From aa33013ba5397977b92284b15013bae182679236 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maciej=20=C5=BBenczykowski?= Date: Tue, 25 Mar 2025 13:56:55 -0700 Subject: [PATCH] clatd bpf: drop multicast MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit to avoid waking up clat daemon needlessly (it just drops these anyway) Test: TreeHugger Signed-off-by: Maciej Żenczykowski Change-Id: I8485f01635d5c6dd168d89279a3b390200f78c63 --- bpf/progs/clatd.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bpf/progs/clatd.c b/bpf/progs/clatd.c index f4e4f3bb99..690a57236e 100644 --- a/bpf/progs/clatd.c +++ b/bpf/progs/clatd.c @@ -288,8 +288,8 @@ DEFINE_BPF_PROG("schedcls/egress4/clat_rawip", AID_ROOT, AID_SYSTEM, sched_cls_e // We cannot handle IP options, just standard 20 byte == 5 dword minimal IPv4 header if (ip4->ihl != 5) return TC_ACT_PIPE; - // Packet must not be multicast - if ((ip4->daddr & htonl(0xf0000000)) == htonl(0xe0000000)) return TC_ACT_PIPE; + // Packet must not be multicast, if it is just outright drop it. + if ((ip4->daddr & htonl(0xf0000000)) == htonl(0xe0000000)) return TC_ACT_SHOT; // Calculate the IPv4 one's complement checksum of the IPv4 header. __wsum sum4 = 0;