[ovs-dev] [PATCH 3/3] tunnel: set skb mark for IPsec tunnel packets

[Ben Pfaff]

On Thu, Feb 14, 2013 at 11:50:53AM -0800, Ansis Atteka wrote:
> The new ovs-monitor-ipsec implementation will use skb marks in
> IPsec policies. This patch will configure datapath to use these
> skb marks for IPsec tunnel packets.
> 
> Issue: 14870
> Signed-off-by: Ansis Atteka <aatteka at nicira.com>

This provides a way to set the skb_mark to a nonzero value, but I see
nothing that would ever set it back to zero.  What happens if actions
output to an IPsec tunnel, then later to a non-IPsec tunnel?