On Mon, 2017-01-16 at 17:44 -0800, Eric Dumazet wrote: > On Mon, 2017-01-16 at 17:04 -0700, Andrew Collins wrote:
> > Is there a better way to manage flow separation in routed+encapsulated > > traffic? > > Encapsulated traffic is fine, since flow dissector skips encap header(s) > up to the L4 header. > > Problem is about encrypted traffic, since presumably this L4 header is > opaque for flow dissector ;) BTW, how can we make sure skb->hash is populated before IPSEC ? Relying on forwarding, and skb->hash set by a device might be not enough.
