Skip to content

Conversation

@marian-pritsak
Copy link
Contributor

@marian-pritsak marian-pritsak commented Aug 21, 2025

  • Add SAI_SWITCH_TUNNEL_ATTR_VXLAN_UDP_SPORT_SECURITY attribute to drop tunnel packets with UDP source port outside allowed range
  • Add documentation for UDP source port validation on VXLAN packet ingress
  • Update both saiswitch.h and saitunnel.h with security clarifications

@KrisNey-MSFT
Copy link

hi @marian-pritsak , would it be possible to accept the spelling change for this one?

@prsunny
Copy link
Collaborator

prsunny commented Oct 7, 2025

@marian-pritsak , gentle reminder to address the comments

@KrisNey-MSFT
Copy link

hello @marian-pritsak , would you please check this one? TY...

@KrisNey-MSFT
Copy link

Expected to look at this one tomorrow

@tjchadaga
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@marian-pritsak marian-pritsak changed the title Expand the definition of VxLAN UDP SRC Port Replicate VXLAN UDP sport security to switch level Nov 4, 2025
- Add SAI_SWITCH_TUNNEL_ATTR_VXLAN_UDP_SPORT_SECURITY attribute to drop tunnel packets with UDP source port outside allowed range
- Add documentation for UDP source port validation on VXLAN packet ingress
- Update both saiswitch.h and saitunnel.h with security clarifications

Signed-off-by: Marian Pritsak <marianp@mellanox.com>
@tjchadaga
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants