Kmod-nft-offload

Here's an example nftables configuration:

nft add rule ip filter forward iif eth0 oif eth1 ip daddr 192.168.1.0/24 offload kmod-nft-offload

To understand why kmod-nft-offload is revolutionary, consider standard packet processing: Here's an example nftables configuration: nft add rule

kmod-nft-offload is a specialized but vital module for high-performance Linux networking. It bridges the gap between the flexibility of software-defined networking (NFTables) and the speed of hardware switching. If you are building a custom router or optimizing an OpenWrt setup, enabling this module with proper nftables rules is the key to achieving gigabit-speed firewalling. kmod-nft-offload