On Tue, Jan 23, 2018 at 11:17:32AM +0200, Eyal Birger wrote: > From: Eyal Birger <[email protected]> > > This module allows performing tc classification based on data structures > and implementations provided by netfilter extensions. > > Example use case is classification based on the incoming IPSec policy used > during decpsulation using the 'policy' iptables extension (xt_policy). > > Signed-off-by: Eyal Birger <[email protected]> > > --- > > This ematch tries its best to provide matches with a similar > environment to the one they are used to; Due to the wide range of criteria > supported by matches, I am not able to test every combination of match and > traffic.
Thanks! No objection to the Netfilter bits. So I leave it up to the tc maintainers to decide what to do with this. Acked-by: Pablo Neira Ayuso <[email protected]>
