Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-21 Thread Laura García Liébana
Hi Daniel, On Fri, Sep 18, 2020 at 10:31 PM Daniel Borkmann wrote: > > On 9/17/20 12:28 PM, Laura García Liébana wrote: > > On Tue, Sep 15, 2020 at 12:02 AM Daniel Borkmann > > wrote: > >> On 9/14/20 1:29 PM, Laura García Liébana wrote: > >>> On Fri,

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-17 Thread Laura García Liébana
Hi Daniel, On Tue, Sep 15, 2020 at 12:02 AM Daniel Borkmann wrote: > > On 9/14/20 1:29 PM, Laura García Liébana wrote: > > On Fri, Sep 11, 2020 at 6:28 PM Daniel Borkmann > > wrote: > >> On 9/11/20 9:42 AM, Laura García Liébana wrote: > >>> On Tue,

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-14 Thread Laura García Liébana
Hi Daniel, On Fri, Sep 11, 2020 at 6:28 PM Daniel Borkmann wrote: > > On 9/11/20 9:42 AM, Laura García Liébana wrote: > > On Tue, Sep 8, 2020 at 2:55 PM Daniel Borkmann wrote: > >> On 9/5/20 7:24 AM, Lukas Wunner wrote: > >>> On Fri, Sep 04, 2020 at 11:14:

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-11 Thread Laura García Liébana
Hi Daniel, On Tue, Sep 8, 2020 at 2:55 PM Daniel Borkmann wrote: > > Hi Lukas, > > On 9/5/20 7:24 AM, Lukas Wunner wrote: > > On Fri, Sep 04, 2020 at 11:14:37PM +0200, Daniel Borkmann wrote: > >> On 9/4/20 6:21 PM, Lukas Wunner wrote: > [...] > >> The tc queueing layer which is below is not the t

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-07 Thread Laura García Liébana
Hi Daniel, On Tue, Sep 8, 2020 at 12:11 AM Daniel Borkmann wrote: > > On 9/5/20 1:18 PM, Laura García Liébana wrote: > > On Fri, Sep 4, 2020 at 11:14 PM Daniel Borkmann > > wrote: > [...] > > Something like this seems more trivial to me: > > > > table

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-05 Thread Laura García Liébana
Hi Daniel, On Fri, Sep 4, 2020 at 11:14 PM Daniel Borkmann wrote: > [...] > > Its trivial to achieve with tc/BPF on the existing egress hook today. Probably > takes less time than to write up this mail ... > > root@x:~/x# cat foo.c > > #include > #include > #include > > #ifndef __section > # d

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-05 Thread Laura García Liébana
Hi John, On Fri, Sep 4, 2020 at 5:46 PM John Fastabend wrote: > > Laura García Liébana wrote: > > Hi, > > > > On Thu, Sep 3, 2020 at 7:00 AM John Fastabend > > wrote: > > > > > [...] > > > > > > I don't think it actualy impr

Re: [PATCH nf-next v3 3/3] netfilter: Introduce egress hook

2020-09-04 Thread Laura García Liébana
Hi, On Thu, Sep 3, 2020 at 7:00 AM John Fastabend wrote: > [...] > > I don't think it actualy improves performance at least I didn't observe > that. From the code its not clear why this would be the case either. As > a nit I would prefer that line removed from the commit message. > It hasn't bee

Re: [PATCH nf-next v3 0/3] Netfilter egress hook

2020-08-27 Thread Laura García Liébana
Hi Lukas, thank you for your patches. On Thu, Aug 27, 2020 at 10:55 AM Lukas Wunner wrote: > > Introduce a netfilter egress hook to allow filtering outbound AF_PACKETs > such as DHCP and to prepare for in-kernel NAT64/NAT46. > Actually, we've found 2 additional use cases in container-based nodes