Hi pablo, How about the state for this patch? On 12/21/2018 6:12 PM, wenxu@xxxxxxxxx wrote: > From: wenxu <wenxu@xxxxxxxxx> > > This patch allows us to match on the tunnel metadata that is available > of the packet. We can use this to validate if the packet comes from/goes > to tunnel and the corresponding tunnel ID in the iptables. > >