On 4/2/17 10:57 PM, Jack Ma wrote:
> diff --git a/net/ipv4/netfilter.c b/net/ipv4/netfilter.c
> index c0cc6aa..07168d4 100644
> --- a/net/ipv4/netfilter.c
> +++ b/net/ipv4/netfilter.c
> @@ -46,6 +46,14 @@ int ip_route_me_harder(struct net *net, struct sk_buff
> *skb, unsigned int addr_t
>
Hi David,
I formatted a patch to support vrf flow passed by iptables(mangle table). And
previously, we lost the flow.oif which would result in a routing look-up
failure. This patch wraps vrf response flow with the correct master interface
by using the skb->dev, which was set to the real ingress
