Thanks for updating the patch title based on Rickey's suggestion. The SAUCE patch solution with namespace isolation looks good, I can see similar implementation in ipsec test too. I recommend to try to upstream this if possible. Acked-by: Po-Hsu Lin <po-hsu.lin at canonical.com>