netfilter: Use l3mdev flow key when re-routing mangled packets
authorMartin Willi <martin@strongswan.org>
Tue, 19 Apr 2022 13:47:01 +0000 (15:47 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 16 May 2022 11:03:29 +0000 (13:03 +0200)
commit2c50fc04757f16427e6213989cee9182c50e2c8a
tree69c536041d60572fc9e9f67e4c283bf5777b0478
parent5cf15ce3c8f1ef431dc9fa845c6d1674f630ecd1
netfilter: Use l3mdev flow key when re-routing mangled packets

Commit 40867d74c374 ("net: Add l3mdev index to flow struct and avoid oif
reset for port devices") introduces a flow key specific for layer 3
domains, such as a VRF master device. This allows for explicit VRF domain
selection instead of abusing the oif flow key.

Update ip[6]_route_me_harder() to make use of that new key when re-routing
mangled packets within VRFs instead of setting the flow oif, making it
consistent with other users.

Signed-off-by: Martin Willi <martin@strongswan.org>
Reviewed-by: David Ahern <dsahern@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter.c
net/ipv6/netfilter.c