suricata-verify icon indicating copy to clipboard operation
suricata-verify copied to clipboard

multi-tenant: Basic multi-tenant selector tests

Open jlucovsky opened this issue 1 year ago • 5 comments

This commit adds basic tests for vlan-selector configurations (including vlan-pair, added in 6237)

Issue: 6237

Ticket

If your pull request is related to a Suricata ticket, please provide the full URL to the ticket here so this pull request can monitor changes to the ticket status:

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6237

jlucovsky avatar Aug 19 '23 14:08 jlucovsky

What happens when you have 2 inner vlan's with the same ID, but different outer IDs? Or is that not a normal deployment scenario?

jasonish avatar Aug 19 '23 19:08 jasonish

Good point.  It’s a customer issue and they must be aware of that possibility. The customer requested this as they are incorporating a legacy network where the inner vlans are unique across the total deployed vlan range.

Should the doc bring that point up more strongly?

jlucovsky avatar Aug 19 '23 19:08 jlucovsky

Suricata PR for reference is https://github.com/OISF/suricata/pull/9729

catenacyber avatar Aug 28 '23 20:08 catenacyber

https://github.com/OISF/suricata/pull/10015

catenacyber avatar Mar 20 '24 21:03 catenacyber

Should this have min-version: 8 ?

catenacyber avatar Apr 17 '24 11:04 catenacyber

Closed for further evaluation.

jlucovsky avatar Sep 09 '24 20:09 jlucovsky