summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorl0crian1 <ryan.claridge13@gmail.com>2025-04-18 10:16:59 -0400
committerl0crian1 <ryan.claridge13@gmail.com>2025-04-18 10:16:59 -0400
commit76c4fcbad8698f277b2b5ed859edb068359af463 (patch)
tree7f1119ee902f4f59eb60334ef1bac8cfa4e65bca
parent382c6fc6ffe76d7ce418018f69902572701215a3 (diff)
downloadvyos-1x-76c4fcbad8698f277b2b5ed859edb068359af463.tar.gz
vyos-1x-76c4fcbad8698f277b2b5ed859edb068359af463.zip
firewall: T7358: add offload option to global state policy
- Fixed CI smoketest failures
-rwxr-xr-xdata/templates/firewall/nftables.j26
1 files changed, 0 insertions, 6 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2
index 4f2783e6f..e07c9a652 100755
--- a/data/templates/firewall/nftables.j2
+++ b/data/templates/firewall/nftables.j2
@@ -180,9 +180,7 @@ table ip vyos_filter {
{% endif %}
return
}
-{% endif %}
-{% if global_options.state_policy.offload is vyos_defined %}
chain VYOS_STATE_POLICY_FORWARD {
{% if global_options.state_policy.offload is vyos_defined %}
counter flow add @VYOS_FLOWTABLE_{{ global_options.state_policy.offload.offload_target }}
@@ -199,7 +197,6 @@ table ip vyos_filter {
return
}
{% endif %}
-}
{% if first_install is not vyos_defined %}
delete table ip6 vyos_filter
@@ -349,9 +346,7 @@ table ip6 vyos_filter {
{% endif %}
return
}
-{% endif %}
-{% if global_options.state_policy.offload is vyos_defined %}
chain VYOS_STATE_POLICY6_FORWARD {
{% if global_options.state_policy.offload is vyos_defined %}
counter flow add @VYOS_FLOWTABLE_{{ global_options.state_policy.offload.offload_target }}
@@ -368,7 +363,6 @@ table ip6 vyos_filter {
return
}
{% endif %}
-}
## Bridge Firewall
{% if first_install is not vyos_defined %}