In bridge mode, all endpoints are directly connected to each other, communication is not redirected through the physical interface's peer.
This mode gives more power to a single endpoint, usually in macvtap
mode.
It is not allowed for more than one endpoint on the same physical interface.
All traffic will be forwarded to this endpoint, allowing virtio guests to change MAC address or set promiscuous mode in order to bridge the interface or create vlan interfaces on top of it.
By default, this mode forces the underlying interface into promiscuous mode.
Passing the nopromisc
flag prevents this, so the promisc flag may be controlled
using standard tools.
Do not allow communication between macvlan instances on the same physical interface, even if the external switch supports hairpin mode.
Allows one to set a list of allowed mac address, which is used to match against source mac address from received frames on underlying interface.
This allows creating mac based VLAN associations, instead of standard port or tag based.
The feature is useful to deploy 802.1x mac based behavior, where drivers of underlying interfaces doesn't allow that.
By default, packets are also considered (duplicated) for destination-based MACVLAN.
Passing the nodst
flag stops matching packets from also going through the destination-based flow.
Virtual Ethernet Port Aggregator mode.
Data from one macvlan instance to the other on the same physical inter face is transmitted over the physical interface.
Either the attached switch needs to support hairpin mode, or there must be a TCP/IP router forwarding the packets in order to allow communication.
This is the default mode.
Generated using TypeDoc
Modes for macvlan and macvtap interfaces.