On 10/28/16 5:28 AM, Pablo Neira Ayuso wrote: > I saw those, I would really like to have a closer look at David > Ahern's usecase since that skb iif mangling looks kludgy to me, and > given this is exposing a new helper for general use, not only vrf, it > would be good to make sure helpers provide something useful for > everyone. So that new helper is questionable at this stage IMO. I'm > concerned that people may start using bpf as the adhesive tape to glue > things to solve probably design problems.
It's changing sk_bound_dev_if on a socket when the socket is created, not skb iif. I explain the need in the cover letter. I have also explained the use case in the other attempts to solve this problem -- a stand alone l3mdev cgroup and adding a default setting to the task struct.
