diff options
| author | l0crian1 <ryan.claridge13@gmail.com> | 2025-04-16 12:31:34 -0400 |
|---|---|---|
| committer | l0crian1 <ryan.claridge13@gmail.com> | 2025-04-16 14:49:44 -0400 |
| commit | 382c6fc6ffe76d7ce418018f69902572701215a3 (patch) | |
| tree | 137b4193cd6a8e4b31c639740ea1957c7bdf0d94 /interface-definitions/include | |
| parent | 9e47c2153be7cc0e5ed21ca8a976336d4bf872d8 (diff) | |
| download | vyos-1x-382c6fc6ffe76d7ce418018f69902572701215a3.tar.gz vyos-1x-382c6fc6ffe76d7ce418018f69902572701215a3.zip | |
firewall: T7358: add offload option to global state policy
Since the jump to the global state chain is inserted before all rules,
it wasn't possible to use offload with the global state policies
This commit adds a new chain for offloaded traffic in the forward
chain and jumps to that chain. Please enter the commit message for your changes. Lines starting
Diffstat (limited to 'interface-definitions/include')
| -rw-r--r-- | interface-definitions/include/firewall/global-options.xml.i | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/interface-definitions/include/firewall/global-options.xml.i b/interface-definitions/include/firewall/global-options.xml.i index 355b41fde..7393ff5c9 100644 --- a/interface-definitions/include/firewall/global-options.xml.i +++ b/interface-definitions/include/firewall/global-options.xml.i @@ -217,6 +217,14 @@ <help>Global firewall state-policy</help> </properties> <children> + <node name="offload"> + <properties> + <help>All stateful forward traffic is offloaded to a flowtable</help> + </properties> + <children> + #include <include/firewall/offload-target.xml.i> + </children> + </node> <node name="established"> <properties> <help>Global firewall policy for packets part of an established connection</help> |