[lvs-users] netfilter match for ipvs connections

[Siim Põder <windo@xxxxxxxxxxxxxxx>]

Yo!

I'll ask again, as I think someone might yet have an opinion on this:

Would it make sense in having a netfilter match that would look up
connections on ipvs connection table? That would allow for filtering
outbound packets in FORWARD without having to export the connections to
conntrack and for a more consistent action as the outbound check would
be the same as the inbound check (based on ipvs knowledge of the
connection).

And also, are there maybe peculiarities of ipvs connection tables that
would make this infeasible? I'd be willing to look into it, if there was
some opinion of it making sense.

Siim