Skip to content

ruleset: use low-jitter vmap gadget to dispatch ct states - #103

Draft
brada4 wants to merge 1 commit into
openwrt:masterfrom
brada4:vmaps
Draft

brada4 wants to merge 1 commit into
openwrt:masterfrom
brada4:vmaps

Conversation

@brada4

@brada4 brada4 commented Sep 7, 2026

Copy link
Copy Markdown

Measurably eliminates re-orders forwarding, as for online tests adds one grade to bufferbloat measurements in an instant

Throughput not affected, Archer C7V5(single-gmac ath79) exhibits 400Mbps throughput NAT or flat routing, over 650Mbps without firewall in flat config, sw offload reached bidirectional gigabit on gmac port at 65% CPU, should be able to approach but not reach gigabit with 2gmac device

Measurably eliminates re-orders forwarding, as for online tests adds one
grade to bufferbloat measurements in an instant

Throughput not affected, Archer C7V5(single-gmac ath79) exhibits 400Mbps
throughput NAT or flat routing, over 650Mbps without firewall in flat
config, sw offload reached bidirectional gigabit on gmac port at 65%
CPU, should be able to approach but not reach gigabit with 2gmac device

- There are packets in two states at once, vmdgets frantically drop
  those REF: https://bugzilla.netfilter.org/show_bug.cgi?id=1834
- flow offload is postponed to tcp seq agreed / udp replied as offload engines
  skip basic ct validations and can ingest one-way half-state
- separate offload chain permits users to override offloads to their
  liking, new parameter can disable offload on icmp frag-needed etc
- Per-zone invalid logging gone, one can log them using sysctl

Caveat: tests skipped, got some plans to add more around same lines,
will fix them up if needed

Signed-off-by: Andris PE <neandris@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant