On 1/23/17 7:39 PM, Andy Lutomirski wrote: > I'm not sure I followed what you meant. If I understood right (which > is a big if) you're saying that ip vrf when run in a netns works > correctly in that netns. I agree, but I think that it would continue > to work (even more reliably) if the hooks only executed in the netns > in which they were created. I think that would probably be a good > improvement, and it could be done on top of my patch, but I'm not > about to write that code for 4.10.
Sounds like an efficiency on the implementation that does not require limiting the code today to just init namespace.
