On 02/08/2019 02:29 PM, Florian Westphal wrote: > Daniel Borkmann <dan...@iogearbox.net> wrote: >> Right now ipvlan has a hard dependency on CONFIG_NETFILTER and >> otherwise it cannot be built. However, the only ipvlan operation >> mode that actually depends on netfilter is l3s, everything else >> is independent of it. Break this hard dependency such that users >> are able to use ipvlan l3 mode on systems where netfilter is not >> compiled in. >> >> Therefore, this adds a hidden CONFIG_IPVLAN_L3S bool which is >> defaulting to y when CONFIG_NETFILTER is set in order to retain >> existing behavior for l3s. All l3s related code is refactored >> into ipvlan_l3s.c that is compiled in when enabled. > > IIRC L3S is only meaningful with netfilter anyway, so this > looks like a good thing to do.
Yep, agree, it doesn't work without it since inside ipvlan's nfhook there is the final switch to the target ipvlan slave device. :) > Acked-by: Florian Westphal <f...@strlen.de> Thanks!
