On Tue, 20 Aug 2019 12:48:05 +0200, Pablo Neira Ayuso wrote: > Hi, > > This patchset adds payload mangling offload support for Netfilter: > > 1) Adapt existing drivers to allow for mangling up to four 32-bit words > with one single flow_rule action. Hence, once single action can be > used to mangle an IPv6 address. > > 2) Add support for netfilter packet mangling. Why pick 128b as a unit, because that's nftables' word size? :/ Reality is unless core coalesces _all_ consecutive rewrites drivers will have to do their own coalescing, anyway. We suffered through enough haphazard "updates", I don't like this either.