On Mon, Jan 25, 2016 at 08:59:25PM +0000, Taylor R Campbell wrote: > > Here's my quick survey of uses: > > - gif(4) requires exact src/dst match and returns prio 2*32 or 2*128 > - stf(4) requires exact src match and returns prio 32 > - ip_mroute.c requires exact src/dst match and returns prio 2*32 + 5 > - xform_ipip.c requires only M_IPSEC and returns prio 1 > > So for systems with only gif tunnels, an exact-match table suffices, > but that is not so for the three other kinds of tunnels.
I suspect the last kind of tunnel is by far the most common, no? Thor
