mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

egress anti-spoof: the vm test names drop as explicit, and the log default waits for the stale-delete lines

Browse source
This commit is contained in:
atlas 2026-11-15 01:21:31 +01:00 • committed by mara
commit a812e4dd21
1 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/4-implementation/networking/network.md
View file

@ -876,7 +876,8 @@ source check lives in that table and the host-side filtering stays in
and its own MAC is never refused by `drop`, but only while the pair stays in
the table, and a host suspend/resume empties it. `log` keeps the lines and
the counters and blocks nothing; `drop` returns once a resume test proves the
lease set survives it. `drop`
lease set survives it and the `egress-lease: … skipped (stale)` lines confirm
the renewal fix on a live hive. `drop`
is what the table is for: without it the egress log can't tell agents apart.
A binding that failed shows as `hive-egress-pin` errors in the journal and
`IN=` lines for that port.