Re: Adding support for VRF traffic passed by mangle table

2017-04-03 Thread David Ahern
On 4/2/17 10:57 PM, Jack Ma wrote: > diff --git a/net/ipv4/netfilter.c b/net/ipv4/netfilter.c > index c0cc6aa..07168d4 100644 > --- a/net/ipv4/netfilter.c > +++ b/net/ipv4/netfilter.c > @@ -46,6 +46,14 @@ int ip_route_me_harder(struct net *net, struct sk_buff > *skb, unsigned int addr_t >

Adding support for VRF traffic passed by mangle table

2017-04-02 Thread Jack Ma
Hi David, I formatted a patch to support vrf flow passed by iptables(mangle table). And previously, we lost the flow.oif which would result in a routing look-up failure. This patch wraps vrf response flow with the correct master interface by using the skb->dev, which was set to the real