This patchset (not tested) shows how it is possible to create a socket specifying the network namespace destination. That should allow a single process to handle several network namespaces. --