> isn't veth too much overhead ? (I'm a bit worried about veth performance, > see http://www.opencloudblog.com/?p=96) People always compare performance of OVSIntPort with full-featured linux netfilter code. I wonder how performance compare when running an OVS controller implementing full connection tracking?