On 1/24/19 12:34 PM, Peter Oskolkov wrote: > This patchset implements BPF_LWT_ENCAP_IP mode in bpf_lwt_push_encap > BPF helper. It enables BPF programs (specifically, BPF_PROG_TYPE_LWT_IN > and BPF_PROG_TYPE_LWT_XMIT prog types) to add IP encapsulation headers > to packets (e.g. IP/GRE, GUE, IPIP). > > This is useful when thousands of different short-lived flows should be > encapped, each with different and dynamically determined destination. > Although lwtunnels can be used in some of these scenarios, the ability > to dynamically generate encap headers adds more flexibility, e.g. > when routing depends on the state of the host (reflected in global bpf > maps). > > V2 changes: Added flowi-based route lookup, IPv6 encapping, and > encapping on ingress. > >
I skimmed over the patches and nothing really jumps out. I do question whether it will work with VRFs. I hope to find time to test it; most likely that will not happen before Monday.