Preserve unparsed bridge tc filters

Author: sjmiller609

lib/network/bridge_linux.go

@@ -950,15 +950,21 @@ func planOrphanedBridgeTC(liveTapIndexes map[int]bool, filters []bridgeFilter, c
 		return nil, nil, false
 	}
 
-	liveClassIDs := make(map[string]bool)
+	protectedClassIDs := make(map[string]bool)
 	staleFilters := make([]bridgeFilter, 0)
 	for _, filter := range filters {
 		if filter.handle == "" || filter.flowID == "" {
 			continue
 		}
+		if filter.rtIif < 0 {
+			if classID, ok := minorClassID(filter.flowID); ok {
+				protectedClassIDs[classID] = true
+			}
+			continue
+		}
 		if liveTapIndexes[filter.rtIif] {
 			if classID, ok := minorClassID(filter.flowID); ok {
-				liveClassIDs[classID] = true
+				protectedClassIDs[classID] = true
 			}
 			continue
 		}
@@ -974,7 +980,7 @@ func planOrphanedBridgeTC(liveTapIndexes map[int]bool, filters []bridgeFilter, c
 		if !ok {
 			continue
 		}
-		if !liveClassIDs[classID] {
+		if !protectedClassIDs[classID] {
 			staleClasses = append(staleClasses, fullClassID)
 		}
 	}

lib/network/bridge_linux_test.go

@@ -51,9 +51,8 @@ func TestPlanOrphanedBridgeTC(t *testing.T) {
 	assert.True(t, safe)
 	assert.Equal(t, []bridgeFilter{
 		{handle: "0x2", flowID: "1:b001", rtIif: 57},
-		{handle: "0x3", flowID: "1:000c", rtIif: -1},
 	}, staleFilters)
-	assert.Equal(t, []string{"1:b001", "1:000c", "1:9999"}, staleClasses)
+	assert.Equal(t, []string{"1:b001", "1:9999"}, staleClasses)
 }
 
 func TestPlanOrphanedBridgeTCBailsWhenNoRTIIFParses(t *testing.T) {