quoted

This would be be great. I've recently ran into some issues with
the overhead of the Android firewall setup.

So basically you need 4 extra bytes in sk_buff. How about:

- shrinking skb->priority to 2 byte

That wouldn't work, see SO_PRIORITY and such (4 bytes) ...

But does anybody really use the full 4 bytes for the priority?
SO_PRIORITY could well truncate the value.

quoted

- skb_iff is either skb->dev->iff or 0. so it could be replaced with a
single bit flag for the 0 case.

... and that one wouldn't work on ingress.

Please explain.

-Andi