[ovs-dev] [PATCH 3/3] ovn: Update TODO, ovn-northd flow table design, ovn-architecture for L3.

Ben Pfaff blp at nicira.com
Tue Oct 6 21:21:00 UTC 2015


On Tue, Sep 29, 2015 at 04:30:30PM -0700, Justin Pettit wrote:
> 
> > On Sep 29, 2015, at 3:19 PM, Ben Pfaff <blp at nicira.com> wrote:
> > 
> > On Mon, Sep 21, 2015 at 06:06:16PM -0700, Justin Pettit wrote:
> >> 
> >> 
> >> We may want to drop traffic sent to an IP broadcast address to prevent
> >> things like Smurf attacks.
> > 
> > It's an option, sure.
> > 
> > It might not be viable to launch a Smurf attack from within a logical
> > network when port security is turned on.
> 
> Couldn't it be an issue with traffic coming from a gateway?

Yes.



More information about the dev mailing list