[pve-devel] applied: [PATCH pve-network 1/1] zones: evpn: add a default unreachable, to prevent vrf leak

[Thomas Lamprecht]

On 08.04.21 10:45, Alexandre Bruyelles wrote:
> From: Alexandre Bruyelles <git at jack.fr.eu.org>
> 
> On Linux, when no route is found in a vrf, it somehow fallback
> to the default routing table. In our case, that means a leak
> from the overlay to the underlay.
> Adding a low priority unreachable catch-all route is the way to go, as
> per the doc: https://www.kernel.org/doc/Documentation/networking/vrf.txt
> 
> Signed-off-by: Alexandre Bruyelles <git at jack.fr.eu.org>
> ---
>  PVE/Network/SDN/Zones/EvpnPlugin.pm | 1 +
>  1 file changed, 1 insertion(+)
> 
>

applied, thanks!