company/odiso"><img src="http://www.odiso.com/wp-content/uploads/2014/03/Linkedin.png" data-mce-src="http://www.odiso.com/wp-content/uploads/2014/03/Linkedin.png"></a> <a target="_blank" href="http://www.viadeo.com/fr/company/odiso" data-mce-href="http://www.viadeo.com/fr/company/odiso"><img src="http://www.odiso.com/wp-content/uploads/2014/03/Viadeo.png" data-mce-src="http://www.odiso.com/wp-content/uploads/2014/03/Viadeo.png"></a> <a target="_blank" href="https://www.facebook.com/monsiteestlent" data-mce-href="https://www.facebook.com/monsiteestlent"><img src="http://www.odiso.com/wp-content/uploads/2014/03/Facebook.png" data-mce-src="http://www.odiso.com/wp-content/uploads/2014/03/Facebook.png"></a></td></tr></tbody></table></td></tr></tbody></table><table style="font-family: 'Times New Roman';" data-mce-style="font-family: 'Times New Roman';"><tbody><tr><td><p style="font-style: italic;" data-mce-style="font-style: italic;"><a href="http://www.monsiteestlent.com/" style="text-decoration: none;" data-mce-href="http://www.monsiteestlent.com/" data-mce-style="text-decoration: none;"><span color="#388bc6" data-mce-style="color: #388bc6;" style="color: #388bc6;">MonSiteEstLent.com</span></a> - Blog dédié à la webperformance et la gestion de pics de trafic</p></td></tr></tbody></table></div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>De: </b>"Wolfgang Bumiller" <w.bumiller@proxmox.com><br><b>À: </b>"aderumier" <aderumier@odiso.com><br><b>Cc: </b>"pve-devel" <pve-devel@pve.proxmox.com><br><b>Envoyé: </b>Lundi 27 Juillet 2015 13:47:22<br><b>Objet: </b>Re: [pve-devel] nftables 0.4 and kernel 3.19, still problem with physdevin|out<br></div><br><div data-marker="__QUOTED_TEXT__">> oh ok, didn't known that. (still a bit confuse between bridge vs ip/inet tables)<br><br>I'm new to nft, too, but as far as I understand it's not actually much<br>different from iptables (from the outside anyway).<br>It's just that rather than having several tools managing chains, you<br>have a single tool managing tables containing the chains. Iow. bridge<br>stuff still goes into the bridge tables, ip stuff into the ip tables,<br>arp stuff into the arp tables.<br><br>There's also no complete documentation available yet. My current<br>favorite is the gentoo wiki.<br><br>> I don't known why, but I don't see any traffic in forward from bridge table. (input|output for bridge ip itself is working fine).<br>> forward in ip|inet table is working fine.<br>> <br>> any idea ?<br><br>Not really. What kernels did you test and how are you viewing the<br>traffic? (Are you using the log action?)<br></div></div></body></html>