Subject: Re: [PATCH ipsec-next v2] xfrm: Use VRF master index if output device is enslaved

From: Steffen Klassert <[email-masked]>
Date: Fri, 21 Aug 2015 22:31:32 +0200

On Fri, Aug 21, 2015 at 02:11:21AM +0300, Nikolay Aleksandrov wrote:
> 
> > On Aug 21, 2015, at 1:06 AM, David Ahern <[email-masked]> wrote:
> > 
> > Directs route lookups to VRF table. Compiles out if NET_VRF is not
> > enabled. With this patch able to successfully bring up ipsec tunnels
> > in VRFs, even with duplicate network configuration.
> > 
> > Signed-off-by: David Ahern <[email-masked]>
> > ---
> > v2
> > - use vrf_master_ifindex rather than vrf_master_ifindex_rcu
> > 
> > net/ipv4/xfrm4_policy.c | 7 +++++--
> > net/ipv6/xfrm6_policy.c | 7 +++++--
> > 2 files changed, 10 insertions(+), 4 deletions(-)
> > 
> 
> Looks good to me,
> 
> Acked-by: Nikolay Aleksandrov <[email-masked]>

David, can you please take this directly into net-next?

Acked-by: Steffen Klassert <[email-masked]>