On Thu, Jun 20, 2019 at 6:43 AM Paul Blakey <pa...@mellanox.com> wrote: > > Hi, > > This patch series add connection tracking capabilities in tc sw datapath. > It does so via a new tc action, called act_ct, and new tc flower classifier > matching > on conntrack state, mark and label.
Thanks for more detailed description here. I still don't see why we have to do this in L2, mind to be more specific? IOW, if you really want to manipulate conntrack info and use it for matching, why not do it in netfilter layer as it is where conntrack is? BTW, if the cls_flower ct_state matching is not in upstream yet, please try to push it first, as it is a justification of this patchset. Thanks.
