firewall: create "dynamic" sets for nft rules for slb-bonding

A workaround for a nftables issue ([1]). I don't know why that matters.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=2177667

Fixes: e9268e3924 ('firewall: add mlag firewall utils for multi chassis link aggregation (MLAG) for bonding-slb')

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1614
This commit is contained in:
Thomas Haller 2023-05-02 08:54:21 +02:00
parent 86e635dd4d
commit d3b5496362
No known key found for this signature in database
GPG key ID: 29C2366E4DFC5728

View file

@ -889,12 +889,12 @@ nm_firewall_nft_stdio_mlag(gboolean up,
*/
_append(&strbuf,
"add set netdev %s macset-tagged {"
" typeof ether saddr . vlan id; flags timeout; "
" typeof ether saddr . vlan id; flags dynamic,timeout; "
"}",
table_name);
_append(&strbuf,
"add set netdev %s macset-untagged {"
" typeof ether saddr; flags timeout;"
" typeof ether saddr; flags dynamic,timeout; "
"}",
table_name);