it is the same in the context of linuxbridge backend.
in the case of ovs with hybrid plug its different
but similar.
the expected behaviour or any mac learing bridge is that if it does not have a mac entry for a unicast destiatnion mac then it should perform split horizone routing/swithching which means it should flood to all ports in the same l2 bradcast domain excetp its origin port.
that by itself is not a security risk. in a typical case the mac learning table will have been popluated by the intial arp request and responce that the sorce would have preformed to determin the destiontion mac form its ip
if we are doing arp suppression using the l2 pop driver it shoudl aso have install flows to prevent flooding.
in anycase im currently working on a fix for this
ill take a look at the other bug later as i have only skimed it.
it is the same in the context of linuxbridge backend.
in the case of ovs with hybrid plug its different
but similar.
the expected behaviour or any mac learing bridge is that if it does not have a mac entry for a unicast destiatnion mac then it should perform split horizone routing/swithching which means it should flood to all ports in the same l2 bradcast domain excetp its origin port.
that by itself is not a security risk. in a typical case the mac learning table will have been popluated by the intial arp request and responce that the sorce would have preformed to determin the destiontion mac form its ip
if we are doing arp suppression using the l2 pop driver it shoudl aso have install flows to prevent flooding.
in anycase im currently working on a fix for this
ill take a look at the other bug later as i have only skimed it.