Re: [PATCH nf-next] netfilter: nf_tables: add xfrm expression

[Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>]

On Mon, Sep 03, 2018 at 06:09:40PM +0200, Florian Westphal wrote:
> supports fetching saddr/daddr of tunnel mode states, request id and spi.
> If direction is 'in', use inbound skb secpath, else dst->xfrm.

Nice extension, applied thanks.