On Thursday 2015-11-05 18:43, David Hinkle wrote: >we want our proxy server to be able to determine which interface >each socket is using [...] Right now the best idea I have is to >reserve [and use] some bits of the connmark [...] I can get to the >conntrack data, but I doesn't look like conntrack is recording which >interfaces each flow is using. A socket, and a flow, may be using multiple interfaces. Separate packets can take different paths, and they may loop through encapsulation/tunnels. And AF_KCM brings a new can of Gagh into the game. >Is there an API I could call from userspace to figure out what >interface is being used by a specific connection? RTM_GETROUTE (man 7 rtnetlink). A demonstration can be found with `ip route get 62.245.227.22`. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html