From: Toke Høiland-Jørgensen <toke@xxxxxxx> Date: Wed, 23 May 2018 22:38:30 +0200 > How would this work? On egress the core networking flow dissector records what you need somewhere in SKB or wherever. You later retrieve it at egress time after NAT has occurred. > It's about making sure the per-host fairness works when NATing, so > we can distribute bandwidth between the hosts on the local LAN > regardless of how many flows they open. Ok, understood. > But it's not unreasonable to expect people who do NAT in eBPF to > also set skb->tc_classid if they want pre-nat host fairness, is it? And core networking can do it as well. Please remove this conntrack dependency, I don't think it is necessary and it is very short sighted. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html