On Wed, 27 Sep 2017 14:55:09 +0200, Jiri Pirko wrote: > So where do you attach the tc filter instead of eth0? vxlan0?
Yes, vxlan0. I'm pasting the example from earlier in this thread again: This will match: ip link add vxlan0 type vxlan dstport 4789 dev eth0 external ip link set dev vxlan0 up tc qdisc add dev vxlan0 ingress ethtool -K eth0 hw-tc-offload on tc filter add dev vxlan0 protocol ip parent ffff: flower enc_key_id 102 \ enc_dst_port 4789 src_ip 3.4.5.6 skip_sw action [...] while this must NOT match: ip link add vxlan0 type vxlan dstport 4789 dev eth0 external ip link set dev vxlan0 up tc qdisc add dev eth0 ingress ethtool -K eth0 hw-tc-offload on tc filter add dev eth0 protocol ip parent ffff: flower enc_key_id 102 \ enc_dst_port 4789 src_ip 3.4.5.6 skip_sw action [...] Jiri
