Pablo, > This patchset introduces a new Netfilter match extension to match > input interfaces that are associated to a layer 3 master device. The > first patch adds the new match to the kernel, the other provides an > extension to userspace iptables to make use of the new match. These patches have been marked as superseded in patchworks, likely due to Florian's nftables version that has been merged. While I very much appreciate the addition of VRF interface matching to nftables, some users still depend on plain iptables for filtering. So I guess there is some value in these patches for those users to extend their filtering with VRF support. Is there a chance of bringing in slavedev matching for iptables, or do we have a policy to implement new features in nftables, only? Thanks, Martin
