Commit f4f914b5 authored Apr 20, 2010 by Jiri Olsa Committed by David S. Miller Apr 21, 2010

net: ipv6 bind to device issue



The issue raises when having 2 NICs both assigned the same
IPv6 global address.

If a sender binds to a particular NIC (SO_BINDTODEVICE),
the outgoing traffic is being sent via the first found.
The bonded device is thus not taken into an account during the
routing.

From the ip6_route_output function:

If the binding address is multicast, linklocal or loopback,
the RT6_LOOKUP_F_IFACE bit is set, but not for global address.

So binding global address will neglect SO_BINDTODEVICE-binded device,
because the fib6_rule_lookup function path won't check for the
flowi::oif field and take first route that fits.

Signed-off-by: Jiri Olsa <jolsa@redhat.com>
Signed-off-by: Scott Otto <scott.otto@alcatel-lucent.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent f2228f78

net/ipv6/route.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -815,7 +815,7 @@ struct dst_entry * ip6_route_output(struct net net, struct sock sk,
		{
		int flags = 0;

		if (rt6_need_strict(&fl->fl6_dst))
		if (fl->oif \|\| rt6_need_strict(&fl->fl6_dst))
		flags \|= RT6_LOOKUP_F_IFACE;

		if (!ipv6_addr_any(&fl->fl6_src))

Admin message