Re: [PATCH RFC 0/1] xfrm: dst lookup doesn't account for fwmark

2016-08-16 Thread Doug Applegate
Shortly I will post an updated patch. Please ignore the 'onlink' on those routes. It is irrelevant. The particular use case is load balancing by using fwmark. Consider if we don't define any routes except load balancing based on fwmarks. The only requirement is that the traffic must exit the same

Re: [PATCH RFC 0/1] xfrm: dst lookup doesn't account for fwmark

2016-07-27 Thread Steffen Klassert
On Fri, Jul 22, 2016 at 03:50:30PM -0600, Doug Applegate wrote: > I ran into an issue trying to route outgoing ipsec traffic from an > ipsec responder hub that uses fwmark to route out a specific > interface. The fwmark points to a route table that contains a default > route out a specific interfac

[PATCH RFC 0/1] xfrm: dst lookup doesn't account for fwmark

2016-07-22 Thread Doug Applegate
I ran into an issue trying to route outgoing ipsec traffic from an ipsec responder hub that uses fwmark to route out a specific interface. The fwmark points to a route table that contains a default route out a specific interface. The fwmark is applied based on incoming interface of incoming traffi