From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nicolas Dichtel Subject: Re: [PATCH next 3/3] net: Use l3_dev instead of skb->dev for L3 processing Date: Tue, 8 Mar 2016 10:46:47 +0100 Message-ID: <56DE9F87.8060009@6wind.com> References: <1456783704-18746-1-git-send-email-mahesh@bandewar.net> Reply-To: nicolas.dichtel@6wind.com Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: QUOTED-PRINTABLE Cc: Mahesh Bandewar , David Miller , Eric Dumazet , netdev , Tim Hockin , Alex Pollitt , Matthew Dupre , "Eric W. Biederman" To: Cong Wang , Mahesh Bandewar Return-path: Received: from mail-wm0-f47.google.com ([74.125.82.47]:37162 "EHLO mail-wm0-f47.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932084AbcCHJqv (ORCPT ); Tue, 8 Mar 2016 04:46:51 -0500 Received: by mail-wm0-f47.google.com with SMTP id p65so19746925wmp.0 for ; Tue, 08 Mar 2016 01:46:50 -0800 (PST) In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: + Eric B. Le 08/03/2016 06:37, Cong Wang a =C3=A9crit : > On Fri, Mar 4, 2016 at 2:12 PM, Mahesh Bandewar = wrote: >> >> Unfortunately we don't have a way to switch to ns after L3 processin= g. > > I am totally aware of this, this is exactly why I said this might not= be easy. > > The question is how hard it is to implement one? My gut feeling is we= only > need to change some data in skb, something similar to skb_scrub_packe= t(). > But I never even try. Note that Eric Biederman has made "some" patches to be able to "control= " the netns on the egress side. The goal is to be able to have routes that le= ak to another netns. It seems that the same work should probably be done at the ingress side= =2E I agree with Cong that just changing skb->dev is not the right approach= =2E