[FS#4239] flow_offloading_hw doesn't work with nftables (mt7621)

OpenWrt Bugs openwrt-bugs at lists.openwrt.org
Thu Jan 27 00:25:43 PST 2022


THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#4239 - flow_offloading_hw doesn't work with nftables (mt7621)
User who did this - Hao Cheng (tkit1994)

----------
How can I add wlan0 and wlan1 to flowtable devices?
I can successfully add lan1 and lan2. But if I add wlan0 or wlan1 to it, the following error appears:


/tmp/nftables.nft:4:12-13: Error: Could not process rule: Not supported
	flowtable ft {
	          ^^
/tmp/nftables.nft:22:29-40: Error: Could not process rule: No such file or directory
		meta l4proto { tcp, udp } flow add @ft
 

Here is part of my nftables rule.

root at OpenWrt:~# cat /tmp/nftables.nft
flush ruleset

table inet fw4 {
	flowtable ft {
		hook ingress priority filter;
		devices = { wan, lan1, lan2, wlan0};
		flags offload;
	}

	chain input {
		type filter hook input priority filter; policy accept;
		iifname "lo" accept comment "!fw4: Accept traffic from loopback"
		ct state established,related accept comment "!fw4: Allow inbound established and related flows"
		ct state invalid drop comment "!fw4: Drop flows with invalid conntrack state"
		tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets"
		iifname "br-lan" jump input_lan comment "!fw4: Handle lan IPv4/IPv6 input traffic"
		iifname "wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic"
	}

	chain forward {
		type filter hook forward priority filter; policy drop;
		meta l4proto { tcp, udp } flow add @ft
		ct state established,related accept comment "!fw4: Allow forwarded established and related flows"
		ct state invalid drop comment "!fw4: Drop flows with invalid conntrack state"
		iifname "br-lan" jump forward_lan comment "!fw4: Handle lan IPv4/IPv6 forward traffic"
		iifname "wan" jump forward_wan comment "!fw4: Handle wan IPv4/IPv6 forward traffic"
		jump handle_reject
	}


My device is mir3g with mt7621. 
----------

More information can be found at the following URL:
https://bugs.openwrt.org/index.php?do=details&task_id=4239#comment10488

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.



More information about the openwrt-bugs mailing list