On Wednesday 2010-08-18 00:44, Jonathan Tripathy wrote: > > When using a single Linux host with lots of bridges, would there ever be a > time, even for a few seconds, where traffic would "jump" bridges? > > I know a previous poster mentioned that when adding a host to a bridge, for a > few seconds all packets get sent everywhere That seems unlikely. The bridge keeps a table of (mac, bridgeport) tuples (cf. `brctl showmacs br0`), and a "broadcast" should only occur when there is no matching entry or when the destination L2 address is broadcast. (Ignoring multicast for now.) > Reason I ask is that I am considering have one bridge for public traffic and > one bridge for private, and don't want private traffic to be seen by hosts > connected to the public bridge. Bridges link Ethernet (sub)segments together to form a (large) Ethernet segment. In other words, if you keep the trees separate, they will be separate. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html