Skip to content

Instantly share code, notes, and snippets.

@vfreex
Created April 2, 2020 17:16
Show Gist options
  • Save vfreex/89c13e781047855991a8ad59d9a7fd83 to your computer and use it in GitHub Desktop.
Save vfreex/89c13e781047855991a8ad59d9a7fd83 to your computer and use it in GitHub Desktop.
netfilter flow offload example
table inet flowoffload {
flowtable f {
hook ingress priority 0
devices = { eno1, eno2, ens1f0, ens1f1, virbr0, virbr-cube-kvm }
}
chain flowoffload {
type filter hook forward priority 0; policy accept;
ip protocol { tcp, udp } flow offload @f
ip6 nexthdr { tcp, udp } flow offload @f
counter
ct state established,related counter accept
ip protocol { tcp, udp } accept
ip6 nexthdr { tcp, udp } accept
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment