mbox series

[nf,v2,0/2] netfilter: Fix/update mangled packet re-routing within VRF domains

Message ID 20220419134701.153090-1-martin@strongswan.org (mailing list archive)
Headers show
Series netfilter: Fix/update mangled packet re-routing within VRF domains | expand

Message

Martin Willi April 19, 2022, 1:46 p.m. UTC
The first patch fixes re-routing of IPv6 packets mangled by Netfilter 
rules to consider the layer 3 VRF domain. The second patch updates both 
IPv4 and IPv6 re-routing to use the recently added l3mdev flow key instead
of abusing the oif flow key to select the L3 domain.

These patches have been explicitly split up to allow stable to pick up the
first patch as-is.

Changes in v2:
- Add a second patch to migrate IPv4/6 re-routing to l3mdev flow key

Martin Willi (2):
  netfilter: Update ip6_route_me_harder to consider L3 domain
  netfilter: Use l3mdev flow key when re-routing mangled packets

 net/ipv4/netfilter.c | 3 +--
 net/ipv6/netfilter.c | 9 +++++++--
 2 files changed, 8 insertions(+), 4 deletions(-)