From: Tom Herbert <t...@herbertland.com> Date: Thu, 24 Sep 2015 09:30:20 -0700
> This patch set addresses the issue for ILA by adding a fast locator > lookup that occurs before early demux. This is done by using a hook > at NF_INET_PRE_ROUTING. For the backend we implement an rhashtable > that contains identifier to locator to mappings. The table also > allows more specific matches that include original locator and > interface. I really don't think we should use netfilter hooks to perform operations setup outside of netfilter's normal configuration mechanisms. It is not a set of arbitray hooks to take advantage of in another subsystem or facility. If ILA were instead configured inside of netfilter's normal mechanisms then there would be full transparency about whether ILA transformations are performed before or after the user's other netfilter rules. And the user would have full control over this. As implemented here, they don't. So sorry, I'm not too keen on this and I bet if netfilter developers reviewed this patch series they'd have similar objections. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
