From: Eric Dumazet <redacted>
Date: Fri, 28 Aug 2015 18:31:07 -0700

On Fri, 2015-08-28 at 17:34 -0700, David Ahern wrote:

quoted

Currently the VRF driver registers an Rx handler for enslaved devices.
The handler switches the skb->dev to the VRF device and sends it back for
another pass. While this works fine a side effect is that it bypasses
netfilter with the skb set to the original device.

Arg ... yet another hook in packet processing fast path...

What are long term plans for VRF ? Will it stay VRF-Lite or what ?

+1