summaryrefslogtreecommitdiff
path: root/data/templates/firewall/nftables-offload.j2
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2023-09-14 17:18:33 +0300
committerGitHub <noreply@github.com>2023-09-14 17:18:33 +0300
commitc355b07c21b6cac7405a6e575947a181fd2236f5 (patch)
treeb3176c4593566708add72657191991a2744f7d14 /data/templates/firewall/nftables-offload.j2
parentfc5b2871c548698cd3d484c69675454b28c8f843 (diff)
parentf909c17aca4d48598d5eaee0df81bf64967902f0 (diff)
downloadvyos-1x-c355b07c21b6cac7405a6e575947a181fd2236f5.tar.gz
vyos-1x-c355b07c21b6cac7405a6e575947a181fd2236f5.zip
Merge pull request #2062 from vfreex/simple-fastpath-support
T4502: firewall: Add software flow offload using flowtable
Diffstat (limited to 'data/templates/firewall/nftables-offload.j2')
-rw-r--r--data/templates/firewall/nftables-offload.j211
1 files changed, 11 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables-offload.j2 b/data/templates/firewall/nftables-offload.j2
new file mode 100644
index 000000000..6afcd79f7
--- /dev/null
+++ b/data/templates/firewall/nftables-offload.j2
@@ -0,0 +1,11 @@
+{% macro render_flowtable(name, devices, priority='filter', hardware_offload=false, with_counter=true) %}
+flowtable {{ name }} {
+ hook ingress priority {{ priority }}; devices = { {{ devices | join(', ') }} };
+{% if hardware_offload %}
+ flags offload;
+{% endif %}
+{% if with_counter %}
+ counter
+{% endif %}
+}
+{% endmacro %}