From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steffen Klassert Subject: Re: [PATCH ipsec-next v2] xfrm: Use VRF master index if output device is enslaved Date: Fri, 21 Aug 2015 22:31:32 +0200 Message-ID: <20150821203132.GA3589@secunet.com> References: <1440108390-10192-1-git-send-email-dsa@cumulusnetworks.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Cc: David Ahern , To: Nikolay Aleksandrov , David Miller Return-path: Received: from a.mx.secunet.com ([195.81.216.161]:40609 "EHLO a.mx.secunet.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752968AbbHUUbf (ORCPT ); Fri, 21 Aug 2015 16:31:35 -0400 Content-Disposition: inline In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: On Fri, Aug 21, 2015 at 02:11:21AM +0300, Nikolay Aleksandrov wrote: > > > On Aug 21, 2015, at 1:06 AM, David Ahern wrote: > > > > Directs route lookups to VRF table. Compiles out if NET_VRF is not > > enabled. With this patch able to successfully bring up ipsec tunnels > > in VRFs, even with duplicate network configuration. > > > > Signed-off-by: David Ahern > > --- > > v2 > > - use vrf_master_ifindex rather than vrf_master_ifindex_rcu > > > > net/ipv4/xfrm4_policy.c | 7 +++++-- > > net/ipv6/xfrm6_policy.c | 7 +++++-- > > 2 files changed, 10 insertions(+), 4 deletions(-) > > > > Looks good to me, > > Acked-by: Nikolay Aleksandrov David, can you please take this directly into net-next? Acked-by: Steffen Klassert