On 7/4/18 11:56 AM, Xin Long wrote: >> your commands are not a proper test. The test should succeed and fail >> based on the routing lookup, not iptables rules. > A proper test can be done easily with netns, as vrf can't isolate much. > I don't want to bother forwarding/ directory with netns, so I will probably > just drop this selftest, and let the feature patch go first. >
BTW, VRF isolates at the routing layer and this is a routing change. We need to understand why it does not work with VRF. Perhaps another tweak is needed for VRF.
