Re: [PATCH RFC 1/1] xfrm: dst lookup doesn't account for fwmark

2016-08-16 Thread Doug Applegate
If route table includes routing based on fwmark, xfrm will not take it into account when routing ipsec traffic. We address this issue by adding fwmark information before calling route lookup. Also simplify lookup by passing the entire flow struct rather than tos, oif, and fwmark as individual param

Re: [PATCH RFC 1/1] xfrm: dst lookup doesn't account for fwmark

2016-07-27 Thread Steffen Klassert
On Fri, Jul 22, 2016 at 03:50:43PM -0600, Doug Applegate wrote: > If route table includes routing based on fwmark, xfrm will not take it > into account when routing ipsec traffic. We address this issue by adding > fwmark information before calling route lookup. > > Signed-off-by: Doug Applegate >

[PATCH RFC 1/1] xfrm: dst lookup doesn't account for fwmark

2016-07-22 Thread Doug Applegate
If route table includes routing based on fwmark, xfrm will not take it into account when routing ipsec traffic. We address this issue by adding fwmark information before calling route lookup. Signed-off-by: Doug Applegate --- include/net/xfrm.h | 3 ++- net/ipv4/xfrm4_policy.c | 15 +++