From be3b4e6717257c6b439f72127526072eacc6b514 Mon Sep 17 00:00:00 2001 From: Stijn Tintel Date: Thu, 14 Oct 2021 20:50:41 +0200 Subject: [PATCH] treewide: support hardware flow offloading Signed-off-by: Stijn Tintel Reviewed-by: Jo-Philipp Wich --- root/usr/share/firewall4/templates/ruleset.uc | 3 +++ root/usr/share/ucode/fw4.uc | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/root/usr/share/firewall4/templates/ruleset.uc b/root/usr/share/firewall4/templates/ruleset.uc index 9c69aec..e392ada 100644 --- a/root/usr/share/firewall4/templates/ruleset.uc +++ b/root/usr/share/firewall4/templates/ruleset.uc @@ -10,6 +10,9 @@ table inet fw4 { flowtable ft { hook ingress priority 0; devices = {{ fw4.set(devices, true) }}; +{% if (fw4.default_option("flow_offloading_hw")): %} + flags offload; +{% endif %} } {% endif %} diff --git a/root/usr/share/ucode/fw4.uc b/root/usr/share/ucode/fw4.uc index 3469b50..7d20871 100644 --- a/root/usr/share/ucode/fw4.uc +++ b/root/usr/share/ucode/fw4.uc @@ -1639,7 +1639,7 @@ return { custom_chains: [ "bool", null, UNSUPPORTED ], disable_ipv6: [ "bool", null, UNSUPPORTED ], flow_offloading: [ "bool", "0" ], - flow_offloading_hw: [ "bool", null, UNSUPPORTED ] + flow_offloading_hw: [ "bool", "0" ] }); if (defs === false) { -- 2.30.2