From: Martynas Pumputis <martynas@weave.works> Date: Tue, 10 Jan 2017 17:29:45 +0000
> Otherwise, no xfrm policy with dport being set can be matched. > > Signed-off-by: Martynas Pumputis <martynas@weave.works> And likewise you should also be adding the source port, since it is available, to the route lookup as well.