Hi Lukas, thank you for your patches. On Thu, Aug 27, 2020 at 10:55 AM Lukas Wunner <lu...@wunner.de> wrote: > > Introduce a netfilter egress hook to allow filtering outbound AF_PACKETs > such as DHCP and to prepare for in-kernel NAT64/NAT46. >
Actually, we've found 2 additional use cases in container-based nodes that use the egress hook: 1. intra-node DSR load balancing connectivity 2. container-based outbound security policies We've been using your previous patch in an experimental project and it's working fine. Great job!
