diff options
author | Felix Fietkau <nbd@nbd.name> | 2018-04-05 14:44:40 +0200 |
---|---|---|
committer | Felix Fietkau <nbd@nbd.name> | 2018-04-05 14:44:43 +0200 |
commit | 35b3e74a184b709b8ddfaaa094919a656a6ec059 (patch) | |
tree | 0325efc231eaf880109e5664787354fc8e879b8d | |
parent | 5cdf15eead8153f81c3f80c4f58164f950845ac1 (diff) | |
download | firewall3-35b3e74a184b709b8ddfaaa094919a656a6ec059.tar.gz |
defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule
Enables hardware offload support where supported
Signed-off-by: Felix Fietkau <nbd@nbd.name>
-rw-r--r-- | defaults.c | 3 | ||||
-rw-r--r-- | options.h | 1 |
2 files changed, 4 insertions, 0 deletions
@@ -58,6 +58,7 @@ const struct fw3_option fw3_flag_opts[] = { FW3_OPT("custom_chains", bool, defaults, custom_chains), FW3_OPT("disable_ipv6", bool, defaults, disable_ipv6), FW3_OPT("flow_offloading", bool, defaults, flow_offloading), + FW3_OPT("flow_offloading_hw", bool, defaults, flow_offloading_hw), FW3_OPT("__flags_v4", int, defaults, flags[0]), FW3_OPT("__flags_v6", int, defaults, flags[1]), @@ -236,6 +237,8 @@ fw3_print_default_head_rules(struct fw3_ipt_handle *handle, fw3_ipt_rule_comment(r, "Traffic offloading"); fw3_ipt_rule_extra(r, "-m conntrack --ctstate RELATED,ESTABLISHED"); fw3_ipt_rule_target(r, "FLOWOFFLOAD"); + if (defs->flow_offloading_hw) + fw3_ipt_rule_addarg(r, false, "--hw", NULL); fw3_ipt_rule_append(r, "FORWARD"); } @@ -290,6 +290,7 @@ struct fw3_defaults bool custom_chains; bool auto_helper; bool flow_offloading; + bool flow_offloading_hw; bool disable_ipv6; |