firewall-controller
firewall-controller copied to clipboard
Add a flowtable to speed up forwarding
references #157
According to: https://www.kernel.org/doc/html/latest/networking/nf_flowtable.html#layer-2-encapsulation we do not need to specify every interface, instead lan0/lan1 should be sufficient
Another Post: https://www.ubicloud.com/blog/improving-network-performance-with-linux-flowtables
TODO:
- [ ] measure impact
- [ ] check if this is better placed in the metal table, seems so, with priority 0
- [ ] check if accounting and NAT still works
- [x] fix tests
- [ ] enable accounting e.g.
sysctl -w net.netfilter.nf_conntrack_acct=1 - [ ] check if accounting of external/internal traffic still works
- [ ] Does not work anymore, requires a ebpf module for that