On Tue, Nov 13, 2012 at 8:05 PM, Ben Pfaff <b...@nicira.com> wrote: > On Tue, Nov 13, 2012 at 07:52:47PM +0200, Ansis Atteka wrote: >> This patch adds support for skb mark matching and set action. >> >> Signed-off-by: Ansis Atteka <aatt...@nicira.com> > > Are there any common use cases for skb marking in which the mark might > vary on a per-packet basis? If so, then having the mark in the match > would have a lot of bad effects, such as proliferation of kernel flows > and possible packet reordering.
Marks are handy for IPSEC tunnels. For example, one can use iptables rules to set mark on IPSEC packets and once that packet is decapulated, then it would retain the same skb mark. In this scenario marks would not change on a per-packet basis. I think that Jesse also had some other use-cases in mind. I would have to talk with him to get more details. _______________________________________________ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev
