Kmod-nft-offload !!hot!! Instant

In modern OpenWrt releases (starting from version 22.03 and up), the firewall shifted from iptables to nftables . kmod-nft-offload is the kernel module that provides the underlying support for and Hardware Flow Offloading within this nftables environment.

To use kmod-nft-offload , you'll need to: kmod-nft-offload

sudo modprobe nft_offload # Verify it exists in kernel modules list lsmod | grep nft_offload In modern OpenWrt releases (starting from version 22

: Users have reported that adding the physical WAN interface instead of the virtual PPPoE interface to the flowtable can lead to speed drops (e.g., from 1Gb/s to 200Mb/s). Ensure your configuration targets the correct interface. Enabling the Feature Ensure your configuration targets the correct interface

Not all rules can offload: ✅ Supported: IP forwarding, MAC rewrite, basic VLAN ❌ Unsupported: Stateful matching (ct), logging, dynamic sets, NAT (on some hardware)