diff options
| author | Stijn Tintel | 2021-10-14 18:50:41 +0000 |
|---|---|---|
| committer | Stijn Tintel | 2022-01-06 12:49:06 +0000 |
| commit | be3b4e6717257c6b439f72127526072eacc6b514 (patch) | |
| tree | 546e4a3680eab9968f8450a50d650dc755c60bad | |
| parent | 85b74f35e4a7aa6b98c5a339a990be1fc2e338e2 (diff) | |
| download | firewall4-be3b4e6717257c6b439f72127526072eacc6b514.tar.gz | |
treewide: support hardware flow offloading
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Reviewed-by: Jo-Philipp Wich <jo@mein.io>
| -rw-r--r-- | root/usr/share/firewall4/templates/ruleset.uc | 3 | ||||
| -rw-r--r-- | root/usr/share/ucode/fw4.uc | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/root/usr/share/firewall4/templates/ruleset.uc b/root/usr/share/firewall4/templates/ruleset.uc index 9c69aec..e392ada 100644 --- a/root/usr/share/firewall4/templates/ruleset.uc +++ b/root/usr/share/firewall4/templates/ruleset.uc @@ -10,6 +10,9 @@ table inet fw4 { flowtable ft { hook ingress priority 0; devices = {{ fw4.set(devices, true) }}; +{% if (fw4.default_option("flow_offloading_hw")): %} + flags offload; +{% endif %} } {% endif %} diff --git a/root/usr/share/ucode/fw4.uc b/root/usr/share/ucode/fw4.uc index 3469b50..7d20871 100644 --- a/root/usr/share/ucode/fw4.uc +++ b/root/usr/share/ucode/fw4.uc @@ -1639,7 +1639,7 @@ return { custom_chains: [ "bool", null, UNSUPPORTED ], disable_ipv6: [ "bool", null, UNSUPPORTED ], flow_offloading: [ "bool", "0" ], - flow_offloading_hw: [ "bool", null, UNSUPPORTED ] + flow_offloading_hw: [ "bool", "0" ] }); if (defs === false) { |