David Miller <da...@davemloft.net> wrote: > > This patch set addresses the issue for ILA by adding a fast locator > > lookup that occurs before early demux. This is done by using a hook > > at NF_INET_PRE_ROUTING. For the backend we implement an rhashtable > > that contains identifier to locator to mappings. The table also > > allows more specific matches that include original locator and > > interface. > > I really don't think we should use netfilter hooks to perform > operations setup outside of netfilter's normal configuration > mechanisms.
Thanks, thats my thinking as well. > If ILA were instead configured inside of netfilter's normal mechanisms > then there would be full transparency about whether ILA > transformations are performed before or after the user's other > netfilter rules. And the user would have full control over this. > As implemented here, they don't. > > So sorry, I'm not too keen on this and I bet if netfilter developers > reviewed this patch series they'd have similar objections. Seems this should/could be implemented similar to RFC6296 network prefix translations (see net/ipv6/netfilter/ip6t_NPT.c). -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
