On Thu, 15 Oct 2020 18:30:29 +0200 Pablo Neira Ayuso wrote: > The following patchset adds infrastructure to augment the Netfilter > flowtable fastpath [1] to support for local network topologies that > combine IP forwarding, bridge and vlan devices. > > A typical scenario that can benefit from this infrastructure is composed > of several VMs connected to bridge ports where the bridge master device > 'br0' has an IP address. A DHCP server is also assumed to be running to > provide connectivity to the VMs. The VMs reach the Internet through > 'br0' as default gateway, which makes the packet enter the IP forwarding > path. Then, netfilter is used to NAT the packets before they leave to > through the wan device. Hi Pablo, I should have looked at this closer yesterday, but I think it warrants a little more review than we can afford right now. Let's take it after the merge window, sorry!