Kmod-nft-offload Jun 2026

opkg update opkg install kmod-nft-offload

When a connection (like a video stream or a large download) is established, most packets in that stream are predictable. Rather than checking every single packet against every firewall rule, the module "offloads" these established flows to a specialized flow table.

nft list flowtables

firewall.@defaults[0].flow_offloading_hw='1' (Hardware active) Conclusion

Generally improves overall latency by relieving a fully loaded CPU. OpenWrt Wiki 4. Limitations & Known Issues Software flow offloading implications - OpenWrt Forum kmod-nft-offload

This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.

When a router processes network traffic, every single packet typically traverses the Linux kernel network stack, hitting multiple firewall tables, connection tracking ( conntrack ) systems, and NAT rules. On embedded devices with lower-powered CPUs, this heavy packet-by-packet inspection creates a severe performance bottleneck. opkg update opkg install kmod-nft-offload When a connection

Let's break down the key components:

: Requires kernel , kmod-nf-flow , and kmod-nft-nat . OpenWrt Wiki 4

Hardware offloading pushes the routing data directly into the Network Processing Unit (NPU) or Application-Specific Integrated Circuit (ASIC) of the router's SoC (System on a Chip).

sudo ethtool -K eth0 hw-tc-offload on sudo ethtool -K eth1 hw-tc-offload on